Legal

Privacy Policy

Last updated: April 2026

Who We Are

The data controller is Laura Tomas Jimenez, an independent AI strategist and educator based in the Netherlands, operating under the brand Managing Disruptions (managingdisruptions.com). For any privacy-related questions, contact: me@lauratomasjimenez.com.

What Data We Collect

We collect only the information you choose to provide. Depending on how you interact with the site, this may include:

  • Newsletter subscription: your email address.
  • Discovery call request: your full name, email address, service of interest (e.g. upskilling, business strategy), and an optional free-text message.
  • AI Readiness Assessment: your first name, email address, answers to five multiple-choice questions, and your computed AI readiness profile (Explorer, Adopter, or Leader).

Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

  • Newsletter: Consent (Art. 6(1)(a)). You subscribe voluntarily and may withdraw consent at any time by requesting removal.
  • Discovery call requests: Pre-contractual measures (Art. 6(1)(b)). Processing is necessary to respond to your enquiry about our services.
  • Assessment: Consent (Art. 6(1)(a)). You voluntarily provide your details to receive a personalised result. You may request deletion at any time.

How We Use Your Data

We use your data only for the purpose for which it was collected:

  • Newsletter email: to send you issues of the Managing Disruptions newsletter and directly related announcements.
  • Booking data: to respond to your discovery call request and follow up on your enquiry.
  • Assessment data: to deliver your personalised AI readiness result by email and, where relevant, to follow up with relevant service information.
  • We never sell, rent, or share your personal data with third parties for their own marketing purposes.

Data Processors

We use the following third-party processors to operate this service. Where required, these providers are used under their data processing terms or a data processing agreement:

  • Supabase (Supabase Inc.): database hosting. Data is stored in the EU West (Ireland) region.
  • Netlify (Netlify, Inc.): website hosting, build/deploy infrastructure, and request logs.
  • Resend (Resend Inc.): transactional email delivery (confirmation and result emails).
  • MailerLite (MailerLite Limited): newsletter and lead management platform.
  • Google Tag Manager and Google Analytics (Google LLC / Google Ireland Limited): optional analytics after cookie consent.
  • Sentry (Functional Software, Inc.): error monitoring when enabled, with no intentional collection of personal data.
  • Shopify (Shopify International Limited): e-commerce platform used to process store purchases. When you buy a product through our store, Shopify processes your payment and order data. Shopify is GDPR-compliant and acts as a data processor under a data processing agreement. See Shopify's Privacy Policy for details.
  • Zoom Scheduler (Zoom Video Communications, Inc.): discovery call scheduling when you choose to book a call.

How Long We Keep Your Data

  • Newsletter subscribers: for as long as you remain subscribed, or until you request deletion.
  • Discovery call and service enquiry records: up to 5 years from the date of submission, in line with Dutch statutory retention obligations for business correspondence (Burgerlijk Wetboek).
  • Assessment results: up to 2 years from the date of submission.
  • You may request deletion of your data at any time. Where a statutory retention period applies (e.g. business correspondence), we may be obliged to retain a minimal record but will restrict further processing.

Cookies

We use a minimal set of browser storage to remember your preferred colour theme and cookie consent choice. If you accept analytics cookies, Google Analytics via Google Tag Manager helps us understand aggregate site usage. No advertising cookies are used. See our Cookie Policy for full details.

Your Rights

Under GDPR you have the right to:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: ask us to correct inaccurate or incomplete data.
  • Erasure: ask us to delete your data (“right to be forgotten”).
  • Restriction: ask us to limit how we use your data in certain circumstances.
  • Portability: receive your data in a machine-readable format.
  • Objection: object to processing based on legitimate interests.
  • Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

Complaints

If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl). We would, however, appreciate the opportunity to address your concern directly first. Please reach out at me@lauratomasjimenez.com.

Contact

For any privacy-related questions or to exercise your rights, email: me@lauratomasjimenez.com. We aim to respond within 30 days.