Skip to main content

Privacy statement

Last updated: 10 June 2026

Privacy Summary

We recognise that you value your data and privacy, and Deloitte is committed to protecting your information by handling it responsibly and safeguarding it using appropriate security measures. The following statement sets out how and when we collect, use, and share your personal and organisational information that you provide to us through your participation in the Transition Lab Programme.

By accepting an invite to participate in the Deloitte Transition Lab Programme, you are acknowledging and accepting the data collection, storage and processing terms as outlined in this policy. Deloitte assumes acceptance of these terms unless communication of rejection is otherwise received.

If you choose not to provide us with this information, or you object to us processing such information, we may be prevented from processing your instructions or continuing to provide all or some of our services to you.

Transition Labs are managed by Deloitte LLP with registered office 1 New Street Square, London, EC4A 3HQ. Our Transition Labs are delivered using a technical solution hosted on an interactive platform (for Digital Transition Labs) and utilises a cloud-based database solution (“Third Party Platforms”).

Third Party Platforms

Intuiface Player – platform host running the Digital Transition Lab interactive experience built using Intuiface Composer (customisable software solution that provides the GUI and interactive elements for session data). This is a Software as a service solution hosted in AWS EU.

Airtable (“Third Party Data Storage Provider”) – cloud-based content management system and database for project management, holding client session data, analysis, and reporting. Airtable has in-built AI capability that may be utilised in the processing of your data1. Airtable is hosted in AWS in the EU and USA with client session and project management (PMO) data stored at rest in the EU.

Data Classifications

During your participation in the Transition Lab programme, we will collect, obtain, and process information about you and your organisation.

This information may include:

  • Personal information (such as):

    • Gender
    • Key personal dates (i.e., holiday, key milestones)
    • Any personal data that we may require to make reasonable adjustments for you, or for additional facilities to enable you to participate in the Transition Lab Programme (if applicable)
    • Information about you that we obtain, or which we infer from the way we interact with you
  • Business Contact Information including individual’s name and one of more of the following business data:

    • Business name
    • Title
    • Role
    • Business address
    • Telephone number (including mobile phone number)
    • E-mail address
  • Publicly available information about you and/or your organisation
  • Other business data (such as):

    • Business strategy information
    • Organisational charts (i.e., your direct team, Executive Leadership Team and the Board and Committee members)
    • Key business dates (i.e., committee meetings, announcements, other board commitments)
    • Stakeholder perspectives on your own personal as well as business priorities (including stakeholder interview notes)
  • Programme feedback from survey completion
  • Any other points of discussion that may arise during the Transition Lab Programme which may include public, confidential, high-risk confidential and/or personal information.2

2During your participation in the Transition Lab experience, you will be guided through an array of modules by Deloitte’s experienced facilitation teams. To help provide clarity on the discussion points which may be collected and processed as part of this programme, the Transition Lab agenda may include (but not limited to):

  • Your personal journey: understand how you have got to the position you are in today including the challenges and successes you may have faced, both personally and in your career roles.
  • Your wider point of view: your perspective on hot topics that Executives and businesses are facing.
  • Behavioural analysis: you may be invited to complete a self-assessment based on global business data which reveals four patterns of behaviour. The system provides insights about individuals and teams based on observable traits and preferences, with the goal of developing openness and collaboration to drive individual and team performance.
  • Aspirations: understand your hopes, concerns, and legacy for both you and your role. You will discuss your perspective on your key stakeholders hopes, concerns and legacy ambitions too.
  • Time: assess where you spend your time and how you may adapt into a new area of focus.
  • Priorities: identify and define areas of importance and urgency. Deloitte will conduct stakeholder interviews prior to your Lab session to obtain a wider perspective of your priorities. These may be personal and/or business related.
  • Talent: evaluate and structure the roles and individuals in your team.
  • Leadership: exploration of your leadership style, your story and how to become a distinctive leader.
  • Stakeholders: identify and assess individuals you must influence.
  • Plan: build a 6-to-12-month action plan to deliver.
  • Stakeholder Input: key messages and input from your stakeholders, including personal attributes and watchouts.

