WonderLead for Companies

Privacy policy

How WonderLead collects, uses, and protects personal data on the companies pages: the checklist pack, discovery conversations, and the adoption assessment. The Practitioner Programme has a separate policy.

Last updated 31 August 2026 · GDPR (EU) 2016/679

1. Who we are

WonderLead is operated by Patricia Juárez Muñoz. For companies pages, she is the data controller.

Privacy and rights requests: patri@develagora.com.

2. What we collect

Checklist pack: name (optional) and work email, plus the source tag companies-checklist, when you submit the form
Discovery call: whatever Google Calendar collects to book the slot (typically name, email, and any notes you add)
Email you send us: whatever you write to ask about a Team Programme or Executive session
Assessment: answers and score stored only in your browser (localStorage). They are not sent to WonderLead unless you paste or describe them later
Paid work: billing and contact details needed to invoice and run a confirmed engagement, collected when that work is agreed

3. How we use it

To send the checklist pack and unlock downloads on this site
To send occasional notes on running human-first adoption with teams (unsubscribe in any email)
To hold the discovery conversation you booked
To reply when you ask whether a Team Programme is a fit
To deliver a paid engagement once it is confirmed in writing

We do not sell your data, build advertising profiles from it, or send it to your employer. We do not use the assessment answers for scoring people, because we do not receive them.

4. Legal basis

Consent (Art. 6(1)(a) GDPR): the pack form and any marketing notes. You can withdraw by unsubscribing or emailing us
Legitimate interest (Art. 6(1)(f) GDPR): answering a discovery enquiry you started
Contract (Art. 6(1)(b) GDPR): delivering a Team Programme or Executive session we have both confirmed

5. Retention

Pack / newsletter list: until you unsubscribe or ask us to delete it
Discovery enquiries: a reasonable period to follow up, then deleted unless a paid engagement starts
Paid-engagement records: as long as financial law requires for invoices
Assessment answers: on your device until you clear site data or retake

Deletion requests: patri@develagora.com. We aim to respond within 30 days.

6. Processors

Google Sheets: private spreadsheet where pack emails are stored via our newsletter endpoint
Google Calendar: appointment booking
Vercel: hosts the site and API
PostHog and Google Analytics: page analytics if you accept analytics cookies on the banner. They do not receive pack-form answers as a form payload

Each is governed by its own privacy policy. Stripe is only used if a later paid engagement is invoiced that way; that would be confirmed at the time.

7. Your rights

Under the GDPR you can ask to access, correct, erase, or port your data, object to marketing, or restrict processing in certain cases. Email patri@develagora.com. You may also complain to your local EU authority (in Spain, the AEPD).

8. Cookies

Essential cookies keep the site working. Analytics cookies run only if you accept them on the banner. The assessment uses localStorage on your device, not a tracking cookie.

9. Contact

patri@develagora.com