WonderLead Privacy Policy

WonderLead is operated by Patricia Juarez, an independent career development practitioner and educator.

Data Controller: Patricia Juarez, trading as WonderLead
Contact: patri@develagora.com

This Privacy Policy applies to data collected through the WonderLead Practitioner Programme sales page, enrolment process, programme portal, and associated communications.

• Account and registration data: Full name, email address, LinkedIn profile URL (optional), current role, target programme role, secondary role preferences, task interests, weekly time availability, support preferences (onboarding buddy and/or mentor support), chosen tier, project selection, custom project description (if applicable), referral source, and any optional notes you provide in the application form
• Authentication data: If you sign in with Google to apply, WonderLead receives your name and email from your WonderLead account via Supabase Auth. We do not receive your Google password.
• Payment details: Payment is processed securely by Stripe. WonderLead does not store card numbers, bank details, or full payment data. We receive only payment confirmation status and amount.
• Programme portal usage: Week completion tracking may be stored locally in your browser (localStorage). This data does not leave your device unless you choose to sync it through authenticated programme features.
• Programme deliverables: Documents, designs, and artefacts you submit during the cohort are stored in shared collaboration tools (for example Notion) for the duration of the programme.
• Communications: Emails and messages you send to Patricia or through programme channels are retained for programme administration.
• Feedback and testimonials: Survey responses, interview notes, written programme feedback, and any testimonial or video permission you grant may be retained to improve the curriculum and, with your consent, for marketing on the WonderLead website or sales materials.
• Support requests: If you use the on-site support messenger (Featurebase), messages and metadata needed to respond to your request are processed by that service.

• To deliver the programme and provide coaching and community access
• To issue your WonderLead Practitioner Certificate upon completion
• To send cohort communications, weekly materials, and coaching notes
• To improve the curriculum based on anonymised feedback and cohort outcomes
• To send future programme announcements and WonderLead updates (you can opt out at any time via the unsubscribe link in any email)

We do not use your data for advertising, profiling, or automated decision-making. We do not sell your data.

• Contract performance (Art. 6(1)(b) GDPR): Processing your registration data and delivering the programme is necessary to fulfil the enrolment agreement.
• Legitimate interest (Art. 6(1)(f) GDPR): Curriculum improvement using anonymised cohort feedback is in WonderLead’s legitimate educational interest and does not override your rights.
• Consent (Art. 6(1)(a) GDPR): Analytics cookies (PostHog and Google Analytics) are used only with your consent, given via the cookie banner. You may withdraw consent at any time from the cookie settings button.
• Consent (Art. 6(1)(a) GDPR): Marketing emails and future programme announcements are sent only with your consent, given at registration. You may withdraw consent at any time.

• Programme data (name, email, deliverables): Retained for the duration of the programme plus 2 years after programme end, to support certificate verification and alumni access.
• Payment records: Retained for 7 years to comply with legal financial record-keeping requirements.
• Certificate verification record: Retained only with your explicit permission. If you do not wish your completion to be verifiable, you may request deletion.

You may request deletion of your data at any time by contacting patri@develagora.com. Deletion requests will be processed within 30 days, subject to legal retention requirements.

• PostHog: Consent-based product analytics on WonderLead marketing pages, including the Practitioner Programme sales and registration pages (page views, CTA clicks). PostHog is hosted in the EU and only receives events after you accept analytics cookies. Session recordings mask inputs and text. PostHog does not store or display your registration answers or programme deliverables. Governed by PostHog’s Privacy Policy.
• Google Analytics (GA4): Consent-based usage analytics on WonderLead marketing pages and tools. Governed by Google’s Privacy Policy.
• Stripe: Payment processing. Stripe is PCI-DSS compliant. Your payment data is governed by Stripe’s Privacy Policy.
• Supabase: Authentication and secure storage of programme registration records linked to your WonderLead account. Governed by Supabase’s Privacy Policy.
• Google Sheets: Application records may be stored in a private spreadsheet used for cohort administration and notifications.
• Resend: Transactional email delivery for application confirmations and programme communications.
• Email service provider: Programme communications and cohort emails are sent via a third-party email platform. Participant email addresses are stored in this platform for the duration of active communications.
• Collaboration tools (e.g., Notion): Shared cohort workspace where programme materials and deliverables are stored. Governed by their respective privacy policies.
• Featurebase: Optional on-site support messenger on the Practitioner Programme pages. If you use it, your message content and basic session metadata are processed according to Featurebase’s privacy policy.

Data is never sold, shared with advertisers, or transferred to employers without your explicit written consent.

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

To exercise any of these rights, contact: patri@develagora.com. Requests will be responded to within 30 days.

You may also lodge a complaint with your national data protection authority. In Spain: Agencia Española de Protección de Datos (AEPD). In other EU member states: contact your local supervisory authority.

WonderLead marketing pages (including the Practitioner Programme) use PostHog and Google Analytics for consent-based analytics (for example page views and apply-button clicks). These tools only run after you accept analytics cookies from the privacy banner shown on your first visit. You can change your choice anytime from the cookie settings button. Neither tool stores or displays your registration answers, programme deliverables, or coaching content.

These pages may also load an optional support messenger (Featurebase). That tool may set cookies or similar technologies when you interact with it.

The programme portal may use localStorage (browser-side only) to track your week completion progress. This data:

• Is stored entirely within your own browser
• Is not transmitted to WonderLead servers unless you use authenticated sync features
• Can be cleared at any time by clearing your browser data

We do not use third-party advertising or profiling cookies. No data about your browsing behaviour is sold to third parties.

We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify all currently enrolled Participants of any material changes by email at least 14 days before changes take effect.

The “Last updated” date at the top of this page indicates when the current version was published. Continued participation in the programme after notification of changes constitutes acceptance of the updated policy.

For any privacy-related questions, data requests, or to exercise your rights:

Patricia Juarez
WonderLead
patri@develagora.com

We aim to respond to all privacy enquiries within 5 business days.