Privacy Policy

Privacy Policy
Last updated: 30 August 2026A) Privacy at a Glance
This Privacy Policy explains how Your Own KPI processes personal data when you use our websites and services. The information involved depends on how you interact with us, for example by visiting a page, subscribing to the newsletter and resource library, joining a course waitlist, accessing subscriber resources or contacting us.
We process personal data only for defined purposes and on an applicable legal basis. We do not sell newsletter, waitlist or other contact information.
Some technical service providers help us operate our websites, email communications, security systems and resource library. These providers are explained below.B) Information You Give Us
Newsletter and resource-library signup
If you subscribe to the Your Own KPI newsletter and resource library, we may collect your email address, first name where provided, the form or signup source through which you registered, and information relating to your subscription and confirmation.
Your email address is required because the newsletter and access information for the subscriber resource library are delivered by email. Your first name is used for personalization where you choose to provide it.
Access to our free Power BI and Figma resource library is currently provided as part of the newsletter subscription. We do not operate a separate download-only mailing list for this resource library.
The newsletter may contain Power BI tips and tutorials, YouTube and channel updates, Power BI and Figma resources, templates and design resources, information about courses, products and services, discount codes, special offers and related Your Own KPI content.Newsletter confirmation
Our regular newsletter uses a Double Opt-In process. After you submit the signup form, we send a confirmation email to the address provided. The newsletter subscription becomes active only after the confirmation link is used.
Until confirmation takes place, the signup information remains temporarily in our confirmation process. If the subscription is not confirmed within 7 days, the information is removed from the temporary confirmation list.
We also retain appropriate confirmation information where necessary to document that a newsletter subscription was requested and confirmed.Course waitlists and other interest lists
From time to time, we may provide separate signup forms for a particular course, product, event or other project.
When you join such a list, we use the information submitted through that form for the specific purpose explained at the time of signup.
For example, a course waitlist may be used to send development updates, expected launch information, enrolment announcements, early-access information, availability information and other communications directly related to that course.
An email address is necessary to participate in an email waitlist because receiving these updates is the purpose of the signup.
Joining a course waitlist does not automatically subscribe you to the general Your Own KPI newsletter. We do not use a course-specific list for unrelated newsletter content unless you have separately subscribed to that content.
The same principles apply to future topic-specific lists that operate in substantially the same way. If a future signup involves materially different processing, additional information will be provided when you sign up.Messages you send us
If you contact us by email or another communication channel, we receive the information that you choose to provide. This normally includes your email address, your message, your name where provided, and any additional information included in your communication.
You are not legally required to contact us or provide this information. However, we may need certain information in order to understand and respond to your request.C) Information Generated When You Use Our Services
Technical website information
When you open one of our websites or landing pages, technical information must be exchanged between your browser and the systems providing the page.
This may include your IP address, the requested page, the date and time of the request, browser and device information, operating-system information, referrer information where transmitted by your browser, and technical information associated with errors, security events or abusive activity.
This information is generated as part of the technical operation of the website.Form-security information
Our forms use Cloudflare Turnstile to distinguish legitimate visitors from automated activity and protect against spam and abuse.
Turnstile processes technical security signals that may include IP address, browser and user-agent information, and connection and security characteristics.
Cloudflare states that Turnstile processes only information necessary for its security function and does not access, store or transmit the communications, form entries or other page inputs that users submit through the protected form.Email delivery information
Our email provider records technical events associated with sending emails. These may include whether an email was sent, delivered, rejected, bounced or affected by another delivery problem.
We use this information to operate our email communications, identify technical problems and maintain our mailing lists.Email opens and link clicks
We currently use individualized email-engagement measurement.
This means that information about an email open or link click can be associated with the individual contact to whom an email was sent.
The information may include the email or campaign concerned, whether an open was detected, which link was clicked, the date and time of the event, and related technical information.
Email opens are detected through a tracking pixel. Link clicks are measured through individualized tracked links.
An email system recording an "open" does not necessarily prove that a person personally read the email. Privacy features, email proxies, security scanners and other automated systems can generate or prevent these events.D) Why We Use Personal Data
Operating and protecting our websites
We process technical website information so that our pages can be displayed, operated securely, protected against abuse and maintained when technical problems occur.
The legal basis is our legitimate interest in operating secure and reliable online services (Art. 6(1)(f) GDPR).Protecting forms against spam
We process technical security information through Cloudflare Turnstile in order to protect forms and mailing lists against automated submissions, spam and abusive activity.
The legal basis is our legitimate interest in protecting our systems and services (Art. 6(1)(f) GDPR).Sending the newsletter and providing subscriber resources
We process newsletter signup information in order to administer the subscription, perform the Double Opt-In procedure, send the newsletter and provide information required to access subscriber resources.
The legal basis for the newsletter is your consent (Art. 6(1)(a) GDPR).Measuring email engagement
We use individualized open and click information to understand how subscribers interact with our emails, evaluate the effectiveness of our communications and improve future content.
We rely on consent for this individualized newsletter-engagement processing (Art. 6(1)(a) GDPR). Where access to information on or from an end device requires consent under § 25 TDDDG, consent is also the relevant basis for that access.Operating course waitlists
If you join a course or other topic-specific list after being informed that email updates will be sent, we process the signup information in order to provide those specific communications.
The legal basis is your consent (Art. 6(1)(a) GDPR).Responding when you contact us
For general enquiries, we process your message because we have a legitimate interest in communicating with people who contact us and responding to their requests (Art. 6(1)(f) GDPR).
