Next Position Advisory

Privacy Policy

Last updated: 19 August 2026

This website is operated by Mayer Advisory GmbH, Switzerland. Next Position Advisory is a brand of Mayer Advisory GmbH.

Mayer Advisory GmbH (“we”, “us”, “our”) is the data controller responsible for the processing of your personal data under the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

We take your privacy seriously and are committed to handling personal data lawfully, transparently, and securely.

1. Personal data we collect

a) Information you provide to us

When you:

  • Complete a free diagnostic or entry check
  • Purchase a digital product or guide
  • Purchase or enrol in a course, challenge, or cohort programme
  • Book a call or engage advisory services
  • Subscribe to the newsletter
  • Contact us directly by email

This may include:

  • Name
  • Email address
  • Billing address
  • Payment and transaction details, processed securely by Stripe
  • Professional background and career situation details you share during intake, in a diagnostic, or in a session
  • Information you voluntarily provide as part of a diagnostic, assessment, workbook, or written review

We only collect data that is necessary for the specific purpose.

b) Recordings and transcripts of advisory sessions

Advisory calls may be recorded and transcribed so that a written summary can be produced and so that your file remains accurate between sessions.

You will be told before a call is recorded, and you can decline. Declining does not affect the service you receive; notes are taken by hand instead.

Recordings and transcripts are processed using Granola and stored in our systems of record.

They are treated as confidential client material and are never used in marketing, teaching material, or published content in any form, identifiable or otherwise.

You may request deletion of a recording or transcript at any time.

c) Community participation

Some products include a private community space (currently Slack) for challenge and cohort participants. Your name, and any content you post there, is visible to other participants and to us. Do not post anything in a shared space that you would not want other participants to read.

d) Information collected automatically

When you visit the website we may automatically collect limited technical information, including IP address, browser type and version, device information, time zone and access times, cookies or similar technologies, pages visited and interaction data, and referral source.

This is used for security, website performance, and basic analytics. It is not used to identify you personally unless required for security or legal reasons.

2. Why we process your data

To deliver services. To process payments; to grant access to purchased digital products, guides, courses, challenges and cohort programmes; to run intake and diagnostic questionnaires; to deliver written observations, session summaries and reviews; and to provide ongoing support to advisory and subscription clients.

To communicate with you. To respond to enquiries; to send service communications such as booking confirmations, delivery notifications, course access, renewal reminders and payment requests; and to send the newsletter, only with your consent.

To operate and improve the service. To manage payments and subscriptions; to store client records and session summaries securely; to operate automated internal workflows that file and route your information; to operate and secure the website; and to improve service quality using anonymised usage patterns.

To meet legal obligations. To comply with legal, tax and accounting requirements, and to respond to lawful requests by authorities.

We do not sell personal data to third parties. We do not use your data for profiling or automated decision-making that produces legal or similarly significant effects. Diagnostics and structured intake are designed to gather and organise information for human review, not to make decisions about you.

3. Legal basis for processing

Performance of a contract. When you purchase a product or service, we process your data to deliver what you have paid for.

Your consent. For newsletter subscriptions, for information you provide voluntarily, and for the recording of advisory calls.

Compliance with legal obligations. To meet tax, accounting and regulatory requirements.

Legitimate business interests. To operate and secure the website, prevent fraud, and improve services.

You may withdraw consent at any time where processing is based on consent. This does not affect the lawfulness of processing carried out before withdrawal.

4. Data sharing and third parties

We share personal data only with service providers where necessary to deliver our services.

Payments. Stripe processes all payments and subscriptions. stripe.com/privacy

Systems of record and storage. Notion holds client records, session summaries and course content. Google Workspace, including Gmail and Google Drive, is used for email, calendars and client documents.

Course and programme delivery. Thinkific hosts course materials and student accounts. Slack hosts the private community spaces used by challenges and cohort programmes.

Email and marketing. Brevo manages mailing lists, sends newsletters and delivers automated sequences. systeme.io hosts event registration pages.

Booking. Calendly is used to schedule calls.

Forms and automation. Fillout processes intake and diagnostic forms. Zapier and n8n move data between the services listed here and file it into our systems of record.

Meeting capture. Granola records and transcribes advisory calls where you have agreed to recording.

