Privacy Policy

Introduction

Culture Shield, Inc. ("we," "our," or "us") cares about your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Culture Shield platform, including our website and services (together, the "Services").

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

Information We Collect

Personal Information You Provide

We collect information you give us when you:

• Register for an account
• Complete culture health surveys and assessments
• Request a demo or contact us
• Subscribe to our newsletter
• Participate in user research or feedback sessions
• Communicate with our support team

This information may include:

• Contact information: name, email, phone, job title, organization name
• Account information: username, password (stored encrypted), profile preferences
• Survey responses: anonymized responses to culture health assessments
• Organization data: team size, industry, department structure
• Payment information: billing address and payment method, processed by our payment processor

Information Automatically Collected

When you use the Services we automatically collect:

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: pages visited, features used, time on page, click-through rates
• Cookies and tracking technologies: we use cookies and similar technologies to improve your experience
• Analytics data: aggregated usage statistics and performance metrics

How We Use Your Information

We use the information we collect to:

Deliver the Service

• Provide, maintain, and improve our Services
• Process and analyze culture health survey data
• Generate culture health reports and insights
• Support team collaboration and communication
• Respond to customer support requests

Communicate

• Send service-related notifications and updates
• Share educational content and best practices
• Send marketing communications, with your consent
• Respond to your inquiries

Analyze and Improve

• Identify usage patterns and trends
• Improve the Services and build new features
• Conduct research using anonymized data
• Measure the effectiveness of the platform

Legal and Security

• Comply with legal obligations and regulations
• Protect against fraud and security threats
• Enforce our Terms of Service
• Protect our rights and the rights of others

Survey Confidentiality and Security

Survey Response Anonymity

Survey confidentiality is a core design principle of the Services:

• Individual survey responses are anonymized and cannot be traced back to specific individuals
• Data is reported at the team or organizational level
• Minimum response thresholds protect individual privacy in small groups
• Only authorized administrators can access aggregated reports

Data Security

We use commercially reasonable security practices, including:

• Encryption of data in transit (TLS) and at rest
• Access controls and authentication for our team
• Hosting on managed cloud infrastructure with current security baselines
• Routine backups

No method of transmission or storage is perfectly secure. We work to protect your data, and we will notify you of material security incidents as required by law.

How We Share Your Information

We do not sell your personal information. We may share information in the following situations:

Within Your Organization

• Aggregated culture health data with authorized administrators
• Reports and insights with designated team leaders
• Usage statistics with billing contacts

Service Providers

• Cloud hosting and infrastructure providers
• Payment processors
• Email service providers
• Analytics tools
• Customer support tooling

Legal Requirements

We may disclose information if required by law or in response to:

• Valid legal processes such as subpoenas or court orders
• Government or regulatory requests
• The protection of rights, safety, or property
• Investigation of potential violations of our Terms of Service

Business Transfers

In a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the protections in this Privacy Policy.

Your Rights and Choices

Access and Correction

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data, subject to legal obligations
• Export your data in a portable format

Communication Preferences

You can:

• Opt out of marketing emails via the unsubscribe link
• Manage notification preferences in your account settings
• Contact us to update your communication preferences

Cookie Management

You can control cookies through:

• Browser settings to block or delete cookies
• Our cookie consent manager, where available
• Opt-out tools provided by third-party analytics vendors

Do Not Track

We currently do not respond to "Do Not Track" signals from browsers. You can disable tracking through your browser settings and third-party tools.

Data Retention

We retain your information for as long as needed to:

• Provide the Services to you
• Comply with legal obligations such as tax, accounting, and audit requirements
• Resolve disputes and enforce agreements
• Maintain aggregated analytics and trends

When you close your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law or for legitimate business purposes.

International Data Transfers

Our Services are hosted in the United States. If you access them from outside the U.S., your information will be transferred to and processed in the U.S. We take reasonable steps to protect data during such transfers in line with applicable law.

Children's Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will delete it.

Third-Party Links and Services

Our Services may link to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. Please review their policies before sharing your information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do:

• We will update the "Last Updated" date at the top of this policy
• We will notify you of material changes via email or in-app notification
• Your continued use of the Services after changes constitutes acceptance

Please review this Privacy Policy periodically.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Additional Rights for EU and UK Users

If you are located in the European Union or United Kingdom, you may have additional rights under applicable law, including:

• Right of access: request a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data
• Right to restrict processing: limit how we use your data
• Right to data portability: receive your data in a structured format
• Right to object: object to certain types of processing
• Right to withdraw consent: withdraw consent for data processing
• Right to lodge a complaint: file a complaint with your data protection authority

California Privacy Rights (CCPA)

If you are a California resident, you may have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell personal information)
• Not be discriminated against for exercising your privacy rights

To exercise these rights, please contact us at privacy@getcultureshield.com.