Our Commitment to Your Privacy

At CultureFlow, we are committed to protecting your privacy and being transparent about our data practices. This privacy policy explains how we collect, use, and protect information when you visit our website.

Data We Collect

We keep data collection to what we need, and we ask before switching on anything non-essential. On your first visit, only essential technical data is collected. Analytics and marketing stay off until you accept them in our cookie banner, and you can change your choice at any time using Cookie settings in the footer.

• Technical data (always collected). Standard web server log data such as IP address, browser type, referring site, and pages visited. We use this only to keep the site secure and running.
• Information you give us. When you complete a form on our site, such as joining a waitlist or contacting us, we collect the details you provide (typically your name and email). We process these in HubSpot, our customer relationship management (CRM) tool, and use Resend to send any emails you have asked for, such as a confirmation or updates.
• Analytics without cookies. We use PostHog, hosted in the EU, to understand how the site is used so we can improve it. PostHog runs without cookies at all times. It stores nothing on your device and reads nothing from it. Visits are counted using a privacy-preserving identifier calculated on PostHog's servers, and we do not use it to identify you personally. Our lawful basis is our legitimate interest in understanding and improving the site. You can object at any time using the contact details below.
• Analytics with cookies (only with your consent). We use Google Analytics, delivered through Google Tag Manager, to measure traffic and understand how people arrive at the site. It sets cookies on your device and runs only after you accept.
• Marketing (only with your consent). We use the Meta pixel and the LinkedIn Insight Tag, managed through Google Tag Manager, to measure and improve our advertising, including showing relevant CultureFlow ads on those platforms.

Cookies

We use a small number of strictly necessary technical cookies, plus analytics and marketing cookies for the purposes above. Our PostHog analytics do not use cookies. Non-essential cookies are set only after you accept them, and you can withdraw consent at any time via Cookie settings in the footer. Full detail is in our Cookie Policy.

How Long We Keep Data

We keep personal data only as long as we need it:

• Server logs: up to 12 months, for security and troubleshooting.
• Analytics data (PostHog): retained no longer than necessary for analysis, in line with our analytics retention settings.
• Form and CRM data (HubSpot): until you ask us to delete it or unsubscribe, and after that only where the law requires us to keep it.

Third-Party Processors and International Transfers

Some of the tools above are provided by third parties who process data on our behalf: HubSpot (CRM), Resend (email delivery), PostHog (analytics, EU-hosted), Google (analytics and tag management), and Meta and LinkedIn (advertising). Where a provider processes data outside the EEA, that transfer is covered by appropriate safeguards, such as the EU Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework. Each provider has its own privacy policy governing its use of your data.

Contact Information

If you contact us via email at hello@cultureflow.no, we use your contact details only to respond to your enquiry. We will not use them for marketing without your consent.

Your Rights Under GDPR and Norwegian Law

As a Norwegian company, we comply with the General Data Protection Regulation (GDPR) and Norwegian data protection laws. You have the following rights:

• Right to information: To know what data we collect and how we use it
• Right of access: To request a copy of any personal data we hold about you
• Right to rectification: To correct any inaccurate personal data
• Right to erasure: To request deletion of your personal data
• Right to data portability: To receive your data in a structured format
• Right to object: To object to processing of your personal data
• Right to withdraw consent: Where we rely on your consent (analytics and marketing), to withdraw it at any time via Cookie settings, without affecting anything done beforehand
• Right to complain: To lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet)

Third-Party Services

Our website may contain links to social media platforms (Instagram, LinkedIn, Facebook) and other external websites. These third-party services have their own privacy policies, and we are not responsible for their data practices.

Send to Compass Browser Extension

Send to Compass is a Chrome extension for Compass users. When you click it on a LinkedIn profile page, it reads the text of that profile, its Experience and Education pages, and its recent posts, and passes that text to your signed-in Compass account. It only runs when you click it, and only on the profile you are viewing. It does not read pages in the background, does not store anything in your browser, and does not collect your browsing history.

If you paste a LinkedIn URL into Compass and click Read profile, the extension opens that profile in a background tab in your own LinkedIn session, reads it the same way, and closes the tab.

Compass uses the text once to suggest the person's professional background, cultural profile facets and conversation topics. The text is not stored. Only the details you choose to save are kept on the contact in your Compass account. We do not sell this data or use it for advertising.

If your own profile was read this way and you want the saved details removed, contact us at the address below.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us: