Last updated: May 2026
Education Leaders is run by Shane Leaning (sole proprietor, based in Shanghai). This notice covers educationleaders.co and the services run from it. It's written to comply with the UK / EU GDPR and the UK Data Protection Act 2018.
What we collect, and when
- The Cognitive Overload Diagnostic. First name and email, plus the ticked consent box. Your quiz answers stay in your browser only — they're never sent to us.
- The Leadership Levers newsletter. First name and email, plus your subscription preferences. Managed in Kit (ConvertKit).
- Programme applications and calls. Whatever you choose to share in a form or in conversation (name, role, school, what you're working on).
- Server logs. Standard request logs from our hosting (IP, referrer, user agent). Kept for 30 days for security and abuse prevention. No tracking pixels, no advertising IDs, no third-party analytics that profile you.
Why we collect it (lawful basis)
- Consent (Art. 6(1)(a) UK GDPR) for the newsletter and the diagnostic follow-up sequence. You opt in. You can opt out any time.
- Legitimate interest (Art. 6(1)(f)) for short, transactional emails — e.g. confirming a call you booked or sending an invoice. No marketing under this basis.
- Contract (Art. 6(1)(b)) when you've enrolled in a programme — we need your details to actually deliver what you paid for.
Who sees your data
The list is short, deliberately:
- Kit (ConvertKit, US-based, GDPR-DPA in place). Stores newsletter subscribers and sends emails.
- Cloudflare, our hosting/CDN. Sees request logs in transit.
- Zcal if you book a call. They get your name, email and chosen time.
- Shane. Reads your email and replies to it.
We don't sell your data. We don't share it with advertisers. We don't enrich it with third-party sources. No-one else gets access without your specific consent, except where we're legally required to share it.
How long we keep it
- Newsletter subscribers: until you unsubscribe (every email has a one-click link), then deleted within 30 days.
- Diagnostic gate (name + email): same as newsletter — we don't store this separately.
- Quiz answers: only in your browser's localStorage. Clear your browser data or use the "Reset" button on the report page and they're gone.
- Programme participants: seven years after the programme ends, for tax / record-keeping. Then deleted.
- Server logs: 30 days, then rotated.
Your rights
Under GDPR you can ask us to:
- See what we hold about you (subject access request).
- Correct anything inaccurate.
- Delete your data ("right to be forgotten").
- Export it in a portable format.
- Object to processing, or restrict it.
- Withdraw consent at any time, without giving a reason.
Email shane@shaneleaning.com with what you want and we'll act on it within 30 days (usually within 48 hours). If we get it wrong, you can complain to the UK Information Commissioner's Office or your local data protection authority.
Cookies and tracking
The only browser storage we use is one localStorage entry called el-diagnostic-v1, which keeps your in-progress diagnostic answers on your device only. No cookies for analytics, no cookies for ads, no cookies for fingerprinting. We don't use Google Analytics.
International transfers
Kit is US-based. Transfers to the US use Standard Contractual Clauses under Article 46 GDPR. We don't transfer your data anywhere else.
Changes to this notice
If we change anything material, we'll update the "last updated" date at the top and email current subscribers before the change takes effect.
Contact
Shane Leaning · shane@shaneleaning.com