Last updated: September 2026
Education Leaders is operated by Education Leaders Ltd, a private limited company registered in England and Wales (company number 15244037). Registered office: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF. This notice covers educationleaders.co and the services run from it. It's written to comply with the UK GDPR and the UK Data Protection Act 2018.
What we collect, and when
- The Cognitive Overload Diagnostic. First name and email, plus the ticked consent box. Your quiz answers stay in your browser only — they're never sent to us.
- The Leadership Levers newsletter. First name and email, plus your subscription preferences. Managed in Kit (ConvertKit).
- Programme applications and calls. Whatever you choose to share in a form or in conversation (name, role, school, what you're working on).
- Teams calls, recordings and transcripts. We hold calls, coaching sessions and programme sessions on Microsoft Teams. Any of them may be recorded or transcribed. If one is, we'll tell everyone at the start, and Teams shows a notice on screen for as long as recording or transcription is running. A recording captures what's said and shown, including your name, voice and video if your camera is on; a transcript captures what's said, with names against it. If you'd rather not be recorded, tell us before or at the start, and you're always free to keep your camera off.
- Server logs. Standard request logs from our hosting (IP, referrer, user agent). Kept for 30 days for security and abuse prevention. No tracking pixels, no advertising IDs, no third-party analytics that profile you.
Why we collect it (lawful basis)
- Consent (Art. 6(1)(a) UK GDPR) for the newsletter and the diagnostic follow-up sequence. You opt in. You can opt out any time.
- Legitimate interest (Art. 6(1)(f)) for short, transactional emails — e.g. confirming a call you booked or sending an invoice. No marketing under this basis.
- Contract (Art. 6(1)(b)) when you've enrolled in a programme — we need your details to actually deliver what you paid for.
- Recordings and transcripts of programme sessions rely on contract, because rewatching a session you missed is part of what you've signed up for. For any other call we rely on legitimate interest: keeping an accurate record of what was agreed, and letting us follow up properly. You can object at any time, and we'll stop recording you or delete your part where we can.
Who sees your data
The list is short, deliberately:
- Kit (ConvertKit, US-based, GDPR-DPA in place). Stores newsletter subscribers and sends emails.
- Cloudflare, our hosting/CDN. Sees request logs in transit.
- Zcal if you book a call. They get your name, email and chosen time.
- Microsoft, which runs Teams. Calls pass through Microsoft's servers, and any recording or transcript is stored in our Microsoft 365 account.
- YouTube (Google), for programme session recordings only. We upload them to YouTube and show them inside the password-protected programme portal, where the other members of your cohort or school can watch them. Session transcripts are shared with them in the same portal.
- Shane. Reads your email and replies to it.
We don't sell your data. We don't share it with advertisers. We don't enrich it with third-party sources. No-one else gets access without your specific consent, except where we're legally required to share it.
How long we keep it
- Newsletter subscribers: until you unsubscribe (every email has a one-click link), then deleted within 30 days.
- Diagnostic gate (name + email): same as newsletter — we don't store this separately.
- Quiz answers: only in your browser's localStorage. Clear your browser data or use the "Reset" button on the report page and they're gone.
- Programme participants: seven years after the programme ends, for tax / record-keeping. Then deleted.
- Meeting recordings and transcripts: 12 months after the session, then deleted, including any copy on YouTube or in the programme portal.
- Server logs: 30 days, then rotated.
Your rights
Under GDPR you can ask us to:
- See what we hold about you (subject access request).
- Correct anything inaccurate.
- Delete your data ("right to be forgotten").
- Export it in a portable format.
- Object to processing, or restrict it.
- Withdraw consent at any time, without giving a reason.
Email hi@educationleaders.co with what you want and we'll act on it within 30 days (usually within 48 hours). If we get it wrong, you can complain to the UK Information Commissioner's Office or your local data protection authority.
Cookies and tracking
The only browser storage we use is one localStorage entry called el-diagnostic-v1, which keeps your in-progress diagnostic answers on your device only. No cookies for analytics, no cookies for ads, no cookies for fingerprinting. We don't use Google Analytics.
Some pages show videos from YouTube. We use YouTube's privacy-enhanced mode, which doesn't store cookies on your device until you press play. Once you do, YouTube's own privacy policy applies to that video.
International transfers
Kit is US-based, and Microsoft and Google may process data outside the UK. Where data leaves the UK, it's covered by each provider's data processing terms, which use Standard Contractual Clauses with the UK Addendum under Article 46 UK GDPR.
Changes to this notice
If we change anything material, we'll update the "last updated" date at the top and email current subscribers before the change takes effect.
Contact
Education Leaders Ltd · hi@educationleaders.co
167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF
Company number: 15244037