AI processing. Anthropic (Claude) powers the Executive Companion, structured diagnostics, and the summarising of session transcripts into written notes. anthropic.com/privacy

Website hosting. Hostinger provides website infrastructure.

All providers are required to handle data securely and lawfully in accordance with applicable data protection standards.

5. International data transfers

Some providers process data outside Switzerland or the European Economic Area, including in the United States. Where this occurs we rely on appropriate safeguards under Swiss and EU data protection law, including Standard Contractual Clauses, adequacy decisions, and certification under recognised frameworks.

6. Data retention

Active service delivery. For the duration of your engagement, and for continued access to purchased digital products and courses.

Legal and accounting. Payment records are retained for 10 years under Swiss tax and accounting obligations.

Client records and session summaries. Retained for the duration of the service plus 2 years, so that continuity is preserved if you return.

Call recordings and transcripts. Retained for the duration of the service plus 2 years, and deleted on request at any time.

Community content. Messages in a shared community space remain visible for the life of that space unless deleted.

Newsletter. Until you unsubscribe.

When data is no longer required it is securely deleted or anonymised. You can request deletion at any time, subject to legal retention requirements for payment records.

7. Your rights

Under the nFADP and, where applicable, the GDPR, you have the right to be informed, to access your data, to have inaccurate data corrected, to have data erased subject to legal retention requirements, to restrict processing in certain circumstances, to object to processing based on legitimate interests, to data portability, and to withdraw consent where processing is based on consent.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.

To exercise your rights, contact us using the details in section 11.

8. Cookies and tracking technologies

This website uses cookies and similar technologies to ensure proper functionality, remember your preferences, and provide basic analytics on website usage.

We use essential cookies, required for the website to work, and analytics cookies, which help us understand how visitors use the site.

You can control or disable cookies through your browser settings. Disabling cookies may affect some website features. We do not use cookies for third-party advertising.

9. How AI is used

Where it is used. Free diagnostics use structured questions to route you to the right next step. The Executive Companion, included with several courses, responds to the situation you describe. Structured intake gathers professional context. Where you have agreed to recording, session transcripts are summarised into written notes.

What it does not do. AI does not make decisions about you, does not determine what you are offered or charged, and does not replace human judgment. All strategic judgment and all written advisory output is Lisa Mayer's.

How your data is handled. Processing is carried out through provider APIs. Under the API terms of the providers we use, your data is not used to train their models. AI tools respond only to the information supplied to them; they do not independently verify facts or read documents you have not provided. Outputs may be wrong, incomplete, or overconfident. Use them to organise your thinking and prepare questions, not as a substitute for reading your own paperwork or obtaining professional advice.

Your rights. You can request a copy of your intake data, correct inaccuracies in it, and request its deletion at any time.

10. Professional advice boundary

Our services reflect Lisa Mayer's professional experience and general observations about how large institutions and senior-level markets operate. They are not legal, tax, accounting, immigration, investment, or regulated financial advice, and they do not create a lawyer-client, adviser-client, or other professional relationship. Rights, entitlements, tax treatment, notice, garden leave, benefits, permits and plan rules vary by jurisdiction, employer and contract. Obtain independent advice before signing, resigning, accepting an offer, or acting where the consequences are material.

11. Data security, links, legal disclosure, changes, and contact

Security. We use appropriate technical and organisational measures, including encrypted transmission, secure cloud storage, access controls and authentication, and regular security updates. Access to personal data is limited to Lisa Mayer and to service providers under contractual confidentiality obligations. No online system can be guaranteed completely secure, but we take all reasonable precautions.

External links. The website contains links to third-party sites. We are not responsible for their content or privacy practices.

Legal disclosure. We may disclose personal data where required by law or legal process, to protect our legal rights, to comply with regulatory obligations, to respond to lawful requests by Swiss or EU authorities, or to prevent fraud.

Changes. We may update this policy to reflect changes in our practices or legal requirements. Updates are posted here with a new date. For material changes we notify active clients by email.

Contact. Next Position Advisory, a brand of Mayer Advisory GmbH.

Sign up for Notes on Corporate to Solo, weekly in your inbox every Wednesday.

Sign up today