Where on earth to start, and how AI can help. Masterclass, 3 November. Register

Next Position Advisory

Privacy Policy

Last updated: 22 October 2026

This website is operated by Mayer Advisory GmbH, Switzerland. Next Position Advisory is a brand of Mayer Advisory GmbH.

Mayer Advisory GmbH (“we”, “us”, “our”) is the data controller responsible for the processing of your personal data under the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

We take your privacy seriously and are committed to handling personal data lawfully, transparently, and securely.

1. Personal data we collect

a) Information you provide to us

When you:

  • Complete a free diagnostic, assessment or questionnaire
  • Register for a masterclass or workshop
  • Purchase or enrol in a course or programme, including What should I sell? and The 12-Week Studio
  • Use the client portal at studio.nextpositionadvisory.com
  • Book a call or engage advisory services
  • Subscribe to the newsletter
  • Contact us by email, WhatsApp or LinkedIn message

This may include:

  • Name and email address
  • Billing address, and payment and transaction details, processed by Stripe
  • Professional background, career situation and business plans you share during intake, in a diagnostic, in a session or in the portal
  • Work you submit in the portal: written answers, uploaded files such as a CV, and links
  • Posts and replies you write in a community room
  • Messages you send us by email, WhatsApp or LinkedIn

We only collect data that is necessary for the specific purpose.

b) Recordings and transcripts of sessions

One-to-one calls may be recorded and transcribed so that a written summary can be produced and your file stays accurate between sessions. You will be told before a call is recorded, and you can decline. Declining does not affect the service you receive; notes are taken by hand instead. These recordings are processed using Granola.

Group sessions (masterclasses on Meetn; What should I sell? and The 12-Week Studio on Zoom) may be recorded so that participants who miss a session can watch it. A recording shows the participants who took part with their camera or microphone on. Participants are told before recording starts. Recordings are shared with participants of that programme.

We may keep edited sections of group session recordings, mainly the teaching, and use them as course material inside our paid programmes for later participants. They are never published publicly or used in marketing. If you would rather not appear in anything we keep, keep your camera off or tell us, and we will edit you out, including your name and anything you said about your own situation.

Recordings and transcripts of one-to-one calls are treated as confidential client material and are never used in marketing, teaching material or published content in any form, identifiable or otherwise. You may request their deletion at any time.

c) The client portal and community rooms

Programme participants sign in to our client portal with their email address. What you submit there (answers, files, links and your progress) is visible only to you and to Lisa Mayer.

Some programmes include a private community room inside the portal. Each programme has its own room, and only participants of that programme and Lisa Mayer can see it. Your name and anything you post there is visible to everyone in that room. There are no private messages in a room. You can edit or delete your own posts at any time. Do not post anything you would not want other participants to read.

d) The Optionality Vault

If you join the Optionality Vault, you sign in with your email address. What you write there (monthly entries, goals and notes) and any files you upload, such as your CV, are stored in Zurich, Switzerland and visible only to you. Lisa Mayer cannot see your vault unless you choose to share it. You pick what to share and for how long (up to 31 days), and you can stop sharing at any time.

To produce your summaries and reports, the text the vault works on is sent to Anthropic (Claude) in the United States for processing. Your reminder emails and quarterly report are sent through Resend.

You can download everything in your vault, or delete it, at any time from Settings.

e) Information collected automatically

When you visit the website or portal we may automatically collect limited technical information, including IP address, browser type and version, device information, time zone and access times, pages visited and referral source.

This is used for security, website performance and basic analytics. It is not used to identify you personally unless required for security or legal reasons.

2. Why we process your data

To deliver services. To process payments; to give you access to purchased courses and programmes and to the portal; to run intake and diagnostic questionnaires; to give feedback on your submitted work; to deliver written observations, session summaries and reviews; to run the community rooms; and to answer your questions between sessions.

To communicate with you. To respond to enquiries; to send service communications such as sign-in links, booking confirmations, programme reminders, renewal reminders and payment requests; and to send the newsletter, only with your consent.

To operate and improve the service. To manage payments and instalment plans; to store client records and session summaries securely; to operate automated internal workflows that file and route your information; to operate and secure the website and portal; and to improve service quality using anonymised usage patterns.

To meet legal obligations. To comply with legal, tax and accounting requirements, and to respond to lawful requests by authorities.

We do not sell personal data to third parties. We do not use your data for profiling or automated decision-making that produces legal or similarly significant effects.

3. Legal basis for processing

Performance of a contract. When you purchase a product or service, we process your data to deliver what you have paid for, including the portal and community room.

Your consent. For newsletter subscriptions, for information you provide voluntarily, and for the recording of one-to-one calls.

Compliance with legal obligations. To meet tax, accounting and regulatory requirements.

Legitimate business interests. To operate and secure the website and portal, to record group sessions for participants who miss them, to keep edited sections as material for later participants, to prevent fraud, and to improve services.

You may withdraw consent at any time where processing is based on consent. This does not affect the lawfulness of processing carried out before withdrawal.

4. Who processes your data, and where it is held

We share personal data only with service providers where necessary to deliver our services. Each is bound by its own data protection terms.

