Legal

Privacy Policy

What we collect, why we collect it, and the control you keep over it.

Last updated 18 August 2026

Controller

ALBA Strategic Advisory, Brussels, Belgium, is the controller of the personal data described here. For any privacy question or request, write to hello@alba-strategy.com.

What we collect

When you download the CEO Playbook: your first and last name, business email, and optionally your company, role and phone number.

When you take the Transformation Readiness Assessment™: the same contact details plus your answers to the 30 statements and the resulting scores.

When you pay: Stripe processes your payment and shares with us the payment status, amount and a transaction reference. We never receive your card details.

Why we use it

To deliver what you asked for (the playbook, your results report, your debrief call), to issue receipts and meet our accounting obligations, and to follow up with you about the transformation topics you showed interest in.

Our legal bases are performance of a contract (delivering a purchased product), consent (where you ticked the box to hear from us), and our legitimate interest in business follow-up with professional contacts.

Who we share it with

We use a small set of processors: Lovable Cloud (hosting and database, EU), Stripe (payments), Google Sheets (our contact records), and Lovable's email service (message delivery from notify.alba-strategy.com). We do not sell your data or share it for third-party advertising.

How long we keep it

Assessment records and their results are kept for three years so you can return to your report and so we can support your debrief. Records tied to a payment are kept for seven years to meet Belgian accounting rules. Marketing contacts are removed on request or after three years without interaction.

Your rights

You can ask us for a copy of your data, correct it, delete it, restrict or object to its use, or receive it in a portable format. You can withdraw consent at any time. Email hello@alba-strategy.com and we will respond within 30 days.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels.

Cookies

This site uses only what is needed to make pages and the checkout work. Stripe sets cookies on the checkout to detect fraud. We do not run advertising trackers.