Privacy policy

Last updated: 10 June 2026

Who we are

This website (littlejohns.org) is operated by Littlejohns ("we", "us", "our"), the trading name of Vaughn Littlejohns, an Australian sole trader operating from Thailand. We work with independent and international schools across South-East Asia and Australia, and in the UK and Europe.

For any privacy question or request, contact vaughn@littlejohns.org.

We are responsible for the personal information we collect through this website, our newsletter, our free guides, the podcast, and our enquiry channels. For visitors in the UK and EU, we act as the data controller for that information. Where we run an AI readiness assessment for a school, a different arrangement applies, set out in "Assessment and survey data" below.

What we collect

We only collect what we need.

• Newsletter and free guides. When you subscribe to the Littlejohns Letter or request a free guide (for example the AI Fluency guide, the Build With Me waitlist, or the Brain Dump guide), we collect your email address, and your first name and role if you give them.
• Enquiries. When you email us or use a contact link, we collect your name, email, school or organisation, and whatever you choose to write.
• Booking a call. When you book through Calendly, including a podcast guest application, we collect your name, email, and any details you enter when booking.
• Podcast. If you come on the podcast, we collect the information in your application and the audio and video of the recording, which is then published as an episode.
• Assessment and survey data. When a school engages us to run an AI readiness assessment, survey responses are collected through Google Forms. This is covered separately below, because it is the school, not us, that decides this data is collected.
• Website usage. Our host keeps standard server logs (such as IP address, browser type, and the pages requested) to deliver and secure the site. We also use Vercel Web Analytics, a cookieless service that gives us aggregated page-view counts. It does not set cookies and cannot identify you. We do not run advertising trackers. See "Cookies and analytics".

The public website is aimed at adults working in schools. We do not knowingly collect personal information from children through this website. Information about students only ever reaches us through a school-commissioned assessment, under the terms below.

How we collect it

• Directly from you, when you subscribe, request a guide, email us, book a call, or take part in the podcast.
• From a school that has engaged us, when it distributes assessment surveys to its own community.
• Automatically, through standard server logs when you browse the site.

Why we use it, and our legal basis

You can withdraw consent for marketing at any time by clicking unsubscribe in any email, or by emailing us. Withdrawing consent does not affect anything we did before you withdrew it.

Marketing emails

We only add you to our list when you ask us to, by subscribing or requesting a free guide, and we record that you opted in. Every email carries an unsubscribe link. We do not sell or rent your email address to anyone.

Assessment and survey data (school engagements)

When a school engages Littlejohns to run an AI readiness assessment, the school decides to survey its own community, which may include staff, parents, leaders, and students. In data protection terms, the school is the data controller for those responses. Littlejohns acts as a service provider, processing the responses on the school's behalf and under our engagement agreement with it.

In these engagements:

• The school is responsible for distributing the surveys to its community and for obtaining any consents required, including any consent needed for students or other minors, in line with its own privacy notices and local law.
• We provide the survey templates (built in Google Forms), collect the responses, analyse them, and return a findings report to the school.
• We use the responses only to produce that school's report. We do not use them for our own marketing, and we do not sell them.
• We hold the responses and the report for the duration of the engagement and any follow-on work, and we deal with their return or deletion as agreed with the school.
• Survey participants who want to access, correct, or remove their responses should contact their school first, as the controller. We will support the school in responding.

If you took part in a school survey and have a concern you cannot resolve with your school, you can contact us at vaughn@littlejohns.org.

Who we share it with

We do not sell your data. We share it only with the service providers we use to run the business, who process it on our behalf under their own terms:

• Klaviyo: newsletter and subscriber management
• Google (Google Workspace, including Gmail and Google Forms): email and survey forms
• Vercel: website hosting
• Calendly: call bookings and podcast guest applications
• Zoom: video calls and podcast recording
• Spotify and other podcast platforms: distribution of published episodes

We may also disclose information where the law requires it, or to establish or defend a legal claim.

We do not currently use a third-party website analytics or advertising provider. If that changes, we will update this policy first.

International data transfers

We operate from Thailand and Australia, and several of our providers (including Klaviyo, Google, Calendly, Zoom, and Vercel) are based in or process data in the United States and other countries. This means your information may be transferred and stored outside your home country, wherever you are in South-East Asia, Australia, the UK, or Europe.

We rely on appropriate safeguards for these transfers. Where personal data is transferred out of the UK or EEA, we and our providers rely on safeguards such as standard contractual clauses or, for US providers, the EU-US and UK Data Privacy Framework where they participate in it.

How long we keep it

• Newsletter and guide subscribers: until you unsubscribe or ask us to remove you.
• Enquiries, bookings, and podcast records: we keep these for as long as there is a genuine business reason, such as an ongoing or potential working relationship, our own records, or the published podcast episode. We will remove your details on request where we are not required to keep them.
• Assessment and survey data: held and disposed of as agreed with the engaging school (see above).
• Server logs: kept for a short period by our host for security and operational purposes.

We do not promise automatic deletion on a fixed timetable. If you want your information removed, email us and we will action it where we can.

Keeping it secure

We take reasonable steps to protect your information and to destroy or de-identify it when we no longer have a reason to hold it. No system is perfectly secure, but we limit who can access the data and rely on reputable providers. If a data breach occurs that is likely to cause serious harm, we will notify affected people and the relevant regulator as required, including under Australia's Notifiable Data Breaches scheme.

Your rights

Depending on where you live, you have some or all of these rights over your personal information:

• Access a copy of what we hold
• Correct anything inaccurate
• Ask us to delete it
• Object to or restrict how we use it
• Withdraw consent at any time
• Receive your data in a portable format
• Complain to a regulator

To exercise any of these, email vaughn@littlejohns.org. We will respond within the time the law requires (one month under UK GDPR). If your request is about a school survey you took part in, contact your school first, as it controls that data.

• If you are in South-East Asia, you can complain to your local data protection authority, for example Thailand's PDPC, Singapore's PDPC, or Malaysia's PDP Department.
• If you are in Australia, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
• If you are in the UK or EU, you can complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk).

Cookies and analytics

This site is deliberately light. It does not set tracking or analytics cookies, and we do not run advertising tools. To understand which pages are useful we use Vercel Web Analytics, provided by our host. It is cookieless: it records anonymised, aggregated page views and referrers using a temporary hashed identifier that cannot be linked back to you or followed across other sites.

Some pages embed third-party services, such as a Calendly booking widget or an embedded podcast player. When you use those, the provider may set its own cookies and receive your interaction with that feature, under its own privacy terms. Our signup forms send your details to Klaviyo to manage your subscription.

You can control or block cookies through your browser settings. If we ever add analytics that uses cookies or identifies individuals, we will update this policy and, where required, ask for your consent first.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "last updated" date at the top. Significant changes will be made clear on the site.

Contact

Questions about this policy or your data:
Vaughn Littlejohns, Littlejohns
vaughn@littlejohns.org