Last updated: 31 August 2026
The data controller for vijaymistri.com is:
Vijay Mistri, trading as Rent a Director
East Hertfordshire, England, United Kingdom
Email: vijay@vijaymistri.com
We collect personal data when you interact with this website. We may also use limited professional information from public sources when researching a small number of relevant companies. Specifically:
When you use the Contact page, the Speaking enquiry form, or any general enquiry form, we collect the information you submit: typically your name, email address, and the content of your message.
When you complete the Hidden Profit Diagnostic questionnaire, we collect the business context, executive details, ratings and open ended responses that you submit. This information is used to prepare your personalised report and assess whether our services are a fit for your business. AI tools may assist with structured analysis against Vijay Mistri's diagnostic framework, but Vijay remains responsible for reviewing and interpreting the final report. The AI service used, its retention terms and the applicable data controls will be disclosed before your questionnaire is processed. Your questionnaire data is not sold for marketing purposes.
The CEO Leadership System Check is a free five question assessment. It does not require an email address and its result is calculated in your browser.
If you subscribe to receive leadership insights, we collect your name and email address. This information is stored in our email marketing platform, Acumbamail, and used to send you the content you signed up for.
If you register for a CEO Boardroom event, we collect your name, email, and company details in order to send you joining instructions.
We may research a small number of established UK companies that appear relevant to our leadership and business diagnostic services. The personal data used is limited to professional information such as a person's name, role, employer, publicly listed business contact details and relevant public professional activity. Company information may include filed accounts, company announcements, recruitment activity, website content and reputable press coverage.
Sources may include Companies House, company websites, public professional profiles, recruitment pages and reputable business publications. Information being publicly available does not remove your data protection rights. We do not intentionally collect information about your private life or special category data for this purpose.
Public information may be used to prepare a short company specific brief. Each brief must distinguish verified facts from Vijay's interpretation, questions and hypotheses. Vijay reviews every brief before it is shared. We do not use this information to make solely automated decisions that have legal or similarly significant effects on you.
This website uses only storage and technology required for core functionality such as form submission, spam prevention and security. We do not currently use Google Analytics, Meta Pixel or advertising cookies. If this changes, this policy will be updated and, where required, consent will be requested before optional cookies are set. See our separate Cookie Policy for details.
If you subscribe to our newsletter, your details may be added to our email marketing platform, Acumbamail. Every newsletter includes a clear unsubscribe link. We do not add general enquiries to a marketing list without a valid lawful basis.
We may send a limited, individually researched message to a named business contact at a UK company or limited liability partnership where the subject is relevant to that person's professional role. We rely on legitimate interests where electronic marketing rules permit this. Every message identifies Vijay, explains why the person was contacted, links to this policy and provides a simple way to object. We do not use this approach for sole traders or certain partnerships unless the required consent or another valid route is confirmed.
We process personal data under consent for newsletter subscriptions, contract for paid diagnostics and engagements, legal obligation for tax and accounting records, and legitimate interests for responding to enquiries, protecting this website, researching suitable corporate prospects and sending limited relevant business outreach.
For professional outreach, the legitimate interest is developing relevant business relationships by offering useful leadership and commercial insight. Before using this basis, we assess the purpose, whether the processing is necessary, and whether the person's rights and reasonable expectations outweigh our interest. We minimise the data used, avoid sensitive or private information, require human review and make objection simple.
Forms on this site are processed using Netlify Forms, a data processor operated by Netlify, Inc. Submitted data is stored within our Netlify account and is not made public. Questionnaire responses may also be processed through an AI service solely to assist with preparing the purchased report. Access is restricted to the services needed for delivery and to Vijay Mistri. Do not submit bank details, passwords, health information or other special category personal data through any form on this site.
Payment for the Hidden Profit Diagnostic is processed by Stripe, a PCI-DSS compliant third party payment processor. We do not receive or store your card details; these are handled entirely by Stripe in accordance with their own privacy policy.
A company brief may be provided through a private, unlisted link with a random address. It is not intended for search engine indexing, but anyone who receives or is forwarded the link may be able to open it. Recipients should therefore avoid forwarding it. The brief is normally removed after 14 days. Minimal technical access records may be kept for up to 30 days for security and to understand whether the link worked.
We retain personal data only for as long as necessary. A private company brief is normally removed after 14 days. Research notes and prospect records are normally deleted or anonymised within 90 days of the final contact unless a genuine business conversation continues. Relevant correspondence may be kept for up to 12 months for context, complaints or legal claims. Newsletter data is retained until you unsubscribe. Financial records are kept in line with UK tax and accounting requirements, normally six years.
If you object to marketing, we keep the minimum information needed on a suppression list so that we can respect your preference. Suppression records are not used for marketing.
Under UK GDPR, you have the right to:
You have an absolute right to object to the use of your personal data for direct marketing. If you object, we will stop marketing to you and retain only the minimum suppression record needed to honour your preference.
To exercise any of these rights, correct an error, ask where your information came from, or object to further contact, email vijay@vijaymistri.com. We will respond without undue delay and normally within one calendar month.
Some of our service providers, including Netlify and Acumbamail, may process data outside the UK. Where this occurs, we rely on providers who maintain appropriate safeguards, such as UK adequacy regulations or Standard Contractual Clauses, to ensure your data remains protected to UK GDPR standards.
We take reasonable technical and organisational measures to protect your personal data, including secure hosting, encrypted connections (HTTPS), and restricted access to stored data. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
This website and its services are intended for business professionals aged 18 and over. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
We may update this policy to reflect changes in our practices or legal requirements. The date at the top indicates when it was last revised.
Questions about this Privacy Policy or how your data is handled can be sent to vijay@vijaymistri.com.