Privacy notice for this website

This notice covers this website, the contact form and the five-minute check. The confidential team assessment has its own notice, which participants see before they take part.

Who is responsible

Dr. Joanna Konstantinou, trading as JK Executive Consulting is the controller of personal data collected through this site. Contact: jk@jkexecutive.consulting.

The five-minute check

The check runs entirely in your browser. Your answers are not sent anywhere or stored by this site. If you close the page, they are gone. The only exception is if you choose to send a message afterwards and tick the box to include your read-out summary. In that case the summary, which contains the band for each area but not your individual answers, is sent with your message.

Enquiries

If you send a message, the name, email address, organisation, role and message you provide are emailed to Dr. Joanna Konstantinou so that she can reply. They are not stored in a database on this site. The lawful basis is legitimate interests: responding to your enquiry. Enquiries are kept for 12 months and then deleted, unless they lead to an engagement.

Preventing abuse

To stop the contact form being used for spam, the site counts recent messages from each connection. It stores a one-way code derived from your IP address, never the address itself, and deletes it within two days. The lawful basis is legitimate interests: keeping the site secure.

Analytics

This site uses Plausible Analytics, which does not use cookies and does not collect personal data or track you across sites. It records aggregate figures such as page views and referring sites. No cookie banner is needed because no cookies are set.

Service providers

• Vercel: hosts this site. Server-side processing, including enquiry handling, runs in London.
• Neon: the database behind the site, in London. It holds the anti-spam counts above, not enquiries.
• Resend: delivers enquiry emails.
• Plausible Analytics: cookieless, aggregate analytics, hosted in the EU.

Vercel and Resend are based in the United States, so personal data may be processed there. Where a provider is certified under the UK Extension to the EU–US Data Privacy Framework (the UK–US data bridge), transfers rely on that. Otherwise they rely on the UK’s International Data Transfer Addendum to the EU standard contractual clauses, which each provider includes in its data processing terms.

Your rights

You can ask for access to, correction of or deletion of your personal data, and object to its use, by emailing jk@jkexecutive.consulting. If you are unhappy with how your data has been handled, you can complain to the Information Commissioner’s Office (ico.org.uk).