Privacy policy

Last updated: 16 October 2026

This is a courtesy translation. If there is any discrepancy, the Spanish version (Política de privacidad) prevails.

At Executive Lab we take your data seriously. This policy explains what personal data we process when you visit executivelab.ai and its pages, subscribe to the newsletter, apply for a place on a programme or become a student, and what rights you have.

1. Data controller

The controller of your data is:

We process data in accordance with Andorra’s Qualified Law 29/2021 of 28 October on the protection of personal data and, for people located in the European Union, with Regulation (EU) 2016/679 (GDPR).

2. What data we process and why

Newsletter

Your email address and, if you give it to us, your name. We use them to send you the weekly newsletter and, from time to time, news about our programmes and events. The legal basis is your consent: you can unsubscribe at any time from the link at the end of every email.

Applications, waiting lists and calls

The data you enter in the form: first and last name, email, phone, company, role and your answers. We use them to assess whether the programme is right for you, contact you and schedule the call you request. The legal basis is taking steps, at your request, prior to a possible contract.

Contact via WhatsApp or email

The data and messages you send us, so that we can reply. The legal basis is your consent when you write to us and our legitimate interest in handling your request.

Students

If you buy a programme: your identification, contact and billing details, and your access details for the student platform. We use them to provide the service, issue invoices and support you. The legal basis is the performance of the contract and compliance with our legal (tax and accounting) obligations. Card details are handled directly by the payment gateway; we never see or store them.

Browsing, analytics and advertising

If you accept it in the cookie notice, we collect data about how you use the site (pages you visit, where you came from, type of device) to measure and improve it, and to measure our campaigns on Google and Meta. When you submit a form after arriving from an ad, we may report that event to Meta with your contact details in hashed form, to find out which campaigns work. The legal basis is your consent. Details are in the cookie policy.

We do not make automated decisions that significantly affect you.

3. How long we keep data

• Newsletter: until you unsubscribe.
• Applications and contacts that do not lead to a contract: up to two years from the last contact, unless you ask us to delete them sooner.
• Students: for the duration of the programme and, afterwards, the periods required by law for tax and accounting records.
• Cookies: the periods stated in the cookie policy.

4. Who we share data with

We do not sell your data or pass it on to third parties, unless the law requires it. To operate we use providers that process it on our behalf and only to provide their service to us:

• Vercel (website hosting).
• HighLevel (contact management, email sending and call scheduling).
• Typeform (application forms).
• Circle (student platform and community).
• Google (email, documents, web analytics and Google Ads campaign measurement).
• Meta (Facebook and Instagram campaign measurement).
• The payment gateway used for the purchase.

Andorra has an adequacy decision from the European Commission. Some of these providers are in the United States: in those cases the transfer takes place with the safeguards required by law, such as the EU-US Data Privacy Framework or standard contractual clauses.

5. Your rights

You can ask us at any time to access, rectify or erase your data, restrict or object to its processing, or take it elsewhere (portability), and you can withdraw the consent you gave us without affecting what was done before. Write to contacto@executivelab.ai stating which right you want to exercise; if necessary, we will ask you to prove your identity.

If you believe we have not handled your data properly, you can lodge a complaint with the Andorran Data Protection Agency (apda.ad) or, if you are in the European Union, with the authority in your country.

6. Minors

Our services are designed for professionals. We do not knowingly collect data from children under 16; if we find any, we delete it.

7. Security

We apply reasonable technical and organisational measures to protect your data against loss, unauthorised access or misuse. Even so, no transmission over the internet is one hundred per cent secure.

8. Changes to this policy

We may update this policy when the law or the way we work changes. The date at the top shows the latest revision; if the change is significant, we will let you know.