Privacy Policy

Updated: September 2026

Kulturalism CIC ("we", "our", "us") is committed to protecting your privacy. This policy explains what personal data we collect, why, what we do with it, and your rights over it. It applies to kulturalism.org and to our shop, forms, mailing list, and letters sent to us by post or email.

We are the data controller. Kulturalism CIC, company number 14675264, registered office 124 City Road, London EC1V 2NX.

Contact: info@kulturalism.org.

What we collect

We only collect what we need for the things you actually do on our site.

If you buy from our shop — your name, email, billing and delivery details, and your order. Card payments are handled by Wix Payments; we do not see or store your full card details.

If you make a donation — payment is handled by PayPal or by card through our payment provider. We receive confirmation of your donation, not your card number.

If you sign up to our mailing list — your name and email address.

If you contact us — If you write to us at Kulture Voice Mail — by post or to info@kulturalism.org, we receive your letter or message, whatever you have chosen to tell us, and any contact details you include.

Automatically, when you visit — our website platform, Wix, collects standard technical data such as your IP address, approximate location, browser and device type, and which pages you view.

Why we use it, and our legal basis

To process and deliver your order — because it is necessary to perform our contract with you.

To process your donation — because it is necessary to complete the transaction you have asked for.

To send you our newsletter — only where you have consented. You can unsubscribe at any time using the link in any email.

To respond to your enquiry — To read and consider a letter you send us, and to reply if you have asked us to — our legitimate interest in this work. To publish your account — only where you have given permission, which you can withdraw at any time.

To run and secure our website and keep proper records — our legitimate interest in operating our organisation, and to meet our legal obligations.

We do not sell your data, we do not use it for advertising, and we do not send marketing by SMS, fax or phone.

Who we share it with

We share personal data only with the providers who help us run the site, and only as far as they need it:

Wix — our website, shop and email platform (host and processor)
Wix Payments — card payment processing for the shop
PayPal — donation processing

We may also disclose data where the law requires it, or to establish or defend a legal claim. We do not pass your data to anyone else for their own marketing.

Some of these providers may process data outside the UK. Where they do, that transfer is covered by the safeguards required under UK data protection law.

How long we keep it

We keep personal data only as long as we need it:

Order and transaction records — as long as required for accounting and tax, normally six years.
Mailing list data — until you unsubscribe.
Enquiries — for as long as needed to deal with your query and a reasonable period after.
Letters and messages sent to Kulture Voice Mail — destroyed or deleted within one month. Where you have given permission to publish, we keep a short note of that permission. Where we have had to act on a safeguarding concern, we keep a short record of what we did and why.

We then delete or anonymise it.

Your rights

Under UK data protection law you have the right to:

ask for a copy of the data we hold about you
have inaccurate data corrected
have your data erased in certain circumstances
restrict or object to how we use your data
ask us to transfer your data to another organisation
withdraw consent at any time, where we rely on consent
complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113

To exercise any of these, email info@kulturalism.org. We respond within one month.

Children

Our website and mailing list are intended for users aged 13 and over. We do not knowingly collect personal data from children under 13, and if we learn that we have, we will delete it.

Please note this is separate from the age guidance on our publications: some of our handbooks are recommended for readers aged 15+ or 16+ because of their subject matter, not for data-protection reasons. See our Legal & Public Interest Disclaimer.

If you are a parent or guardian with a concern about your child's data, contact info@kulturalism.org.

Questionnaire Responses

Kulturalism CIC collects voluntary questionnaire responses to understand people’s experiences of community safety and the criminal justice system, identify recurring themes and inform our public-interest research, reports, educational resources and community work.

The questionnaire does not ask for or automatically collect names or email addresses. Respondents are asked not to provide full addresses, names or information that could identify other individuals. However, free-text responses may still contain personal information, including information concerning victimisation, health or involvement with the criminal justice system.

Responses are processed with the respondent’s consent and stored within Kulturalism CIC’s restricted-access Google Workspace account. Access is limited to the director and anyone specifically authorised by Kulturalism CIC for an appropriate purpose. Google provides the technology used to collect and store the responses.

Kulturalism CIC will only use quotations or information from a response in anonymised form where the respondent has given permission. Identifying details will be removed, and information will not be published where we believe it could identify an individual.

Original questionnaire responses will normally be retained for up to 12 months and will then be securely deleted or anonymised. Properly anonymised research findings and statistics may be retained for longer because they no longer identify an individual.

A respondent may withdraw their consent before their response has been anonymised by contacting info@kulturalism.org. Because the questionnaire does not collect names or email addresses, we may need the approximate submission date and details of the response to identify it.

Other websites

Our site links to other organisations, including support services and government sites. We are not responsible for their privacy practices.