Data sovereignty
& privacy standards.

Account Data

When you create a Lasota account to access any of our tools, we collect:

• Identity Data: Name, email address, and authentication credentials.
• Billing Data: Transaction history and billing address (payment processing is handled by our payment providers; we do not store full card details).
• Technical Data: IP address, browser type, and device identifiers required for security auditing.

Operational Data

When you use a Lasota tool, we process the data you input (e.g., the text of an email or a lead form submission). This data is:

• Processed instantly to generate the outcome (the “Result”).
• Encrypted in transit and at rest.
• NOT used to train public AI models unless explicitly stated in a specific beta programme opt-in.

Workshops & Enquiries

When you book a workshop, join a waiting list, register interest or contact us, we collect the details you enter — typically your name, email address, phone number, company and role — along with your booking and payment status.

• We use this to manage your booking, send joining details and confirmations, and follow up about the workshop or future dates.
• Workshop payments are taken by our payment provider; we never see or store your full card details.
• Photos or short clips taken at a workshop are only used for marketing with the permission you give on our onboarding form.
• You can unsubscribe from marketing emails at any time using the link in any email, or by contacting us.

Usage Logic

We use your data solely for:

• Service Delivery: Authenticating you, running the automation/logic you requested, and delivering workshops you have booked.
• Security: Detecting and preventing fraud, abuse, or unauthorised access to our systems.
• Communication: Sending you transactional alerts (invoices, password resets, booking confirmations) or critical system updates, and — where you have asked us to — information about future workshops.
• Measurement: Understanding how our websites and advertising perform, only where you have accepted analytics and advertising cookies (see section 09).

Third-Party Subprocessors

To deliver services, we connect with trusted Tier-1 providers. We do not sell data. Key providers include but are not limited to:

• Cloud Infrastructure: Krystal Hosting / Google Cloud (for hosting and server logic).
• AI Models: OpenAI / Gemini (via API, with zero-retention policies where applicable).
• Payments: Stripe and Square.
• Forms & CRM: LeadConnector (booking, waiting list and enquiry forms, and follow-up emails).
• Analytics: Google Analytics 4 — only with your consent.
• Advertising measurement: LinkedIn Insight Tag — only with your consent.

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or an adequacy decision.

Security Protocols

We employ enterprise-grade security measures, including HTTPS encryption for all data in transit. Access to personal data is restricted to authorised personnel with a specific operational need.

Control & Deletion

Under UK GDPR, you retain full sovereignty over your data. You have the right to:

• Access: Request a copy of all data we hold about you.
• Rectification: Correct any inaccurate data.
• Deletion (“Right to be Forgotten”): Request complete removal of your account and associated data logs.
• Objection & Withdrawal: Object to marketing at any time, and withdraw cookie consent whenever you like (see below).

To exercise these rights, contact our Data Controller directly at hello@lasota.co.uk. If you are unhappy with how we handle your data, you can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies & Tracking

When you first visit, we ask whether you accept analytics and advertising cookies. Nothing in the optional categories runs until you click Accept. If you decline, only the essential items below are used.

We do not sell your data to advertisers or share it for advertising resale.

You can change your mind at any time: use the Cookie preferences link in the footer of our workshop pages, or clear your browser's site data for our websites, and you will be asked again.