  • Client portal, programme work, community rooms and the Optionality Vault: Supabase. Held in Zurich, Switzerland.
  • Website and portal hosting: Hostinger (EU).
  • Payments: Stripe. stripe.com/privacy
  • Client records and session summaries: Notion (United States).
  • Email: Microsoft 365 for our own mailbox; Google (Gmail, Drive and calendar) for some documents and calendars.
  • Newsletter, mailing lists and automated emails: Brevo (EU).
  • Sign-in links and automated messages from our tools: Resend (United States).
  • Booking: Calendly (United States).
  • Video sessions and group recordings: Meetn and Zoom (both United States).
  • One-to-one call recording and transcription: Granola (United States).
  • AI processing: Anthropic (Claude), United States. anthropic.com/privacy
  • Free online tools and forms: Cloudflare runs our diagnostic tools; Fillout processes some forms.
  • Internal automation: n8n moves data between the services listed here and files it into our records.
  • LinkedIn messages: Kondo, which keeps a copy of our LinkedIn conversations in our records.
  • WhatsApp: where you choose to message us there, WhatsApp (Meta) processes those messages.
  • Older courses and some registration pages: systeme.io (Ireland, EU).

5. International data transfers

The client portal, your programme work and the community rooms are held in Switzerland. Some of the providers above process data outside Switzerland, in the European Union or the United States. Where data leaves Switzerland, we rely on safeguards recognised under Swiss and EU data protection law, including adequacy decisions, the Swiss-US Data Privacy Framework where the provider is certified, and Standard Contractual Clauses.

6. How long we keep your data

  • Payment and accounting records: 10 years, under Swiss tax and accounting obligations.
  • Client records and session summaries: the duration of the service plus 2 years, so that continuity is preserved if you return.
  • Work you submit in the portal (answers, uploaded files, links and progress): the end of your programme plus 2 years.
  • Your portal account: while you have access to anything in it. Course and programme materials remain available as described in our Terms and Conditions.
  • Community room posts: for as long as the room exists, unless you or we delete them. You can delete your own posts at any time.
  • Recordings of one-to-one calls and their transcripts: the duration of the service plus 2 years, and deleted on request at any time.
  • Recordings of group sessions: available to participants for the length of the programme and its included support period, then deleted, except edited sections kept as programme material, which are kept for as long as that material is in use. You can ask to be edited out of them at any time.
  • Your Optionality Vault: while your account exists. It is deleted two years after your membership ends and you have stopped signing in, or at any time by you.
  • Enquiries and messages that do not lead to working together (email, WhatsApp, LinkedIn): 2 years from the last contact.
  • Newsletter: until you unsubscribe.

When data is no longer required it is securely deleted or anonymised. You can ask us to delete your data at any time, subject to legal retention requirements for payment records.

7. Your rights

Under the nFADP and, where applicable, the GDPR, you have the right to be informed, to access your data, to have inaccurate data corrected, to have data erased subject to legal retention requirements, to restrict processing in certain circumstances, to object to processing based on legitimate interests, to data portability, and to withdraw consent where processing is based on consent.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.

To exercise your rights, contact us using the details in section 11.

8. Cookies, local storage and tracking

This website uses cookies and similar technologies to ensure proper functionality, remember your preferences, and provide basic analytics on website usage.

The client portal stores your sign-in session and small conveniences (such as which posts you have already seen) in your browser's local storage. These are needed for the portal to work and are not used for tracking.

You can control or disable cookies through your browser settings. Disabling them may affect some features. We do not use cookies for third-party advertising.

9. How AI is used

Where it is used. Our free diagnostic tools use AI to produce the written read you receive. Where you have agreed to recording, one-to-one call transcripts are summarised into written notes. AI also helps us organise intake information and draft follow-up, which Lisa reviews before anything is sent.

What it does not do. AI does not make decisions about you, does not determine what you are offered or charged, and does not replace human judgment. All strategic judgment and all written advisory output is Lisa Mayer's.

How your data is handled. Processing is carried out through provider APIs. Under the API terms of the providers we use, your data is not used to train their models. AI outputs may be wrong, incomplete, or overconfident. Use them to organise your thinking and prepare questions, not as a substitute for professional advice.

Your rights. You can request a copy of your intake data, correct inaccuracies in it, and request its deletion at any time.

10. Professional advice boundary

Our services reflect Lisa Mayer's professional experience and general observations about how large institutions and senior-level markets operate. They are not legal, tax, accounting, immigration, investment, or regulated financial advice, and they do not create a lawyer-client, adviser-client, or other professional relationship. Rights, entitlements, tax treatment, notice, garden leave, benefits, permits and plan rules vary by jurisdiction, employer and contract. Obtain independent advice before signing, resigning, accepting an offer, or acting where the consequences are material.

11. Data security, links, legal disclosure, changes, and contact

Security. We use appropriate technical and organisational measures, including encrypted transmission, secure cloud storage, access controls and authentication, and regular security updates. Access to personal data is limited to Lisa Mayer and to service providers under contractual confidentiality obligations. No online system can be guaranteed completely secure, but we take all reasonable precautions.

External links. The website contains links to third-party sites. We are not responsible for their content or privacy practices.

Legal disclosure. We may disclose personal data where required by law or legal process, to protect our legal rights, to comply with regulatory obligations, to respond to lawful requests by Swiss or EU authorities, or to prevent fraud.

Changes. We may update this policy to reflect changes in our practices or legal requirements. Updates are posted here with a new date. For material changes we notify active clients by email.

Contact. Next Position Advisory, a brand of Mayer Advisory GmbH.

Sign up for Notes on Corporate to Solo, weekly in your inbox every Wednesday.

Sign up today