This site is run by Luke Quilter. The short version: I collect as little as possible, I never sell your data, and everything below is written to be actually readable.

Who "I" means here

Mostly it means me, Luke Quilter. On consultancy engagements, though, some of the organising and analysis is done by colleagues at Sleeping Giant Media, where I am chief executive. Where I say "me and my team" below, that is who I mean.

When my team handle your data they do it under Sleeping Giant Media's own data protection policies and its privacy policy, on top of everything promised here. Nobody outside that gets access.

What I collect, and why

Forms you choose to fill in

If you use the contact form, request a GEO audit, join the mailing list or leave speaker feedback, the details you enter (such as your name, email address, phone number, company, website and message) are sent to my automation platform so I can respond, deliver what you asked for, or send you the emails you signed up to. That is the only reason they are used.

The mailing list is exactly what it says: your email address, used for occasional emails. Every email includes an unsubscribe link, and unsubscribing removes you from the list.

Analytics, only if you say yes

I use Google Analytics to understand which content is useful. It does not run unless you press Accept on the cookie banner. If you decline, no analytics cookies are set and nothing is sent to Google. IP addresses are anonymised. You can change your choice at any time via the Cookies link in the footer.

The AI readiness assessment

If you have been sent a link to one of the AI readiness questionnaires (the leadership survey, the staff pulse or the systems inventory), this is what happens to what you write. This is one of the engagements where me and my team both work on the results.

The staff pulse is anonymous, and that is enforced by the system, not just promised. It does not ask for your name or your email, and an anonymous response is stored with nothing attached that could identify you. Submission times on anonymous responses are stored as a date only, so answers cannot be matched back to individuals by working out who submitted when. We report themes to your employer, never names, and your employer never sees individual pulse responses.

The leadership survey and the systems inventory are not anonymous, because they ask you to speak for a function or a system and I need to know who said what. They ask for your name and job title, and the person who commissioned the work may see your answers as part of the findings. If your organisation sent you a personal link, I also hold the name and email address they gave me, so we know who has responded and can send a reminder to anyone who has not. Every reminder carries a one-click opt-out.

Answers are stored in a Cloudflare D1 database on my own account, and a copy is passed through my automation platform into a Google Sheet so I can analyse it. Both are restricted to me and the colleagues working on your engagement, nobody else. Nothing from an assessment is used for marketing, shared with anyone outside the engagement, or used to train any AI model.

We keep assessment responses for the length of the engagement and for twelve months after it ends, then delete them. You can ask me to delete yours sooner, and if you are a named respondent I can do that on request. Anonymous pulse responses cannot be deleted individually once submitted, for the same reason they are safe: there is nothing linking them to you.

These questionnaire pages carry no analytics, no cookie banner and no tracking of any kind. Your part-finished answers save in your own browser so you can come back to them, and never leave your device until you press send.

Keeping the site working and spam-free

The site is hosted on Cloudflare, and forms are protected by Cloudflare Turnstile, which checks that submissions come from humans rather than bots. Cloudflare may process technical data such as IP addresses to provide this security. Blocked spam submissions are discarded.

What I never do

  • Sell or rent your data to anyone.
  • Run advertising or tracking networks on this site.
  • Add you to the mailing list unless you explicitly asked (the contact form has a separate opt-in tick box for exactly this reason).

Where your data lives

Form submissions are processed through my automation platform and stored securely. Assessment responses live in a Cloudflare D1 database and a Google Sheet, as described above. Analytics data lives in Google Analytics. Some providers (such as Google and Cloudflare) may process data outside the UK under their own safeguards.

Your rights

Under UK data protection law you can ask what data me or my team hold about you, ask for it to be corrected or deleted, or object to how it is used. Just email and ask. No forms, no fuss.

Contact

Any questions or requests about your data: luke@sleepinggiantmedia.co.uk.

If this policy changes meaningfully, the date at the top changes with it.

← Back to home