Privacy Policy

Last updated: 10 June 2026

This Privacy Policy explains how Rawson Ellis Ltd collects, uses, stores and shares personal data when you visit our websites, contact us, use our services, attend our events, subscribe to our content, buy our products, participate in our programmes, appear on our podcast, work with us, apply to work with us or otherwise interact with us.

1. Who we are

Rawson Ellis Ltd is a company registered in England and Wales under company number 15723311. Rawson Ellis Ltd trades as Rawson Ellis and The AI Leader Lab and operates related websites, services, products, content and platforms including AI for Leadership and The Frontier Leader Show. It also receives traffic, enquiries and business opportunities from the Martin Wheatley and Tricia Wheatley personal websites where those websites are used to support or refer business activity to Rawson Ellis Ltd.

For the purposes of this Privacy Policy, "Rawson Ellis Ltd", "we", "us" and "our" refer to Rawson Ellis Ltd and the brands, trading names, websites and platforms it operates.

Unless otherwise stated in a specific client agreement, Rawson Ellis Ltd is the controller of personal data collected through our websites, marketing, events, enquiries, client onboarding, service delivery and business operations. Where we process personal data on behalf of a client, the relevant client agreement, data processing terms or statement of work may apply.

Where Martin Wheatley or Tricia Wheatley personal websites are used to direct traffic, enquiries, subscriptions, purchases, bookings or business opportunities to Rawson Ellis Ltd, this Privacy Policy applies to the Rawson Ellis Ltd business-related personal data collected or processed through that route.

Contact email: hello@rawsonellis.com

2. Websites, brands and services covered

This Privacy Policy applies to personal data processed in connection with:

• rawsonellis.com;
• theaileaderlab.com;
• aiforleadership.com;
• thefrontierleader.show;
• www.martinwheatley.co.uk and www.martinwheatley.com, where used to direct traffic, enquiries, subscriptions, bookings, purchases or business opportunities to Rawson Ellis Ltd;
• www.triciawheatley.co.uk and www.triciawheatley.com, where used to direct traffic, enquiries, subscriptions, bookings, purchases or business opportunities to Rawson Ellis Ltd;
• consulting, transformation, change management, interim leadership, leadership advisory, coaching and mentoring services;
• AI advisory, AI strategy, AI adoption, AI leadership, implementation support, training and workshop services;
• speaking, webinars, live events, online events, newsletters, podcasts and content;
• digital products, templates, resources, courses, communities, memberships and subscriptions where offered; and
• client onboarding, proposal, contracting, invoicing, administration, recruitment, supplier and associate management.

3. Personal data we collect

The personal data we collect depends on how you interact with us. It may include the following categories.

3.1 Contact and identity details

• name;
• email address;
• telephone number;
• postal or business address where required;
• company name;
• job title, role, seniority, department or professional profile;
• social media profile or website details where you provide them or interact with us through those channels.

3.2 Client, prospect and service information

• information you provide when making an enquiry, booking a call or asking for information;
• professional background, business context, leadership challenges, organisational priorities and service requirements;
• notes from calls, meetings, workshops, coaching sessions or advisory sessions;
• proposal, statement of work, contract, purchase order, onboarding and project information;
• feedback, survey responses, testimonials or case study information where provided.

3.3 Event, podcast and content information

• event registrations, attendance records and participation details;
• webinar, workshop or community participation data;
• podcast guest information, biography, headshot, recording, transcript, release information and promotional materials where relevant;
• newsletter subscriptions, content preferences and engagement information.

3.4 Payment, transaction and administration data

• billing details, invoices, payment status and transaction references;
• limited payment information processed through payment providers;
• VAT, accounting, tax and finance records;
• supplier, associate, contractor and procurement information.

3.5 Website, device and usage data

• IP address;
• browser type and version;
• device type and operating system;
• pages visited, links clicked and time spent on pages;
• referring website, campaign or source;
• cookie identifiers and similar technologies, subject to our Cookie Policy.

