MT1L

MT1L · Policies

Privacy Policy

Last updated: 18 July 2026

Trust is one of the three things the VTA Framework is built on, so we hold as little of your information as possible and are clear about what we do with it. This policy explains, in plain English, what we collect when you contact us or engage our services, and the rights you have.

Who we are

MT1L (“MT1L”, “we”, “us”) is the home of the VTA Framework. We share insights on AI, digital transformation, culture and organisational change using the lenses of Value, Trust and Alignment, and we provide related services including VAxAI, our operational administration service. We are the data controller for the personal information described in this policy, and we handle it in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect very little. This policy explains, in plain English, what we collect when you contact us or work with us, and the rights you have. Questions are welcome at hello@mt1l.com.

Summary. We use your information only to provide our services, to understand whether our work might be relevant to you or your organisation, and to meet our legal obligations. We do not sell your data or share it with third parties for their own marketing. We delete information when it is no longer needed.

When you get in touch

If you submit a contact enquiry or email us directly, we collect your name, email address and the content of your message, along with any other details you choose to share, such as your organisation, whether a published insight prompted the enquiry (when you open the form from a post), and whether you would like to book a discovery call. We use this to respond to your enquiry by email and, where relevant, to prepare for any follow-up conversation or scheduled call.

Basis: Legitimate Interests; Performance of Contract.

When you sign up to our newsletter

If you sign up to our newsletter, whether through the form in the footer or the sign-up prompt on the site, we collect your email address (and, where you choose to provide it, your name) to send you MT1L insights, thinking on the VTA Framework and related topics, and relevant updates about our work.

We will only add you to the list after you actively submit your email address. No pre-selected opt-ins are used. Every newsletter email includes a clear link to unsubscribe. Alternatively, you can ask us to remove you at any time by emailing hello@mt1l.com.

Basis: Consent. Withdrawal of consent does not affect the lawfulness of any processing carried out before you withdrew it.

When you book a call

If you book a discovery conversation, scheduling is handled by our booking provider, who collects the details needed to arrange the meeting. We receive confirmation of the booking so we can prepare for and attend it. Basis: Legitimate Interests; Performance of Contract.

If we identify you as a potential client

We may process limited professional information about individuals in organisations that could benefit from our services. This information is taken only from publicly available professional sources where it has been made available in a work context.

We use it solely to assess whether there is a genuine fit and, where appropriate, to make contact. We do not process special-category data or any information from private contexts.

Basis: Legitimate Interests. We have assessed that our interest in identifying organisations that could genuinely benefit from our services is proportionate and does not override the rights of those concerned. You have the right to object at any time. See Your rights below, and we will stop immediately.

During an engagement

If we work with you, we collect and use information shared in the course of that engagement, in calls, emails, meetings or materials, to deliver and improve the quality of our services. Basis: Performance of Contract; Legitimate Interests.

Website analytics

Where you consent to analytics cookies, we collect limited, privacy-friendly analytics about how the site is used, such as aggregate page views. This does not identify you, and we do not use advertising or cross-site tracking. Analytics are only activated after you have accepted them in the cookie preference panel. Basis: Consent.

Cookies and browser storage

We use cookies and similar browser storage to make this website work and to understand how it is used. When you first visit the site, a cookie preference panel shows the categories in use and lets you choose what you are comfortable with, including options to allow all, allow your selection, or deny non-essential cookies. You can revisit your preferences at any time using the Cookie settings link in the footer.

  • Strictly necessary : Required for core functions such as security, session management, and storing your accessibility and cookie preferences. These are always active and cannot be disabled. No separate consent required.
  • Analytics : Where you consent, we use Vercel Analytics to collect anonymised, aggregate data about how pages are used. No individual is identified and no advertising network receives this data. Basis: Consent.
  • Marketing and communications : Where you consent, we may use information about your use of the site to tailor newsletter communications and measure their effectiveness. Basis: Consent.

Your cookie preferences are stored in your browser’s local storage (not a server-set cookie) so that the preference panel does not reappear on every visit. No personal information is sent to us as part of this storage.

Information from other sources

We may also receive personal information from:

  • Public professional profiles and websites : where you or your organisation has made information publicly available in a professional context. Basis: Legitimate Interests.
  • Referrals : where someone refers you to us or mentions you in the context of a potential engagement. Basis: Legitimate Interests.

We may also need to process information in any of the contexts above to comply with a legal obligation to which we are subject.

Who we share your information with

We keep things lean. We use a small number of trusted third-party providers to support our operations, and a limited amount of your information may be processed by them on our behalf, only so far as they need it to provide their service and under appropriate contracts. These cover:

  • secure website hosting and data storage;
  • privacy-friendly website analytics (only where you have consented);
  • appointment scheduling, if you book a call;
  • transactional email delivery, if you subscribe to our newsletter; and
  • AI processing where we use it in our work (see our AI Use Policy).

We do not sell your data or share it with third parties for their own purposes. We will share personal information with law enforcement or other authorities if required by applicable law.

International transfers

Some of our providers may be based outside the UK or European Economic Area. Where this is the case, we ensure appropriate safeguards are in place in line with UK GDPR, for example, UK adequacy regulations, the UK International Data Transfer Agreement, or standard contractual clauses. Contact us if you would like further detail.

How long we keep your information

  • Enquiry data (where no engagement follows) : up to two years from your last interaction.
  • Client data : for the duration of the engagement and then five years.
  • B2B research records : reviewed regularly; removed when no longer relevant, when contact has concluded, or when you ask us to stop.
  • Newsletter subscriber data : for as long as you remain subscribed. On unsubscribing, your email address will be removed within 30 days.
  • Aggregate analytics that do not identify you may be kept for longer.

Your rights

Under the UK GDPR you have the right to:

  • access the personal information we hold about you;
  • require us to correct any mistakes;
  • require the erasure of your personal information in certain circumstances;
  • receive your personal information in a structured, commonly used and machine-readable format;
  • object at any time to processing for direct marketing or outreach: we will stop immediately;
  • object in certain other circumstances to our continued processing; and
  • restrict our processing in certain circumstances.

For further information see ico.org.uk/your-data-matters. To exercise any right, email hello@mt1l.com with enough information to identify you and describe your request. We will respond within one month.

Keeping your information secure

We have appropriate technical and organisational measures in place to prevent personal information from being accidentally lost, used or accessed in an unauthorised way, including encryption in transit and access controls. We limit access to those with a genuine need, and those who process it do so only in an authorised manner and subject to a duty of confidentiality. Our services are intended for organisations and professionals; they are not aimed at children, and we do not knowingly collect information from anyone under 18.

How to complain

We hope we can resolve any concern directly, so please contact us first at hello@mt1l.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk/concerns or by telephone on 0303 123 1113.

Changes to this policy

The current version is always published here with the date above. We will communicate any meaningful changes directly where we hold contact details for you.

How this reflects the VTA Framework

We apply the same test to how we handle data that we apply to any change: does it create genuine Value, does it reflect our commitment to treating people with respect (Alignment), and can it be Trusted by the people it affects? We collect only what serves a clear purpose, handle it with care, and are transparent about what we do and what rights you have, including the right to say no.

Questions about this policy? Email hello@mt1l.com. You can also read our Privacy Policy, Terms of Use, AI Use Policy and Justice, equity and fairness.