Leadership & Transformation Studio logo

Privacy

What we do with the information you share.

Plain language, no small print. This notice covers the contact form, the Five Spans assessment and Invited to the Table registrations.

Last updated: 18 October 2026

Who is responsible for your information

Premier Change Consulting Ltd, trading as The Leadership & Transformation Studio, is the data controller for personal information collected through this website. Company number: 09041890 Registered office: 167–169 Great Portland Street, London, England, W1W 5PF Privacy enquiries: hello@theleadershipandtransformationstudio.com

What we collect

We only collect what you type into a form. Depending on which form you use, that is:

  • Contact form: your name, email address, organisation (optional), the type of enquiry and your message.
  • Connection Bridge assessment: your name, email address, optional change context, and fifteen ratings across Clarity, Confidence, Capacity, Contribution and Continuity. We store your answers and calculated results in the Studio's private submission records.
  • Optional AI reflection: only your fifteen ratings and calculated scores are sent to Lovable AI after your agreement. Your name, email and change context are not included. AI reflections are displayed on screen and are not stored in our submission records.
  • Team and Enterprise assessments: organiser details, payment status, invitation labels and assessment responses are stored privately. Organisers see completion status and combined results, not individual answer records. Combined reports from very small teams may still allow individuals to be inferred; organisers should discuss confidentiality before collecting responses.
  • Invited to the Table registration: your name, email address, organisation (optional), role or title (optional), the conversation you are interested in and an optional message.
  • Marketing consent: whether you ticked the optional consent box, the exact wording you agreed to and the date and time you agreed.
  • Anti-spam and rate limiting: a short-lived record derived from your IP address and the form you used, kept only to stop repeated automated submissions. A hidden form field is also used to catch bots.
  • Basic usage counts: when someone clicks 'Take the Pulse' or reaches the contact form or the confirmation page, we record the event, the page path and the referring page. No cookies, no advertising identifiers and no third-party analytics service are used.

Why we use it and our lawful basis

We use your information for the purposes below and rely on the following lawful bases under the UK GDPR:

  • Enquiries and registrations — to reply to you and manage your request. Lawful basis: legitimate interests (responding to someone who has contacted us), and steps taken at your request prior to entering a contract where relevant.
  • Connection Bridge assessment — to calculate and display your assessment result and manage your submission. Your result is shown immediately on screen and can be printed or saved by you; results email delivery is not currently available. Lawful basis: legitimate interests.
  • Optional AI reflection — to create personalised leadership guidance at your request and with your consent. You can use the assessment without requesting AI insights. Team services and payment processing — to fulfil the agreed assessment contract.
  • Occasional written insights from the Studio — only if you tick the optional consent box. Lawful basis: consent.
  • Spam prevention, security and basic usage counts — to keep the site working and free of abuse. Lawful basis: legitimate interests.

Who processes it

We do not sell your personal information. We use carefully selected service providers to host the website, store submissions and operate the services described in this notice. They process information only for those purposes and subject to appropriate contractual safeguards. Those providers are:

  • Lovable — builds, hosts and serves this website. Website requests, and any diagnostic error reports generated in the browser, pass through this platform.
  • Supabase — the managed database and authentication service used to store form submissions, marketing consent records, anti-spam records, usage counts and the administrator login for the private dashboard.
  • Cloudflare — the edge network the website and its server functions run on.
  • Lovable AI — processes the ratings you explicitly submit for optional personalised reflections using its AI service providers.
  • Stripe — processes card payments and applicable tax for paid assessment packages. Payment card details are handled by Stripe, not stored by the Studio.
  • Flodesk — operates the mailing list for our optional quarterly newsletter. It holds the email address and any name you give on its own sign-up form, and manages unsubscribes.

Where your information is held

Our database is hosted in the European Union. Hosting and content delivery may route requests through servers in other countries, including the United States. Where information leaves the UK or EEA, our providers rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, together with technical safeguards such as encryption in transit.

Email and marketing

We currently reply to enquiries from ordinary business email. Our quarterly newsletter is sent through Flodesk; joining it is entirely optional and happens only when you submit your details on the Flodesk sign-up form linked from this website. Flodesk stores your email address and handles unsubscribes, so you can leave the list at any time with one click. No submission to an enquiry or assessment form is automatically added to the mailing list — marketing email requires the separate consent box or the Flodesk sign-up. Flodesk is a US-based provider; where your details leave the UK or EEA, the same safeguards described above apply.

How long we keep it

Our intended retention period is 24 months from your last contact with us for enquiries and assessment responses, and — for marketing consent records — for as long as you remain subscribed plus a short period afterwards as evidence of consent. Anti-spam records expire within minutes. Please note: deletion at 24 months is not yet automated. Until it is, records are reviewed and deleted manually, and you can ask us to delete yours at any time and we will act on it.

Your rights

You have the right to ask us for a copy of the information we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it (including the absolute right to object to direct marketing), and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time — by using the unsubscribe link in any email we send, or by emailing us — without affecting anything done before you withdrew it.

How to make a request or complain

Email hello@theleadershipandtransformationstudio.com and we will respond within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, on 0303 123 1113, or at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would appreciate the chance to put things right first.