Last updated: 30 September 2026
Leadership in Action™ (referred to as "we", "us", or "our") is committed to protecting your privacy and handling your personal data transparently and lawfully. This Privacy Policy explains what personal data we collect through leadershipinaction.online (the "Website"), why we collect it, how we use and protect it, and what rights you have under the EU General Data Protection Regulation (GDPR) and applicable Greek data protection law.
This Policy applies to visitors of the Website, users of our free Diagnostic and Team Leadership Assessment tools, registered account holders, purchasers of an Area Pass, the Complete Leadership System, or Team Access, newsletter subscribers, and anyone who contacts us.
1. Who We Are
The data controller responsible for your personal data is:
John Loukas, trading as Leadership in Action™
Address: Dragatsaniou 6, 105 59, Athens, Attica, Greece
Email:
Phone: +30 694 464 4185
Website: https://www.leadershipinaction.online
2. What Personal Data We Collect
2.1. Data You Provide Directly
- Contact and enquiry data: when you use our contact form or book a Team Access Call, we collect your name, email address, and any other information you choose to include in your message (for example, your company name or phone number).
- Diagnostic and Assessment data: when you complete the Manager Ownership Diagnostic or the Team Leadership Assessment, we collect your responses to the scenarios and, where you provide it, your name and email address so we can send you your personalized results.
- Account data: if you register an account, we collect your username, email address, and a securely hashed password.
- Purchase data: if you buy an Area Pass, the Complete Leadership System, or Team Access, we collect your name, email address, billing address, and country, and we receive confirmation of successful payment from our payment provider. We do not receive or store your full card number; card details are handled directly by our payment provider.
- Newsletter and email communications: if you subscribe to receive updates from us, we collect your email address and, where provided, your name. Our newsletters and result emails are sent using an email platform installed on our own servers.
2.2. Data We Collect Automatically
- Technical and log data: like most websites, our server automatically records information such as your IP address, browser type, device information, pages visited, and the date and time of your visit, for security and troubleshooting purposes.
- Cookies: we use cookies and similar technologies as described in Section 5 below.
We do not knowingly collect any special categories of personal data (such as health, religious, or political information) through the Website, and we ask that you do not include such information in free-text fields (for example, in the contact form) unless strictly necessary.
3. How and Why We Use Your Personal Data
| Purpose | Legal basis under GDPR |
|---|---|
| Responding to your enquiries and booking Team Access Calls | Legitimate interest in responding to requests you initiate; performance of pre-contractual steps |
| Delivering your Diagnostic or Team Leadership Assessment results | Consent (when you request your results) / legitimate interest in providing the tool you asked to use |
| Creating and administering your account | Performance of a contract with you |
| Processing your purchase and granting access to the Leadership Areas | Performance of a contract with you; legal obligation (accounting and tax records) |
| Sending newsletters or marketing emails | Your consent, which you may withdraw at any time |
| Keeping the Website secure and preventing abuse | Legitimate interest in protecting our systems and users |
| Improving our content and understanding how the Website is used | Legitimate interest in improving the Service |
4. Cookies
Our site uses cookies — small text files stored on your device — to make the Website work properly and, where you consent, to understand how it is used. Cookies may be "strictly necessary" (required for core functionality, such as remembering your cookie preferences and keeping you logged in), or "optional" (used for analytics or to improve your experience). We ask for your consent to optional cookies through the cookie banner shown when you first visit the Website. You can review or change your cookie choices at any time using the cookie settings control available on the Website, or through your browser settings.
5. Email Marketing & Communications
If you subscribe to our newsletter, request your Diagnostic or Assessment results, or otherwise agree to receive emails from us, we will use your email address for that purpose. Every marketing email we send includes an unsubscribe link, and you can opt out at any time without affecting our ability to deliver a purchase or account-related communication you are entitled to receive. Our mailing list is managed using software installed on our own servers rather than a third-party marketing platform.
6. Who We Share Your Information With
We do not sell your personal data. We share personal data only where necessary, and only with:
- Payment service providers — to process payments when you purchase an Area Pass, the Complete Leadership System, or Team Access. These providers process your payment details under their own privacy policy.
- Hosting and IT service providers — who store and help us operate the Website and its underlying database and email systems, acting on our instructions and under confidentiality obligations.
- Professional advisers — such as our accountant, where necessary to comply with our legal and tax obligations.
- Authorities — where we are required to disclose information to comply with a legal obligation, court order, or to protect our rights, safety, or property, or that of others.
We do not use third-party advertising or social media tracking pixels on the Website. If this changes, we will update this Policy and, where required, ask for your consent through the cookie banner before doing so.
7. International Data Transfers
We are based in Greece and primarily process personal data within the European Union / European Economic Area (EU/EEA). If any of our service providers are located outside the EU/EEA, we will ensure an appropriate safeguard is in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision, before transferring your personal data to them.
8. How Long We Keep Your Personal Data
- Contact and enquiry data is kept for as long as reasonably necessary to handle your enquiry and for a limited period afterwards in case you follow up, after which it is deleted.
- Diagnostic and Assessment responses are kept for as long as needed to provide you with your results and, in anonymized or aggregated form, to improve our tools.
- Account data is kept for as long as your account remains active, reflecting the lifetime nature of Area Pass and Complete Leadership System access, and is deleted or anonymized within a reasonable period after you ask us to close your account.
- Purchase and invoicing data is kept for as long as required under applicable Greek tax and accounting legislation.
- Newsletter data is kept until you unsubscribe or, if you never engage with our emails, for a reasonable period after which we will remove inactive contacts.
We may keep personal data for longer where necessary to establish, exercise, or defend legal claims, or where required by law.
9. Children's Privacy
The Website and Service are intended for working professionals and are not directed at children. We do not knowingly collect personal data from individuals under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Automated Decision-Making
We do not use your personal data to make automated decisions that produce legal or similarly significant effects on you. The results generated by the Manager Ownership Diagnostic and the Team Leadership Assessment are self-reflection tools based on your own answers; they are shared with you for your own information and are not used by us to make any automated decision about you.
11. Your Rights Under the GDPR
Subject to the conditions and exceptions set out in the GDPR, you have the right to:
- Access the personal data we hold about you and receive a copy of it;
- Rectification of inaccurate or incomplete personal data;
- Erasure of your personal data ("the right to be forgotten"), where there is no legitimate reason for us to continue processing it;
- Restriction of the processing of your personal data in certain circumstances;
- Object to our processing of your personal data, including for direct marketing purposes;
- Data portability, i.e. to receive your personal data in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller; and
- Withdraw your consent at any time, where we rely on consent, without affecting the lawfulness of processing carried out before your withdrawal.
To exercise any of these rights, please use our Personal Data Request form, or contact us directly at
12. Security
We use appropriate technical and organizational measures — including access controls, encrypted connections (SSL/TLS), and password hashing — to protect your personal data against unauthorized access, loss, or misuse. No method of transmission or storage over the internet is completely secure, but we work to protect your information using industry-standard practices appropriate to a business of our size.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your personal data.
14. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at