Effective date: October 15, 2026
Scope
This notice applies to information submitted through the contact form and AI Readiness Assessment at https://lencioni.io. It also covers the limited technical information used to operate and protect those forms.
Information collected
Contact form
The contact form collects a name, email address, company name and message. These fields are used to review the inquiry and respond to the sender.
AI Readiness Assessment
The assessment collects a name, role, work email address, organization, user-count band, current AI tools, data location, identity provider, AI policy status, objectives, preferred timeline, and any optional budget band or notes. The server adds a submission identifier and received timestamp.
Technical information
The form endpoints read the source IP address supplied by the hosting proxy and retain request timestamps in application memory for a one-minute rate-limit window. Hosting infrastructure may also produce request and error logs needed to operate and secure the site.
Assessment draft storage
Assessment answers and the current step are copied to the browser's session storage under the key la:assessment:v1. This supports restoration after a refresh. The draft remains in that browser session, is not sent to the server until submission, and is removed after a successful submission or when “Start over” is selected. Browser controls can clear it sooner.
Processing and service providers
- Contact submissions are sent through Resend to the practice mailbox when the email service is configured. In an environment without that configuration, the application writes the contact submission to the server console instead.
- Assessment submissions are appended to a server-side JSON-lines file. If an assessment webhook is configured, the same submission record is also sent to that endpoint. No webhook transfer occurs when the setting is absent.
- Vercel hosts the website and executes its server-side routes. Resend processes contact submissions when email delivery is enabled. An assessment webhook operator, if configured, receives the submitted assessment record.
Information from these forms is used to evaluate and respond to inquiries, scope potential engagements, operate the submission workflow, and protect the endpoints from misuse.
Logs and retention
Application errors are written to server logs. A contact submission can also appear in server logs when email delivery is not configured. Assessment records are stored in the local submissions file and may also exist at a configured webhook destination. Contact records may remain in the receiving mailbox and Resend's delivery systems.
No fixed automated deletion period is currently implemented. Records may remain in email, server-side storage, webhook systems or operational logs until removed through normal business-record maintenance or after an applicable deletion request.
Cookies and analytics
The site does not currently include analytics, advertising pixels, or marketing cookies. The assessment draft mechanism uses session storage rather than a cookie. Links to external sites, including LinkedIn, are governed by those sites' own privacy practices.
Requests and contact
Questions about this notice, or requests to access, correct or delete submitted information, may be sent to mark@lencioni.io. A request should identify the form used and the email address included in the submission so the relevant record can be located. Requests are evaluated against operational, security and recordkeeping requirements.
Changes to this notice
Material changes will be reflected on this page with a revised effective date.