3.6 Recruitment, employee, contractor and associate data

Where you apply to work with us, work for us, contract with us or act as an associate, we may collect information relevant to that relationship, including contact details, professional history, CV information, right-to-work information, payment details and correspondence. Employees, workers, contractors and associates may also receive additional internal privacy information relevant to their role.

3.7 Sensitive information

We do not intentionally seek to collect special category personal data through our websites or general marketing activities. Special category personal data includes information about health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used for identification, sex life or sexual orientation.

In coaching, mentoring, leadership, people, culture, organisational or client delivery work, individuals may voluntarily disclose sensitive personal information. Where this happens, we will handle it with additional care, minimise what we record and process it only where we have a lawful basis and appropriate safeguards.

3.8 Children

Our services are intended for business clients, professional users and adults. We do not knowingly target or collect personal data from children under 18.

4. How we collect personal data

We may collect personal data:

• directly from you when you contact us, complete a form, book a call, subscribe, buy from us, attend an event or communicate with us;
• from clients, employers, colleagues or event organisers who provide your details in connection with an engagement, event, workshop or project;
• from publicly available sources such as company websites, LinkedIn, Companies House, public directories, media sources or professional profiles;
• automatically through our websites, cookies, analytics and similar technologies;
• from third-party platforms we use to deliver our business, such as scheduling, email, payment, CRM, project management, document storage, video conferencing, transcription, marketing, accounting and AI-enabled tools.

5. How we use personal data and lawful bases

We only use personal data where we have a lawful basis under UK data protection law. The main purposes and lawful bases are set out below.

Purpose	Examples	Likely lawful basis
Responding to enquiries and pre-contract discussions	Handling enquiries, booking calls, preparing proposals, answering questions and discussing potential services.	Legitimate interests; steps before entering into a contract.
Delivering services	Consulting, advisory, coaching, mentoring, workshops, training, webinars, events, digital products, client communications and project delivery.	Contract; legitimate interests.
Client administration and finance	Onboarding, invoicing, payment processing, accounting, tax records, contract management and debt recovery.	Contract; legal obligation; legitimate interests.
Marketing and business development	Newsletters, updates, invitations, event follow-up, relevant service information, B2B outreach and content distribution.	Consent where required; legitimate interests where appropriate; soft opt-in where applicable; compliance with PECR.
Events, webinars, podcast and community activity	Registration, attendance, recordings, transcripts, guest management, follow-up, promotion and content repurposing.	Contract; legitimate interests; consent where required.
Website operation and improvement	Security, analytics, performance monitoring, usage analysis, user experience improvement and cookie preference management.	Legitimate interests for necessary operation; consent for non-essential cookies and similar technologies.
Use of approved AI tools	Research support, drafting, summarisation, workshop design, meeting notes, content development, analysis and productivity support.	Contract; legitimate interests; legal obligation where relevant, subject to safeguards.
Recruitment, employees, contractors and associates	Applications, role assessment, contracting, payroll or payment administration, access management and compliance.	Contract; legal obligation; legitimate interests.
Legal, regulatory and risk management	Compliance, record keeping, professional advice, insurance, dispute resolution, security and prevention of misuse.	Legal obligation; legitimate interests.

6. Marketing communications

We may send newsletters, updates, event invitations, insights, resources and information about our services where permitted by law.

We may contact you if you have opted in, asked for information, attended an event we host, engaged with our content, been a client, negotiated with us, or where we have a legitimate business reason to contact you in a professional capacity. We will comply with applicable data protection and electronic marketing rules and provide a clear way to opt out where required.

You can unsubscribe or opt out of marketing at any time by using the unsubscribe link in our emails or contacting hello@rawsonellis.com. We may keep a suppression record to make sure we do not contact you again for marketing after you opt out.

Even if you opt out of marketing, we may still send necessary service, transactional, contractual, event, security or administrative communications.

