Privacy Policy

Controller and contact

Connor Duncan trading as MP Executive is the controller responsible for this website and the personal data described here. Address: 478 Sulivan Court, London, SW6 3BX, United Kingdom. Email privacy@mpexecutive.com for privacy requests, support or complaints.

What this notice covers

This notice covers visitors, requests for our briefing and marketing programme, earlier launch-only requests, membership waitlist requests and invitations, and correspondence during pre-launch. Public accounts, CV uploads, Morgan and paid checkout are closed. Visiting, joining an email list or asking to join the waitlist does not send a CV or career conversation to an AI provider. We will provide the relevant account/AI notice and choices before those features open.

Information we collect

When you request an email or ask to join the waitlist, we collect your email address, language, requested purpose, confirmation and withdrawal events, and evidence of the consent or notice wording/version. A waitlist request also includes your answer to why you want to join, and an offer of a place adds a record of the invitation. We also keep protected address/token identifiers and delivery status needed to operate the request and prevent misuse. We receive this information from you and from service events.

Website requests can produce technical/security information such as request time, network address, browser information and errors. If you contact us, we process the correspondence and the information needed to answer it. Do not include unnecessary sensitive documents in an initial support request.

Purposes and legal bases

We use your consent to confirm and fulfil the particular email request. Optional promotional communications require permission for that purpose. You can withdraw consent without affecting its lawfulness before withdrawal. A launch request is not a paid contract or consent to career profiling. We use a waitlist request and your answer to take the steps you ask for before any membership agreement: considering your request and contacting you about it. A waitlist request is not marketing permission.

We use necessary service/security and support information for our legitimate interests in responding to requests, protecting the service and preventing abuse, balanced against your rights. We also process limited records where a legal obligation requires it or where necessary to establish, exercise or defend a legal claim.

Your email choices

The homepage and signup page offer the job-listing briefing, launch news and follow-up marketing emails from MP Executive through an initially unticked consent checkbox. We record the wording version, language and confirmation events for that programme. We first ask you to confirm your address. Joining is optional and creates no account or subscription. A neutral acknowledgement does not disclose whether an address is already registered, suppressed or eligible for another message.

Existing requests keep the purpose and wording originally presented. Earlier launch-only subscribers are not automatically enrolled in the briefing or marketing programme. Briefing subscribers have permitted that briefing and follow-up marketing; delivery may remain held while we prepare the programme. Each programme message provides an unsubscribe route. You may also contact privacy@mpexecutive.com to withdraw. We do not require an account or treat a privacy request as marketing consent.

The membership waitlist

To ask for a place, you give your email address and answer one question: why you want to join MP Executive. Please leave out sensitive details such as health, nationality or immigration status. We email you to confirm your address and, once you confirm, send a short receipt. Your answer is not used for marketing, not sent to an AI provider and not repeated in any email. Apart from you, only the people who run MP Executive can view it, through an access-controlled admin page that logs each viewing. As with our email lists, the acknowledgement does not reveal whether an address is already waiting.

If we can offer you a place, we email you a personal invitation link. It works once and expires after 14 days, and a new offer replaces any earlier link. An invitation creates no account and authorises no payment; you will see the applicable account terms and privacy information before you create an account. The receipt includes a link to leave the waitlist, and you can also contact privacy@mpexecutive.com. Leaving deletes your email address, your answer and any invitation offered from your request.

Optional voice calls with Morgan

When account features open, an optional Call Morgan step will let you discuss career details beyond your CV. Your audio streams directly to OpenAI; MP Executive does not record raw audio. Before each call, we ask separately for audio-processing and automatic-save permission. Supported verbatim statements about you may then be saved automatically to Morgan’s encrypted memory with their speech and permission origin; model paraphrases, unfinished speech and captions cannot confirm facts. Temporary call material is deleted after saving, discard or bounded expiry. You can correct or delete saved details through Morgan’s controls.

Providers and international processing

We use Amazon Web Services for website hosting, storage and outgoing service email. Our domain's incoming email is handled through Google. These providers receive the information needed for their functions. We may disclose necessary information to professional advisers or competent authorities where required by law or justified for a specific legal claim. We do not sell your personal data or provide it to advertisers for their own marketing.

Providers and their subprocessors may process information outside the UK, including in Europe and the United States. Applicable data-protection agreements and transfer safeguards govern that processing; AWS's UK data-processing terms include contractual transfer safeguards where required. Contact us for the relevant provider and safeguard information. Your consent to receive an email does not waive international-transfer protections.

Cookies and browser storage

The public site stores your chosen interface language in your browser so it can remember that preference. It remains until replaced or cleared. If you open an invitation link, the signup page keeps it in session storage for that browser tab; it is cleared when you sign in or out and is not used after 30 minutes. Fonts are served from our own website. The pre-launch pages do not include advertising pixels or behavioural-advertising tracking. We do not use a browser Do Not Track signal to change that practice. Independent sites you follow may have different practices. Clearing local storage removes that local preference, not a request already held by us.

Retention and deletion

Unconfirmed email links expire after 24 hours and stale requests, including unconfirmed waitlist requests, are removed during scheduled maintenance. Confirmed launch records and confirmed waitlist requests are eligible for removal after 366 days, or earlier if you unsubscribe, leave the waitlist or make an applicable deletion request. Expired or withdrawn invitations are removed during scheduled maintenance, and a used invitation is removed with the waitlist request it came from. Expiry is not a promise of deletion at the exact second.

Unsubscribing or leaving the waitlist ends the relevant permission or request and removes usable address information, and any waitlist answer, from the record. A limited protected identifier may remain to honour your choice and prevent accidental re-enrolment; it is still personal data if linkable. A specific privacy-deletion request is handled separately. Existing briefing records are kept for their requested purpose while it remains valid; withdrawal or deletion is available through the same contact route.

Correspondence, security and limited legal records are kept according to the purpose, resolution of the request, applicable obligations and any specific claim, then deleted when no longer needed. Deletion from active systems does not instantly remove every provider or backup copy. Such copies must be protected, used only for their limited purpose and expire under their retention arrangements; we can explain the position relevant to your request.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, a portable copy or objection to certain uses. You can withdraw email consent at any time. Contact privacy@mpexecutive.com; we verify identity proportionately and do not routinely require an identity document. You can also use the privacy/unsubscribe links supplied with relevant emails.

For UK rights requests we normally respond within one month and explain any lawful extension or refusal. Where US state law provides additional rights or an appeal, we will explain and honour the applicable process and deadlines. We do not penalise you for exercising privacy rights. A refusal will explain the reason and how to challenge it.

Privacy complaints

Send complaints to privacy@mpexecutive.com. We will acknowledge within 30 days, investigate without undue delay and explain the outcome. This does not replace the separate deadlines for rights requests. You can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint or an applicable authority, including your US state Attorney General where appropriate.

Location and children

The operator is based in England and Wales. Our planned accounts are for UK and US adults aged 18 or over; this website is not directed at children. If you believe a child has supplied information, contact us so we can investigate and take appropriate action. Your applicable privacy rights are not restricted to one court or regulator.

Changes and a future company

We show the version date above. We will give appropriate notice of material changes, including a change of controller when a company takes over the service, and obtain fresh consent where required before new processing. The company is not yet the operator. A new notice does not retrospectively broaden existing email permission.