Skip to content
FUTURES CHANGE LABORATORY

Legal

Privacy Policy

Futures Change Laboratory (FCL) operates remotely and works with people and organizations in more than one country. This page explains, in plain English, exactly what this website collects and what we do with it.

Last updated: 11 August 2026

Who we are

Futures Change Laboratory is the data controller for the personal data described here. We are a fully remote practice with no public office. You can reach us about anything on this page at hello@futureschangelab.com.

What we collect, why, and on what basis

We only collect what a form asks for. There is nothing hidden, and we do not buy data about you from anyone else.

Remote Readiness Score

What we collect
Your name and email address, plus your answers and resulting scores.
Why
To generate and send your scorecard, and to reference it if you contact us about it.
Lawful basis
Performance of a service you asked for.

Distributed Team Health Check

What we collect
Your name, work email address, company name, team size, your answers and resulting scores.
Why
To generate and send your team scorecard, and to compare your results against our aggregate benchmark.
Lawful basis
Performance of a service you asked for.

Contact form

What we collect
Your name, email address, organization (optional), area of interest and your message.
Why
To reply to your enquiry and, if relevant, to scope work with you.
Lawful basis
Performance of a service you asked for, and our legitimate interest in responding to enquiries.

Newsletter

What we collect
Your email address and where you signed up from.
Why
To send the monthly research brief and occasional news about programs.
Lawful basis
Your consent, which you can withdraw at any time.

Marketing email is always a separate, optional, unticked choice. If you take an assessment and do not opt in, you still get your scorecard — delivery of results is never conditioned on agreeing to marketing.

Where your data is stored

Submissions are stored in a managed PostgreSQL database provided by Supabase, hosted in the United States. That means personal data you send through this site is transferred to and stored in the United States.

If you are in the European Economic Area or the United Kingdom, this is an international transfer. US law does not provide the same data-protection framework as the GDPR or UK GDPR, and in principle US public authorities may be able to compel access to data held by US providers. We rely on your explicit request or consent for the transfer and on our provider's Standard Contractual Clauses, we keep the data set as small as possible, and we delete it on request.

How long we keep it

Assessment submissions: 24 months from submission, then deleted. Contact form messages: 24 months after our last correspondence with you. Newsletter subscriptions: until you unsubscribe, plus a short suppression record of your email so we do not accidentally add you again. We delete earlier if you ask.

Who else sees it

We do not sell your personal data, and we do not share or trade it with third parties for their own purposes. The only parties who process it are the service providers that run this site and its database and our email delivery provider, acting on our instructions. We may disclose data if we are legally required to.

Your rights

Wherever you live, we will honour the following requests. Write to hello@futureschangelab.com and we will respond within 30 days.

  • Access. Ask for a copy of the personal data we hold about you.
  • Rectification. Ask us to correct anything inaccurate or incomplete.
  • Erasure. Ask us to delete your personal data.
  • Restriction. Ask us to pause processing while a question about it is resolved.
  • Portability. Ask for your data in a structured, machine-readable format.
  • Objection. Object to processing based on our legitimate interests.
  • Withdrawal of consent. Unsubscribe from marketing email at any time, using the link in any email or by writing to us.

You also have the right to lodge a complaint with a data-protection supervisory authority. In the United Kingdom that is the Information Commissioner's Office (ICO), ico.org.uk. In the EEA it is the authority in your country of residence. We would rather you came to us first, but you do not have to.

Cookies and analytics

This site does not use advertising cookies and does not track you across other websites. Any cookies set are strictly necessary to serve the pages you request.

Children

Our programs are for working adults. We do not knowingly collect personal data from anyone under 16. If you believe we have, write to us and we will delete it.

Changes to this policy

When this policy changes we update the date at the top of the page. Material changes to how we use marketing email will be announced in the newsletter itself.

Related: Terms of Service.