7. AI, transcription and automated decision-making

Rawson Ellis Ltd may use approved AI tools to support research, drafting, summarisation, workshop design, meeting notes, content development, project management, analysis and operational productivity. AI is used as an assistive tool. Human judgement, review and accountability remain with Rawson Ellis Ltd.

We may use transcription or meeting-note tools for calls, workshops or events where appropriate notice has been given and client or participant requirements permit it. AI-generated notes and summaries are reviewed before being treated as accurate.

We do not use AI to make final decisions on behalf of clients or to make solely automated decisions that produce legal or similarly significant effects for individuals without appropriate safeguards.

8. Who we share personal data with

We do not sell personal data. We may share personal data where necessary with:

• service providers who support email, calendar, documents, cloud storage, project management, CRM, scheduling, events, webinars, transcription, payment processing, accounting, website hosting, analytics, marketing, security and AI-enabled productivity;
• professional advisers including accountants, lawyers, consultants, insurers and auditors;
• clients, employers, event organisers, workshop sponsors or podcast partners where relevant to the service or event you are participating in;
• associates, subcontractors or delivery partners engaged to support our services, subject to confidentiality and appropriate controls;
• public authorities, regulators, courts, law enforcement or other parties where required by law or necessary to protect rights, security or legal interests;
• prospective buyers, investors or successors if our business or assets are reorganised, sold or transferred.

Current or expected business systems may include tools in categories such as Microsoft, Google, ClickUp, Notion, MailerLite, Granola, Zoom, Microsoft Teams, Xero, Calendly, Stripe, PayPal, OneDrive, Claude, ChatGPT, Perplexity, GitHub, Obsidian and similar business systems. The exact tools used may change over time.

9. International transfers

Some service providers may process personal data outside the UK. Where personal data is transferred internationally, we will use appropriate safeguards where required, such as adequacy regulations, standard contractual clauses, international data transfer agreements or other lawful transfer mechanisms.

10. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, manage relationships, meet legal and accounting obligations, resolve disputes and protect our rights.

Marketing records are normally kept until you unsubscribe or ask us to delete them, subject to maintaining a suppression record.

Client, project, contract, invoice and service records are normally kept for up to seven years after the end of the relevant relationship or engagement, unless a longer period is needed for legal, insurance or dispute reasons.

Website analytics data is retained according to the settings of the relevant analytics platform and cookie consent tools.

Recruitment data is normally kept for a reasonable period after the recruitment process unless we need to keep it longer or you agree to future contact.

Meeting notes, transcripts and recordings are kept only for as long as needed for the relevant business purpose, client requirement or legal obligation.

11. Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, password protection, secure cloud services, device security, confidentiality obligations, supplier review, data minimisation and restricted access to client information.

No system is completely secure. You should take care when sending confidential or sensitive information to us and use agreed secure methods where appropriate.

12. Your rights

Subject to legal conditions and exemptions, you may have the following rights in relation to your personal data:

• the right to be informed about how your personal data is used;
• the right of access to your personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure in certain circumstances;
• the right to restrict processing in certain circumstances;
• the right to data portability in certain circumstances;
• the right to object to processing in certain circumstances, including direct marketing;
• rights in relation to automated decision-making and profiling where applicable;
• the right to withdraw consent where processing is based on consent.

To exercise your rights, contact hello@rawsonellis.com. We may need to verify your identity before responding.

13. Cookies

We use cookies and similar technologies on our websites. Non-essential cookies are only used where appropriate consent has been obtained. For more information, see our Cookie Policy.

14. Links and third-party websites

Our websites, emails, resources and content may link to third-party websites, platforms or services. We are not responsible for the privacy practices of those third parties. You should review their privacy notices and terms before using them.

15. Complaints

Please contact us first at hello@rawsonellis.com if you have a privacy concern. We will try to resolve it directly.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection matters.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, systems, law or regulatory guidance. The latest version will be published on our websites with an updated "Last updated" date.

17. Contact