Privacy Notice

Rise & Lead Institute (“Rise & Lead”, “we”, “us”) operates this website and the Member Portal. We are the data controller for the personal data described in this notice, which means we decide how and why it is used.

• Account details (name, email address, sign-in codes) — to create your account, authenticate you and keep your access secure. Basis: performance of our contract with you.
• Application information (career background, motivation, optional CV upload) — to assess applications for the Career Mentorship™ programme. Basis: steps taken at your request before entering a contract.
• Assessment answers, reflections and results — to generate your diagnostic results, reports and private portfolio, and to support your progress. Basis: performance of our contract.
• Mentorship records (session notes, progress tracking) — to deliver mentorship. Basis: performance of our contract.
• Support messages — to answer your questions. Basis: legitimate interests in supporting our users.
• Usage and device data (pages viewed, aggregated product analytics, IP address, browser and device type, security logs) — to keep the platform secure, prevent fraud and improve the product. Basis: legitimate interests.
• Marketing preferences — where you opt in to receive updates. Basis: consent, withdrawable at any time.

Purchases are handled by Paddle.com, our reseller and Merchant of Record. Paddle collects the billing and payment information needed to take payment, calculate tax and issue invoices, and processes that data under its own privacy notice. We do not receive or store your full card details.

• Service providers and subprocessors — hosting, database, email delivery and support tooling, acting on our instructions.
• Merchant of Record — Paddle, for the sale of our products, subscription management, payments, tax compliance and invoicing.
• Mentors — assigned mentors see only the information needed to support the participants allocated to them.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose by law.

Your private reflections and portfolio entries are yours. They are not shown to other participants, and are not shared with your employer. Access by our team is limited to what is needed to operate the service, provide support and keep it secure.

Our providers may process data outside your country, including outside the UK and EEA. Where that happens, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

We keep account, programme and portfolio data for as long as your account is active, and for a reasonable period afterwards so you can return to your work. Unsuccessful applications and uploaded CVs are kept only as long as needed to administer that intake cycle. Financial records are retained for the period required by law. When data is no longer needed, we delete or anonymise it.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal data, to receive a portable copy, and to withdraw consent at any time.

To exercise any of these rights, email us at hello@riseandlead.fit or contact us through the Member Portal. We respond within one month. If you are in the UK or EEA, you also have the right to complain to your local data protection supervisory authority.

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls, role-based permissions, private storage for uploaded documents and regular security review. No system is perfectly secure, but we take these obligations seriously and act promptly on any issue.

We use essential cookies and similar storage to keep you signed in and to keep the platform secure; these cannot be switched off without breaking the service. We use limited, privacy-safe product analytics to understand which features are used, and we do not use advertising or cross-site tracking cookies. You can clear or block cookies in your browser settings, though signing in may then not work.

We will update this page when our practices change, with a revised “last updated” date.