Privacy Policy
Last updated: 28 August 2026
Our approach to privacy
At Culture One, we believe people should understand how their information is used without having to work through unnecessary legal language.
This Privacy Policy explains what personal information we collect through our website and related online services, why we collect it, how we use and protect it, and the choices and rights available to you.
Who we are
Culture One is an Irish business providing DEIB, neurodiversity and workplace wellbeing consulting, advisory and learning services.
Culture One is currently operated by Emily Heslop trading as Culture One. For the purposes of applicable data protection law, Emily Heslop trading as Culture One is the data controller responsible for the personal information described in this policy.
For any questions about privacy or how your personal information is used, please contact:
Emily Heslop
Culture One
Email: emily@cultureone.ie
When Culture One completes its incorporation as a limited company, this policy will be updated with the relevant company details.
What information we collect
The information we collect depends on how you interact with Culture One.
When you contact us
If you make an enquiry through our website or contact us directly, we may collect information such as:
your name
email address
organisation or company
information you include in your message or enquiry.
We use this information to respond to your enquiry, understand what support you may be looking for and continue relevant conversations with you.
Our legal basis will normally be taking steps at your request before entering into a contract, where your enquiry relates to potential Culture One services, or our legitimate interest in responding to and managing genuine business enquiries.
We do not use website enquiry details to automatically add you to a marketing mailing list.
When you book a Discovery Call
Discovery Calls are booked through Calendly. When you make a booking, we may receive information including:
your first and last name
email address
information about the Culture One services you are interested in
information about your organisation or team
organisational priorities, challenges or goals you choose to share
your chosen meeting date, time and time zone
details of any additional guests you choose to invite.
We use this information to arrange the meeting, prepare for our conversation and respond appropriately to your enquiry.
Our legal basis is normally taking steps at your request before entering into a contract and our legitimate interest in efficiently managing prospective client meetings.
Calendly also processes personal information when you use its service. When you follow a Culture One link to Calendly, you are leaving the Culture One website and Calendly's own privacy and cookie information also applies.
When you download a Culture One resource
If you request a resource such as the Workplace Culture Calendar, we may ask for:
your name
email address
organisation or company
role.
We use this information to provide the resource you have requested and manage the resource-download process.
Providing a resource does not automatically subscribe you to marketing emails. If Culture One introduces a newsletter or other email marketing in future, we will provide an appropriate sign-up process and update this Privacy Policy where necessary.
Our legal basis is our legitimate interest in providing resources requested by people interested in Culture One's work and administering those requests.
Website and analytics information
Our website is hosted by Squarespace.
When you visit our website, Squarespace may process technical information such as:
information about your browser, network and device
your IP address
pages you visit
the website or source that referred you to Culture One
interactions with pages and links
dates and times of visits.
Some information is necessary for the website to operate securely and correctly.
Culture One also uses Squarespace Analytics to understand general website traffic and how visitors use the site. Analytics and performance cookies will only be used where you have given permission through our cookie controls.
We use website analytics to understand how our website is being used and to improve its content, accessibility and user experience.
You can find more information in our Cookie Policy.
Sensitive personal information
Culture One's work includes neurodiversity, disability inclusion and wellbeing, but our general website forms are not designed to collect detailed health, disability or other sensitive personal information about individuals.
Please avoid including information about your own or another person's health, disability, diagnosis, neurodivergence or other sensitive circumstances in a general website enquiry unless it is genuinely necessary.
If sensitive personal information is provided to us, we will treat it carefully, limit its use to what is necessary and process or delete it in accordance with applicable data protection law.
Who we share information with
We do not sell personal information.
We may use trusted service providers where necessary to operate Culture One and provide our services. At present, these include:
Squarespace
Provides our website hosting, website forms and website analytics.
Microsoft 365
Supports our business email, calendar and related business communications.
Calendly
Provides online scheduling for Discovery Calls.
We may also disclose personal information to professional advisers, IT providers, regulators, public authorities or other parties where this is reasonably necessary, required by law or needed to establish, exercise or defend legal rights.
We only share information that is appropriate for the relevant purpose.
International transfers
Some of the technology providers we use are international organisations and may process personal information outside Ireland or the European Economic Area, including in the United States.
Where personal information is transferred outside the EEA, we rely on appropriate safeguards required by data protection law. Depending on the provider and transfer, these may include an adequacy decision, participation in the EU-US Data Privacy Framework or European Commission Standard Contractual Clauses.
Squarespace currently confirms that it uses the EU-US Data Privacy Framework and Standard Contractual Clauses where applicable, while Calendly similarly identifies the Data Privacy Framework and Standard Contractual Clauses as transfer mechanisms for EEA personal data.
How long we keep your information
We keep personal information only for as long as it is reasonably necessary for the purpose for which it was collected, or where we need to retain it to meet legal, regulatory, contractual, accounting or other legitimate business requirements.
When deciding how long information should be retained, we consider:
why the information was collected and whether it is still needed for that purpose
the nature and sensitivity of the information
any legal, contractual, accounting or regulatory requirements that apply
whether the information may be needed to establish, exercise or defend legal rights
the potential risks associated with keeping the information for longer than necessary.
When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it.
If an enquiry develops into a client relationship, relevant information may form part of our business, contractual or financial records and may need to be retained for longer to meet legal, financial, contractual or professional requirements.
How we protect information
We take reasonable organisational and technical steps to protect personal information from accidental or unlawful loss, misuse, alteration, disclosure or access.
These include using reputable technology providers, access controls, secure business systems and limiting access to information to those who need it.
No online service can guarantee absolute security, but we aim to collect only the information we need and manage it responsibly.
Your data protection rights
Depending on the circumstances, you may have the right to:
ask for access to personal information we hold about you
ask us to correct inaccurate or incomplete information
ask us to delete your information
ask us to restrict how your information is used
object to certain uses of your information, including processing based on legitimate interests
receive certain information in a portable format
withdraw consent where we rely on consent.
These rights are not absolute in every situation, and data protection law may allow or require us to retain or continue processing certain information.
To exercise a right or ask a question about your information, contact emily@cultureone.ie.
We may need to verify your identity before responding to a request.
Complaints
If you are concerned about how we use your personal information, we would encourage you to contact us first so that we can try to resolve the issue.
You also have the right to make a complaint to the Data Protection Commission in Ireland, or another relevant supervisory authority where applicable.
Children
Culture One's website and services are primarily intended for organisations and adult professionals. We do not knowingly use the website to collect personal information directly from children.
Links to other websites
Our website may contain links to websites operated by other organisations, including Calendly and social media platforms.
Once you leave the Culture One website, the privacy practices of the relevant third party apply. We encourage you to review their privacy information where appropriate.
Changes to this policy
We may update this Privacy Policy as Culture One's services, website, technology or legal obligations change.
The date at the top of this policy shows when it was most recently updated.