Privacy policy

Last updated: 15 October 2026

Who runs this site

This website (littlejohns.org) is a personal site written and operated by Vaughn Littlejohns. Littlejohns is the name I publish under.

For any privacy question or request, contact vaughn@littlejohns.org.

I am responsible for the personal information collected through this website, the newsletter, the free guides and templates, the scorecard, the surveys I run, the podcast, and any email you send me. For visitors in the UK and EU, I act as the data controller for that information.

What I collect

I only collect what I need.

• Newsletter and free guides. When you subscribe to the Littlejohns Letter or request a free guide or template (for example the AI Fluency guide, the Build With Me waitlist, or the Brain Dump guide), I collect your email address, and your first name and role if you give them.
• The AI Readiness Scorecard. When you complete the scorecard, I collect the answers you select and the email address you give so the result can be sent to you.
• Surveys and the AI Readiness Assessment. When you take part in one of my surveys, or register a school's interest, I collect the answers you give and any contact details you choose to provide. Student surveys collect no names or contact details. How survey data is protected, reported and used for research is set out in the survey terms.
• Emails. When you email me, I collect your name, email, school or organisation, and whatever you choose to write.
• Podcast. If you come on the podcast, I collect the information in your guest application (submitted through Calendly) and the audio and video of the recording, which is then published as an episode, along with the consent form you complete.
• Website usage. The host keeps standard server logs (such as IP address, browser type, and the pages requested) to deliver and secure the site. The site also uses Vercel Web Analytics, a cookieless service that gives aggregated page-view counts. It does not set cookies and cannot identify you. There are no advertising trackers. See "Cookies and analytics".

This website is aimed at adults working in schools. I do not knowingly collect personal information from children through it. Where a school runs one of my student surveys, the responses are anonymous and the school arranges parental consent, as set out in the survey terms.

How I collect it

• Directly from you, when you subscribe, request a guide, complete the scorecard, email me, or take part in the podcast.
• Automatically, through standard server logs when you browse the site.

Why I use it, and the legal basis

You can withdraw consent for marketing at any time by clicking unsubscribe in any email, or by emailing me. Withdrawing consent does not affect anything done before you withdrew it.

Marketing emails

I only add you to the list when you ask me to, by subscribing or requesting a free guide, and that opt-in is recorded. Every email carries an unsubscribe link. I do not sell or rent your email address to anyone.

Who I share it with

I do not sell your data. I share it only with the service providers used to run this site and the podcast, who process it on my behalf under their own terms:

• Klaviyo: newsletter and subscriber management
• Google (Google Workspace, including Gmail, Google Forms and Google Sheets): email, forms and surveys
• SurveyMonkey and Tencent Survey: surveys, where Google services are unavailable (for example in mainland China)
• Vercel: website hosting and cookieless web analytics
• Calendly: podcast guest applications
• Zoom: podcast recording
• Spotify and other podcast platforms: distribution of published episodes

I may also disclose information where the law requires it, or to establish or defend a legal claim.

I do not use a third-party advertising provider. If that changes, I will update this policy first.

International data transfers

I am based between Thailand and Australia, and several of these providers (including Klaviyo, Google, Calendly, Zoom, and Vercel) are based in or process data in the United States and other countries. This means your information may be transferred and stored outside your home country, wherever you are in South-East Asia, Australia, the UK, or Europe.

I rely on appropriate safeguards for these transfers. Where personal data is transferred out of the UK or EEA, these providers and I rely on safeguards such as standard contractual clauses or, for US providers, the EU-US and UK Data Privacy Framework where they participate in it.

How long I keep it

• Newsletter, guide and scorecard subscribers: until you unsubscribe or ask to be removed.
• Survey responses: as set out in the survey terms. Information is kept only as long as it is needed, then de-identified or securely destroyed.
• Emails and podcast records: kept for as long as there is a genuine reason, such as my own records or the published podcast episode. I will remove your details on request where I am not required to keep them.
• Server logs: kept for a short period by the host for security and operational purposes.

I do not promise automatic deletion on a fixed timetable. If you want your information removed, email me and I will action it where I can.

Keeping it secure

I take reasonable steps to protect your information and to destroy or de-identify it when there is no longer a reason to hold it. No system is perfectly secure, but access is limited and the providers are reputable ones. If a data breach occurs that is likely to cause serious harm, I will notify affected people and the relevant regulator as required, including under Australia's Notifiable Data Breaches scheme.

Your rights

Depending on where you live, you have some or all of these rights over your personal information:

• Access a copy of what is held
• Correct anything inaccurate
• Ask for it to be deleted
• Object to or restrict how it is used
• Withdraw consent at any time
• Receive your data in a portable format
• Complain to a regulator

To exercise any of these, email vaughn@littlejohns.org. I will respond within the time the law requires (one month under UK GDPR).

• If you are in South-East Asia, you can complain to your local data protection authority, for example Thailand's PDPC, Singapore's PDPC, or Malaysia's PDP Department.
• If you are in Australia, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
• If you are in the UK or EU, you can complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk).

Cookies and analytics

This site is deliberately light. It does not set tracking or analytics cookies, and it does not run advertising tools. To understand which pages are useful it uses Vercel Web Analytics, provided by the host. It is cookieless: it records anonymised, aggregated page views and referrers using a temporary hashed identifier that cannot be linked back to you or followed across other sites.

Some pages embed third-party services, such as an embedded podcast player or video. When you use those, the provider may set its own cookies and receive your interaction with that feature, under its own privacy terms. The signup forms send your details to Klaviyo to manage your subscription.

You can control or block cookies through your browser settings. If analytics that uses cookies or identifies individuals is ever added, I will update this policy and, where required, ask for your consent first.

Changes to this policy

I may update this policy from time to time. When I do, I will change the "last updated" date at the top. Significant changes will be made clear on the site.

Contact

Questions about this policy or your data:
Vaughn Littlejohns
vaughn@littlejohns.org