Legal

Privacy Policy

Last updated: March 2026

Overview

Vital Culture is committed to protecting the privacy of every individual who interacts with the Human Stability System™ (HSS™). This policy explains how we collect, use, store, and protect personal information in connection with our services.

We operate in accordance with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and where applicable, the General Data Protection Regulation (GDPR) for individuals in the European Economic Area.

What We Collect

The HSS™ collects two distinct categories of data, each handled under separate privacy protocols:

Leader Pulse (Identified)

Leader pulse responses are collected weekly and are attributed to the individual leader. This data is used to track leadership load, stability signals, and wellbeing over time. It is visible only to the leader themselves and, in aggregate, to authorised administrators. No individual leader data is surfaced at board or governance level.

Team Pulse (Anonymous)

Team pulse responses are collected fortnightly and are fully anonymous. Responses are de-identified at the point of entry. No individual attribution is possible. Data is combined at a team level before any information is surfaced in the system. Leaders never see who said what.

How We Use Your Information

Information collected through the HSS™ is used solely to generate organisational stability insights and interpreted outputs for the client organisation. The system does not produce diagnostic assessments, individual scores, or clinical evaluations. Leaders see interpreted outputs only. We do not use your data for marketing, profiling, or any purpose outside the direct delivery of our services.

Contact information submitted through this website (name, company, enquiry) is used only to respond to your enquiry. We do not add you to mailing lists without your explicit consent.

Data Retention

Organisational data collected through the HSS™ is retained for the duration of the client engagement plus a period of 24 months, unless a shorter or longer period is agreed in the client service agreement. After this period, data is permanently deleted or anonymised beyond recovery.

Website enquiry data is retained for 12 months from the date of submission, after which it is deleted.

Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. All data is stored in secure, encrypted environments. Access is restricted to authorised personnel on a need-to-know basis.

Third-Party Disclosure

We do not sell, trade, or transfer personal information to third parties. We may share data with trusted service providers who assist in operating our systems, provided they agree to keep this information confidential and use it only for the purpose of providing services to us.

We may disclose information where required by law or to protect the rights, property, or safety of Vital Culture, our clients, or others.

Your Rights

You have the right to access, correct, or request deletion of personal information we hold about you. If you are located in the EEA, you also have the right to data portability, the right to restrict processing, and the right to object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Cookies

This website uses minimal analytics cookies to understand how visitors interact with the site. No personally identifiable information is collected through cookies. You can disable cookies in your browser settings at any time.

Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of this page. We encourage you to review this policy periodically.

For questions about this policy or our privacy practices, contact [email protected]