Privacy Policy

---

The Culture and Risk Collective is committed to protecting personal data and ensuring confidentiality when providing HR consultancy services.

When providing services we may process:

• Contact information
   
• Employment information
   
• HR documentation
   
• Workplace investigation information
   
• Organisational data
   

This data is only collected where necessary to provide HR services.

Data is processed under one or more of the following lawful bases:

• Contractual necessity
   
• Legitimate business interest
   
• Legal obligations relating to employment law
   

All information shared with The Culture and Risk Collective during consultancy work will be treated as confidential and handled with professional discretion.

Data will be stored securely and retained only for as long as necessary to deliver services or meet legal obligations.

Personal data will not be shared with third parties unless:

• Required by law
   
• Necessary for professional advice
   
• Consent has been provided
   

Clients remain the data controller for employee data provided and must ensure they have lawful authority to share information.

For questions regarding data protection please contact:

natalie@cultureandriskcollective.co.uk