Privacy Policy

1. Who We Are

Insight Innovation ("we", "us", "our") is an AI, automation, and custom software consultancy based on the Isle of Man. We are the data controller for the personal data we collect through our website and in the course of providing our services.

We are committed to protecting your privacy and handling your data in accordance with the Isle of Man Data Protection Act 2018 ("the Act") and, where applicable, the UK General Data Protection Regulation (GDPR).

2. What Data We Collect

We may collect and process the following categories of personal data:

• →Contact information: Name, email address, phone number, company name, and job title, provided when you contact us through our website, email, or other channels.
• →Enquiry details: Information you provide about your business, project requirements, or questions when you submit a contact form or book a discovery call.
• →Technical data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, and other diagnostic data collected automatically when you use our website.
• →Cookie data: Information collected through cookies and similar technologies as described in our Cookie section below.
• →Client data: Data provided to us in the course of a project engagement, which may include business data, operational data, and data relating to your employees, customers, or systems.

3. How We Use Your Data

We use your personal data for the following purposes:

• →To respond to enquiries: When you contact us via our website or email, we use your information to respond to your enquiry and assess whether we can help.
• →To deliver our services: We process data necessary to scope, deliver, and support the AI, automation, and software solutions we build for you.
• →To improve our website: We use technical and cookie data to understand how visitors use our site, diagnose issues, and improve user experience.
• →To comply with legal obligations: We may process data where required by law, regulation, or court order.
• →For legitimate business interests: Including administration, quality assurance, fraud prevention, and business development, where these interests are not overridden by your rights.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• →Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g. cookies, marketing communications).
• →Contractual necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• →Legitimate interests: Where processing is necessary for our legitimate interests and those interests are not overridden by your data protection rights.
• →Legal obligation: Where processing is necessary to comply with a legal obligation.

5. Cookies

Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help us provide and improve our services.

We use the following types of cookies:

• →Strictly necessary cookies: Required for the website to function correctly. These cannot be switched off.
• →Analytics cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve our site.
• →Functional cookies: Enable enhanced functionality and personalisation, such as remembering your preferences.

You can manage your cookie preferences at any time through the cookie banner on our website or through your browser settings. Disabling certain cookies may affect the functionality of the site.

6. Data Sharing

We do not sell your personal data. We may share your data with the following categories of recipients only where necessary:

• →Service providers: Third-party providers who help us operate our website and deliver our services (e.g. hosting providers, email services, analytics tools). These providers are contractually bound to protect your data.
• →Professional advisors: Lawyers, accountants, and insurers where necessary for the administration of our business.
• →Legal and regulatory authorities: Where required by law, regulation, or court order.

7. International Data Transfers

Some of our service providers may be located outside the Isle of Man or the European Economic Area. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the relevant authority, or transfers to countries deemed to provide an adequate level of data protection.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• →Enquiry data: Retained for up to 24 months after your last interaction with us, unless we enter into a business relationship.
• →Client data: Retained for the duration of our engagement and for up to 6 years afterwards to comply with legal and regulatory obligations.
• →Technical data: Retained for up to 12 months for analytics and diagnostic purposes.

9. Your Rights

Under the Isle of Man Data Protection Act 2018 and applicable data protection law, you have the following rights:

• →Right of access: To request a copy of the personal data we hold about you.
• →Right to rectification: To request correction of inaccurate or incomplete data.
• →Right to erasure: To request deletion of your personal data in certain circumstances.
• →Right to restriction: To request that we restrict the processing of your data in certain circumstances.
• →Right to data portability: To receive your data in a structured, commonly used, machine-readable format.
• →Right to object: To object to processing based on legitimate interests or for direct marketing purposes.
• →Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure hosting, and regular security assessments.

While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

12. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Isle of Man Information Commissioner:

Information Commissioner's Office
PO Box 69, Douglas, Isle of Man, IM99 1EQ
Tel: +44 (0)1624 693260

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at our contact page.

Insight Innovation
Isle of Man