Where your communication concerns entering into or performing a contract, the processing may instead be necessary for pre-contractual steps or performance of a contract (Art. 6(1)(b) GDPR).Providing the resource library
We use online content and file-hosting services to make subscriber resources available. The technical processing required to provide these resources is based on our legitimate interest in providing and operating the resource library efficiently (Art. 6(1)(f) GDPR).E) Services, Recipients and Processing Locations
We use service providers where this is necessary to operate the activities described in this Privacy Policy. Depending on the processing involved, recipients may include providers of website hosting and infrastructure, email delivery and mailing-list management, security and spam protection, online content and file hosting, business communications, and professional or technical support.
Where a provider processes personal data on our behalf, the requirements for processor arrangements under Art. 28 GDPR apply where relevant.Carrd
Our websites and landing pages are created and hosted using Carrd.
When you visit a Carrd-hosted page, Carrd processes the technical connection information required to provide the page.
Carrd Inc. operates its service from the United States. Carrd states that personal information processed through its service may therefore be processed in the United States and that safeguards are used for international processing where applicable.Cloudflare Turnstile
We use Cloudflare Turnstile for form security and bot detection.
Cloudflare, Inc. is a US-based provider. Cloudflare may therefore process technical security information outside the European Economic Area. Where an international transfer takes place, the applicable safeguards under data-protection law apply.Brevo
We use Brevo, operated by Sendinblue SAS in France, to manage email subscriptions, confirmation messages, mailing lists, newsletter distribution, delivery information, email-engagement information and unsubscribes.
Depending on your interaction with our emails, Brevo may process your email address, first name where provided, subscription and mailing-list information, signup source, confirmation information, delivery and bounce events, unsubscribe information, and individualized email-open and click events.
Brevo primarily processes this information on our behalf under its data-processing terms.
Brevo states that its main databases are hosted within the European Union. Some subprocessors or operational functions may nevertheless involve processing in other countries.Notion
Our subscriber resource library is currently provided through Notion.
Sending you a link to the resource library does not mean that we provide our newsletter contact database to Notion.
When you choose to open the Notion resource page, your browser communicates directly with Notion. Notion may therefore process technical information such as IP address, browser and device information and information generated through your interaction with the page.
Notion operates internationally, including in the United States. Notion states that its data-processing arrangements include Standard Contractual Clauses for relevant international transfers.Google Drive
Some files in the Notion resource library are provided through links to Google Drive.
When you choose one of these links, your browser connects directly with Google's service. Google may then process technical information and other information generated by your interaction with Google Drive under Google's own privacy terms.
Providing a Google Drive link does not mean that we transfer our newsletter contact database to Google.Other service providers
We also use service providers for ordinary business communications and technical or professional support. We do not publish an exhaustive inventory of our internal business software where identifying an individual provider is not necessary to explain the processing transparently.International transfers
Some providers used by us are established outside the European Economic Area or use subprocessors in other countries.
Where personal data is transferred to a country outside the EEA, the requirements of Chapter V GDPR apply. Depending on the provider and destination, an international transfer may be based on an adequacy decision of the European Commission, participation in the EU-U.S. Data Privacy Framework, Standard Contractual Clauses approved by the European Commission, or another transfer mechanism permitted by the GDPR.
You may contact us for further information about safeguards applying to a particular processing activity and, where applicable, how a copy of those safeguards can be obtained.F) How Long We Keep Information
We do not apply one retention period to all personal data. The relevant period depends on why the information is being processed and whether legal retention requirements apply.
Unconfirmed newsletter subscriptions: Information in the temporary confirmation process is removed after 7 days if the subscription is not confirmed.
Active newsletter subscriptions: Subscription information is processed while the subscription remains active.
Course and project waitlists: Information is retained while the relevant project and its related communications remain active or until consent is withdrawn.
Email delivery and engagement information: This information is retained while it is needed for the operation, administration and evaluation of our email communications and according to the applicable configuration of our email service.
Messages and enquiries: Information is retained until the relevant matter has been completed, subject to applicable statutory retention requirements.
Consent and unsubscribe information: Limited information may be retained where necessary to document consent or withdrawal, demonstrate compliance, ensure that an opt-out continues to be respected, resolve disputes or establish or defend legal claims.
Website and security information: Technical information is retained only for as long as necessary for website operation, troubleshooting, security and abuse prevention, unless longer retention is necessary for legal or evidentiary reasons.
When personal data is no longer required for its purpose and there is no legal reason requiring continued retention, it is deleted or anonymized.G) Your Choices and Your Data-Protection Rights
Unsubscribing from the newsletter
You can withdraw your newsletter consent at any time with effect for the future. The easiest way is to use the unsubscribe link contained in newsletter emails. You can also contact us by email.
After you unsubscribe, we stop sending newsletter communications to that address. Withdrawal does not affect processing that was lawful before consent was withdrawn.
Files that you have already downloaded are not affected by a later unsubscribe.Leaving a waitlist
You may withdraw your consent to course or other topic-specific waitlist communications at any time using the unsubscribe option provided in the emails or by contacting us.
Withdrawal from a course waitlist does not by itself affect an independently given newsletter subscription.Email-engagement measurement
You may contact us if you want to withdraw consent concerning individualized email-engagement measurement.
Where consent is withdrawn, this applies to future processing and does not affect processing that took place lawfully before the withdrawal.Your GDPR rights
Subject to the conditions of the GDPR, you may have the right to obtain information about the personal data we process about you and receive a copy (Art. 15 GDPR), have inaccurate information corrected (Art. 16 GDPR), request deletion where the applicable requirements are met (Art. 17 GDPR), request restriction of processing (Art. 18 GDPR), receive certain information in a portable format (Art. 20 GDPR), object to processing based on legitimate interests for reasons relating to your particular situation (Art. 21 GDPR), and withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
Where you object to processing based on legitimat