Chief Executive Alliance, LLC
Privacy Policy
How Chief Executive Alliance, LLC collects, uses, discloses and safeguards personal information in connection with this website, and the rights available to you in respect of that information.
In effect August 24, 2026
1. Controller and contact
This website is operated by Chief Executive Alliance, LLC (“the Company”, “we” or “us”), which is the controller of the personal information described in this policy for the purposes of the UK and EU General Data Protection Regulation. Enquiries relating to this policy, including requests to exercise the rights described in section 7, should be addressed to Publishing@ChiefExecutiveAlliance.com.
2. Information we collect
2.1 Information you provide
The contact, keynote booking and program registration forms collect your name and email address together with the content of your message. The booking form additionally collects the date and location of the proposed engagement. Where an episode page offers an assistant, the question you submit is retained together with the response generated. No further personal information is requested or collected through these forms.
2.2 Information collected automatically
We maintain our own record of site activity, comprising pages opened, links and controls selected, searches performed and the extent to which video content is viewed. These records are designed so that they cannot be attributed to an identifiable individual, and the method warrants explanation.
Each visit is labeled with a value derived by applying a one-way cryptographic hash to your IP address, your browser’s user-agent string and the current date, together with a secret value held by us. The result cannot be reversed to recover your IP address, and your IP address is not retained in our records. Because the current date forms part of the input, the value changes at midnight UTC, and activity recorded on one day cannot be associated with activity recorded on another. The records support aggregate reporting of readership; they do not support identification of individuals.
No information is stored in your browser for this purpose. There is no cookie and no local storage associated with it, which is why it does not require consent and why declining cookies does not disable it. If you would prefer to be excluded from these records, please contact us at the address in section 1.
2.3 Third-party cookies and embedded content
Google Analytics and the embedded YouTube and Spotify players each store information in your browser and receive your IP address. None is loaded unless you have consented to the relevant category. The Cookie Policy describes each in detail.
2.4 Server logs
Our hosting provider records standard server log information, including IP address, timestamp and the resource requested. These logs are retained for a limited period, are used to operate and secure the site and to investigate misuse, and are not combined with other information.
3. Purposes and legal bases
Where the UK GDPR or the EU GDPR applies, we rely on the following legal bases:
- Responding to enquiries. Information submitted through the site’s forms is processed in order to respond and, where applicable, to take steps at your request prior to entering into a contract.
- Understanding readership. Our anonymized activity records are processed on the basis of our legitimate interest in understanding which material is of value to our audience. We have assessed that interest against the interests and rights of visitors and concluded that it is proportionate, given that the records cannot identify any individual.
- Cookies and embedded media. Consent, which may be given, refused or withdrawn at any time.
- Record-keeping. Our legitimate interest in maintaining records of correspondence and enquiries, and compliance with applicable legal obligations.
4. Service providers
We engage the providers listed below to operate this website. Each processes personal information on our instructions and under contract. Where a provider is identified as operating server-side, your browser does not communicate with that provider; the request originates from our infrastructure.
| Provider | Function | Information processed | Mode |
|---|---|---|---|
| Vercel | Hosting and delivery | IP address and browser details recorded in standard server logs for the purpose of delivering the site, retained for a short period. | Server-side |
| Supabase | Database | Information submitted through the site's forms, including name, email address and message content; the anonymized activity records described in the Privacy Policy; and questions submitted to the episode assistant. | Server-side |
| Resend | Email delivery | The contents of submitted forms, for the purpose of delivering them to us by email. | Server-side |
| Anthropic | Episode assistant | The question submitted and the transcript of the relevant episode, for the purpose of generating a response. Submitted questions are not used to train models. | Server-side |
| Google Analytics 4 | Audience measurement | Pages viewed, approximate location, device and browser characteristics, and referring site. Operates in your browser and only with your consent. | In your browser, with consent |
| YouTube (Google) | Video playback | Your IP address and playback activity, once a video player has been loaded. | In your browser, with consent |
| Spotify | Podcast playback | Your IP address and playback activity, once a podcast player has been loaded. | In your browser, with consent |
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under California law. We may disclose information where required to do so by law or by valid legal process, and will notify you of any such disclosure unless prohibited from doing so.
4.1 International transfers
The Company and the providers listed above are established in the United States, and personal information is processed there. Where personal information is transferred from the United Kingdom or the European Economic Area, that transfer is made pursuant to the European Commission’s Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum, as incorporated into our agreements with those providers.
5. Retention
- Information you submit is retained for the duration of the relationship and for such further period as it may reasonably be required, after which it is deleted. Earlier deletion may be requested at any time.
- Anonymised activity records are retained for twenty-four months. They contain no information capable of being attributed to an individual.
- Email correspondence is retained in the ordinary course of business.
6. Security
The site is served exclusively over an encrypted connection. Information submitted through the site is held in a database that is not accessible from the public internet and is available only to authorized personnel. No system of transmission or storage can be guaranteed to be entirely secure, and we do not represent otherwise.
7. Your rights
You may request access to the personal information we hold about you, request its correction, or request its deletion. Where the UK GDPR or the EU GDPR applies, you additionally have the right to request restriction of processing, to object to processing carried out on the basis of legitimate interests, to receive your personal information in a portable format, to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal, and to lodge a complaint with your supervisory authority — in the United Kingdom, the Information Commissioner’s Office.
Where the California Consumer Privacy Act applies, you have the right to know what personal information is collected and how it is used and disclosed, the right to request deletion and correction, the right to opt out of the sale or sharing of personal information, and the right not to receive discriminatory treatment for exercising any of these rights. As stated in section 4, we neither sell nor share personal information.
Requests should be sent to Publishing@ChiefExecutiveAlliance.com and will be answered within thirty days. We will request only such information as is necessary to verify your identity before responding.
Please note that the anonymized activity records described in section 2.2 cannot be linked to an identified individual. We are therefore unable to locate, produce or delete records relating to a particular person, as no such association exists.
8. Cookie preferences
Your cookie preferences may be reviewed and changed at any time. Withdrawing consent is as straightforward as granting it.
9. Children
This website is intended for senior executives and their advisers. It is not directed to children, and we do not knowingly collect personal information from any person under the age of sixteen. If you believe that a child has provided personal information to us, please contact us and it will be deleted.
10. Changes to this policy
We may amend this policy from time to time. Where an amendment is material, the effective date shown above will be revised and, where required by law, consent will be requested again rather than inferred from a previous response.
11. Contact
Chief Executive Alliance, LLC · Publishing@ChiefExecutiveAlliance.com