Privacy policy

1. Who we are and what this covers

Echelon Labs is a company registered in the Netherlands (KVK 42145233). We are the controller of the personal data described here, and our details are at the bottom of this page.

This policy covers echelonlabs.io, including pilot.echelonlabs.io and practitioners.echelonlabs.io, the forms linked from those pages, and the emails we send as a result. Qognexus™ is the product Echelon Labs is building. Its website, qognexus.com, has its own privacy policy, but emails we send from a qognexus.com address about data collected here are covered by this policy.

2. Visiting the website

The website is hosted on Cloudflare. To deliver pages and protect the site from abuse, Cloudflare processes technical data about each request, such as your IP address, browser type, the page requested and the time.

The website sets no cookies, runs no analytics and contains no tracking pixels. Fonts are loaded from Google Fonts, which means your browser sends your IP address to Google when a page loads.

Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).

3. The research questionnaire

The questionnaire linked from this site asks how organisations assess readiness for change. It is hosted by Tally.

What you tell us. Your role, whether you are running or supporting change programmes and how many, organisation size, your written answers about current methods, frustrations and needs, price perception questions, and the country you are based in. We also receive the campaign tags in the link you used (such as utm_source) and a referral tag, if present.

What happens when you submit. Tally stores your response. A small integration we run on Cloudflare then copies your answers into Airtable under a random response ID, with no name or email attached.

Optional contact details. At the end you can tick "Send me the findings summary", "I'm open to a 20-minute follow-up conversation", or both, and leave your email. If you do, your email and those choices are stored in a separate Airtable table, linked to your answers only by the response ID. They are also added to Brevo, which sends you one confirmation email. We use your email only to send the summary or arrange the conversation. If you ask us to delete it, your answers remain without any link to you.

How we use your answers. Answers are used for research into how change readiness is assessed, and to inform what we build. They are analysed in aggregate, and anything we publish contains no names, emails or details that identify you or your organisation.

Legal basis: your consent (Art. 6(1)(a) GDPR). Taking part is voluntary and you can withdraw at any time.

4. Founding cohort applications and the practitioner waitlist

pilot.echelonlabs.io and practitioners.echelonlabs.io each link to a Tally form: an application for the founding pilot cohort, and a waitlist for founding practitioners.

What you tell us. Your name and email. For the cohort application, also your organisation, role, current situation, organisation size and short written answers. For the waitlist, also the kind of practice you run, how many engagements you run a year, short written answers, and whether you are open to a conversation. We also receive the campaign tags in the link you used and which page you came from.

What happens when you submit. Tally stores your full response. A small integration we run on Cloudflare then passes your email, first and last name, job title and campaign tags to Brevo, adds you to the cohort or waitlist list, and sends you a confirmation email. To stop the same submission being processed twice, the integration keeps the form response ID, and nothing else, for 30 days.

Emails that follow. After confirming, we send a short series of emails from the founder over roughly two weeks. Waitlist members may then receive an occasional product update. You can stop these at any time by replying to any email or writing to [email protected].

Legal basis: handling your application or waitlist place at your request (Art. 6(1)(b) GDPR), and our legitimate interest in keeping applicants informed about the programme they asked to join (Art. 6(1)(f) GDPR). You can object to the follow-up emails at any time.

5. Emails and correspondence

All emails described above are sent through Brevo, from an echelonlabs.io address or a qognexus.com address. Both domains belong to Echelon Labs, and Qognexus™ is the product we are building. An email from either domain is from us, and the same rights and opt-out apply. Brevo records whether each email was delivered, opened and whether links were clicked. We use this only to check that emails arrive and are useful, not to profile you.

If you email or call us directly, we keep the message and your contact details so we can reply. Legal basis: our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

6. Who receives your data

We share personal data only with the service providers below, each acting as a processor on our behalf under a data processing agreement. We do not sell personal data or share it with anyone else unless the law requires it.

Tally (Tally BV, Belgium) hosts the questionnaire and forms and stores the responses.

Airtable (Formagrid Inc., trading as Airtable, United States) stores questionnaire answers and, separately, the contact details of people who opted in.

Brevo (Sendinblue SAS, France) stores contact details and list membership, and sends our emails.

Cloudflare (Cloudflare, Inc., United States) hosts the website and runs the integrations that pass form responses to Airtable and Brevo.

Google (Google LLC, United States) serves the fonts used on the website.

7. International transfers

Tally and Brevo are based in the EU. Airtable, Cloudflare and Google are US companies and may process data outside the EEA. Those transfers rely on the EU-US Data Privacy Framework, under which each is certified, and on the European Commission’s Standard Contractual Clauses.

8. How long we keep it

Questionnaire answers: until the research round is complete and findings are shared, and no longer than 24 months after you submit. After that they are deleted or fully anonymised.

Email left on the questionnaire: deleted once we have sent the findings summary and, if you asked for one, held the follow-up conversation. At the latest, it is deleted 6 months after you submit.

Applications and waitlist places: while the cohort or waitlist is open, and up to 24 months after our last contact with you, unless you become a customer or ask us to delete it sooner.

Duplicate-check record for applications: 30 days, then deleted automatically.

Correspondence: up to 12 months after the last exchange.

Business and tax records: if an application or conversation leads to an agreement, the contracts, invoices and related correspondence are kept for 7 years, as Dutch tax law requires. Legal basis: our legal obligation (Art. 6(1)(c) GDPR).

Website request logs: kept by Cloudflare only for the short period needed to operate and secure the site.

9. Cookies

echelonlabs.io sets no cookies. The forms open on tally.so, where Tally’s own cookie policy applies.

10. Automated decisions

We do not make automated decisions about you, and we do not profile individuals. Cohort applications are reviewed by the founder.

11. Your rights

Under the GDPR you can ask us to access, correct, delete or export your data, to restrict processing, or to object to it, including to the follow-up emails. Where we rely on consent, you can withdraw it at any time without affecting what happened before.

Write to [email protected] and we will reply within one month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

12. Security

Access to personal data is limited to the founder and the processors named above. Connections are encrypted with HTTPS, the Tally-to-Brevo integration only accepts requests signed by Tally, and we collect no more than each purpose needs.

13. Changes

We will update this page when our processing changes and revise the date at the top. If we change how questionnaire or application data is used in a material way, we will tell the people affected directly.