Data Storage

All information that you provide us with is stored on our secure servers, or those of our Third Party Data Storage Provider located within the EEA (some data used in the preparation and output of your Transition Lab may be temporarily stored on servers from our Third Party Data Storage Provider located within the US for a period of up to 14 days from capture, upon which time it will be transferred to EEA). All data requests, including those permitted to permanent data storage in the EU, are processed via Airtable’s US servers before being stored in their permitted data jurisdiction.

Data Processing

Data processing will take place within the UK, EEA, and US and where your personal data is processed outside of the United Kingdom, Deloitte has ensured that appropriate safeguards are taken to protect it.

We will process information about you to arrange and conduct the Transition Lab experience with you directly and to document discussions and findings to provide you with an output from your experience.

We will retain data for 7 years after the Transition Lab is held, at which point we will anonymise the data and remove personal identifiers. During this time, any output and personal information will be readily available to you. Any data processed for research or statistical analysis will always be free from personal information.

AI

1To enhance efficiency and insights, we may utilise Artificial Intelligence (AI) tools for tasks such as content preparation, data analysis, and process automation. Data used for AI processing may include (but not limited to):

  • Stakeholder interview notes
  • Lab session content (preparation and final reports)
  • Feedback surveys
  • Business contact information (Deloitte and Client)
  • Publicly available information about you or your business through access to the web.

Data classifications for AI processing may include: Public, Deloitte Confidential (including business contact information), Client Confidential (including business contact information), Deloitte High Risk Confidential, Client High Risk Confidential, Personal.3

Input will be free from personal information3 in these processes and all AI output is anonymised and thoroughly reviewed and validated by our experienced professionals to ensure accuracy and relevance.

AI capability is provided by our Third-Party Data Storage Provider (Airtable) and makes use of LLMs operational on AWS Amazon Bedrock. Only AI models hosted within AWS EU are permitted for use, however initiation of requests may be processed through Airtable’s US servers before being sent to EU hosted LLMs for AI processing. Outputs may also be processed through Airtable’s US servers before being stored at rest in the EU. All requests and responses to and from AI platforms are encrypted in transit.

The data within Airtable workspaces (“customer data”) is not retained by any of Airtable’s AI platforms or model developers and is not used for model training by Airtable or its AI vendors. This includes the input that is sent to the LLM (the prompt and the associated data) as well as the response returned from the model (output). Airtable has contractual safeguards through data protection agreements with their AI vendors to ensure that customer data is not used for current or future model training.

We may utilise alternative AI tooling for efficiency and insights (Microsoft Copilot and Deloitte curated agents in partnership with AI providers such as Google Gemini and Open AI ChatGPT – UK/EU based models). Where these tools are utilised, Deloitte has assessed them to ensure that appropriate safeguards are taken to protect your data.

3Personal data is only permitted for use within Microsoft Copilot. Data always remains within Deloitte’s protected Microsoft 365 environment, and Microsoft’s contractual security and data‑protection measures continue to apply.

Email Services

To support the delivery of your opportunity, we may utilise Airtable’s in built email service to provide the Transition Lab team and Deloitte facilitation teams with notifications about your Lab (e.g. receiving internal requests for the Lab opportunity, approval status, scheduling Lab dates etc). Airtable utilises a sub processor, Mailgun Technologies, Inc, to conduct this transactional email service and is hosted within EU servers.

To aid with the creation of your Lab outputs, we will utilise Intuiface’s in built email service for Digital Transition Labs. This allows the Transition Lab team to retrieve screenshots of your experience to compile into a password protected PDF. Intuiface does not store any client data whilst utilising this service, however will be required to process the Lab screenshots in their AWS EU servers for the purpose of sending the emails.

Further information

We may modify or amend this Privacy Notice from time to time. When we make changes to this notice, we will amend the revision date at the top of this page, and such modified or amended Privacy Notice will be effective from that revision date. We therefore invite you to regularly consult this notice to stay up to date with any changes made since your last consultation.

For more details on how Deloitte handles and shares your information and for details on your rights and how to contact us, please click here.