Privacy Policy

This policy explains what happens to your personal data when you use this website. The short version: this website itself collects almost nothing. It is a demonstration and a signpost. Subscribing to the Diary, joining the course waiting list, booking a call and using the AI roadmap tool all happen on other platforms, and each of those processes your details under its own privacy policy. When the course opens it will run on a separate course platform, and this page will be updated before anything is sold here.

• What this website collects
• Where your details go
• Marketing
• Who we share it with
• Transfers outside the UK
• How long we keep it
• Your rights
• Cookies
• Complaints
• Changes

1. What this website collects

There are no accounts, sign-up forms, payments or comment boxes on this website. It never asks for your email address, and it stores nothing about you on our side. The Microsoft Cowork calculator and the Agent-a-thon workbook do have fields you can type into, including a team name, but they run entirely in your browser and nothing you type in them is sent to us.

• Aggregated usage data - the site uses Vercel Web Analytics and Speed Insights, which count page views, referrers, rough location, device type, page speed, and, on the home and links pages, which links you follow off the site and how far down the page you scroll. They set no cookies and do not identify you as an individual. Vercel's hosting logs hold IP addresses briefly for security
• Storage in your own browser - the Agent-a-thon pages save your workbook notes in your browser's local storage and keep a token there so the cohort code is not asked for again, and the homepage keeps a single session flag so its opening animation is not replayed on every visit in the same tab. Nothing in that storage is sent to us; it stays on your device

Our lawful basis for the usage data is our legitimate interest in understanding how the site is used and keeping it working well. We do not deliberately collect special category data. Please do not send us health, political or similar sensitive information through any of the services below.

2. Where your details go

Every button on this site that asks for something from you leads to another platform. What you enter there is processed by that platform under its own privacy policy, and some of it then reaches Leon.

• Subscribing to the Diary - happens on LinkedIn. LinkedIn holds your subscription against your LinkedIn account. Leon sees subscriber names as LinkedIn shows them to newsletter authors and does not export them
• The course waiting list and the Diary archive - run on Substack. The waiting-list form on the course page is loaded from Substack, and the email address you enter goes to Substack. Leon can see the list of subscribers there
• Booking a call - happens on Calendly. The details you enter go to Calendly and then into Leon's calendar and mailbox so the call can happen
• The AI roadmap - runs at aielevate360.co.uk on its own platform with its own privacy notice
• The course - when enrolment opens it will run on a separate course platform with a payment provider. Both will be named here, with what they collect, before anything is sold

Where Leon receives your details from one of those services, the lawful basis is your consent, or our legitimate interest in responding to an enquiry you started.

3. Marketing

The Diary newsletter is delivered through LinkedIn; its issues are also published on Substack. Unsubscribe on whichever platform you subscribed through, at any time. We do not sell your data, and we do not share it with third parties for their own marketing.

4. Who we share it with

We do not hold a customer database. The platforms named above each hold what you gave them. Beyond those:

• Vercel, which hosts this website and provides the aggregated analytics
• Vimeo, which serves the video on the About page. The player is embedded with Vimeo's Do Not Track setting on, so it collects no session data and sets no tracking cookies, and it is only requested if you scroll to it
• our accountants and professional advisers, and any regulator or authority where we are legally required to disclose

5. Transfers outside the UK

Vercel, LinkedIn, Substack, Calendly and Vimeo are based in the United States. Where personal data leaves the UK we rely on UK adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with each provider's own safeguards. Ask us and we will tell you which applies to a given provider.

6. How long we keep it

• On this website - nothing. There are no subscriber, booking or customer records here to keep or delete
• Aggregated usage data - held by Vercel under its own retention period, and never in a form that identifies you
• Diary subscriptions - held by LinkedIn, and by Substack if you subscribed there, until you unsubscribe
• Call bookings and anything you send Leon directly - kept in his calendar and mailbox for up to 24 months after the last contact, then deleted unless work followed
• Storage in your own browser - stays on your device until you clear it, or use the workbook's clear and sign out buttons; the homepage's session flag goes when you close the tab

7. Your rights

Under UK GDPR you have the right to ask for a copy of your data, to have it corrected or deleted, to restrict how it is used, or to move it to another provider. You can object to processing based on legitimate interests, and withdraw consent at any time where consent is the basis.

For anything held by LinkedIn, Substack, Calendly or aielevate360, the quickest route is their own settings and privacy pages. For anything Leon holds, email privacy@docaio.co.uk or message @LeonMcQuade on LinkedIn. We respond within one month. There is no fee unless a request is manifestly unfounded or excessive. We may need to confirm your identity first.

8. Cookies and analytics

This website sets no cookies of its own, and no advertising or tracking cookies. Vercel Web Analytics and Speed Insights work without cookies and store nothing on your device. The Substack waiting-list form on the course page is embedded from Substack and may set Substack's own cookies inside that frame, covered by Substack's policy. The video on the About page is embedded from Vimeo with Do Not Track on, so the player sets no cookies and stores nothing on your device; Vimeo still sees the request when the player loads, and it does not load unless you scroll to it. The Agent-a-thon pages and the homepage use your browser's own storage as described in section 1, which is not a cookie and is never sent to us.

9. Complaints

Please raise any concern with us first at privacy@docaio.co.uk, or message @LeonMcQuade on LinkedIn. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right before you approach the ICO.

10. Changes to this policy

We review this policy regularly, and will rewrite it before the course opens for enrolment. If we make a material change we will update the date at the top of this page.