Effective Date: December 16, 2024
Last Updated: June 3, 2025
Who We Are
Insights in Action is a business process consulting company based in the United States. We help businesses optimize their operations and processes. This privacy policy explains how we collect, use, protect, and share information when you visit our website or use our services.
Contact Information:
Email: connect@insightsinaction.com
Website: www.insightsinaction.com
Information We Collect
Information You Provide to Us
We only collect personal information that you voluntarily provide, including:
- Contact Information: Name, email address, phone number, mailing address
- Business Information: Company name, job title, industry, business needs
- Project Information: Details about your business processes and consulting requirements
- Communications: Messages, emails, and other communications you send to us
- Account Information: Username, password, and preferences for registered users
Information We Collect Automatically
When you visit our website, we automatically collect:
- Analytics Data: Through Plausible.io (privacy-focused analytics that doesn't use cookies or track personal data)
- Technical Information: IP address, browser type, device information, pages visited
- Usage Data: How you interact with our website and services
We do not use tracking cookies, social media pixels, or invasive analytics tools.
How We Use Your Information
We use your information for legitimate business purposes:
- Service Delivery: Providing consulting services and managing client relationships
- Communication: Responding to inquiries, project updates, and service-related communications
- Business Operations: Managing accounts, scheduling, invoicing, and administrative tasks
- Marketing: Sending relevant business updates, newsletters, and service information (with your consent)
- Improvement: Analyzing website usage to improve our services and user experience
- Legal Compliance: Meeting legal obligations and protecting our rights
Legal Basis for Processing
We process your information based on:
- Contract Performance: When necessary to provide our services
- Legitimate Interest: For business operations, marketing, and service improvement
- Consent: When you opt-in to communications or specific uses
- Legal Obligation: When required by law
Information Sharing and Disclosure
We never sell, rent, or trade your personal information.
We may share your information only in these limited circumstances:
- Service Providers: With a limited set of trusted third-party platforms we use (detailed below)
- Legal Requirements: When required by law, court order, or government request
- Business Protection: To protect our rights, property, or safety, or that of others
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
Third-Party Services We Use
- Plausible.io: Privacy-focused website analytics (no personal data tracking)
- Odoo: Business management and CRM platform
- GoHighLevel: Customer relationship management
These services have their own privacy policies and may process your data according to their terms. We choose partners who maintain strong privacy and security standards.
Data Security
We implement appropriate security measures to protect your information:
- Access Controls: Multi-factor authentication (MFA) and principles of least privilege
- Technical Safeguards: Encryption, secure servers, and regular security updates
- Administrative Safeguards: Employee training and access restrictions
- Physical Safeguards: Secure facilities and equipment
While we use industry-standard security measures, no system is 100% secure. We cannot guarantee absolute security of your information.
Data Retention
We retain your information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
Specific Retention Periods:
- Active Client Data: Duration of business relationship plus 7 years
- Marketing Data: Until you unsubscribe or request deletion
- Website Analytics: 24 months maximum
- Communications: 3 years for business records
Your Privacy Rights
General Rights
You have the right to:
- Access: Request information about what personal data we have about you
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a portable format
- Opt-Out: Unsubscribe from marketing communications at any time
- Restriction: Request limitation on how we process your data
California Privacy Rights (CCPA)
If you're a California resident, you have additional rights:
- Right to Know: Request detailed information about our data practices
- Right to Delete: Request deletion of personal information (with some exceptions)
- Right to Opt-Out: Opt-out of sale of personal information (we don't sell data, so you're already safe here)
- Right to Non-Discrimination: We won't discriminate against you for exercising your rights
To exercise your rights: Email us at connect@insightsinaction.com with your request. We'll respond within 30 days.
Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
International Data Transfers
Your information may be stored and processed in the United States. If you're accessing our services from outside the US, you consent to the transfer of your information to the US, which may have different privacy laws than your jurisdiction.
Data Breach Notification
In the unlikely event of a data breach that affects your personal information, we will:
- Assess the breach and take immediate steps to secure our systems
- Notify affected individuals within 72 hours when feasible
- Provide information about what happened and steps we're taking
- Comply with applicable breach notification laws
Cookies and Tracking
We use minimal tracking technology:
- Essential Cookies: Only for website functionality (session management, security)
- Analytics: Plausible.io for privacy-focused analytics (no personal data tracking)
- No Third-Party Tracking: We don't use advertising cookies, social media pixels, or cross-site tracking
You can control cookies through your browser settings.
Business Transfers
If we're involved in a merger, acquisition, or sale of assets, your information may be transferred. We'll provide notice before your information becomes subject to a different privacy policy.
Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. We'll notify you of material changes by:
- Posting the updated policy on our website
- Sending email notification to registered users
- Updating the "Last Updated" date at the top of this policy
Continued use of our services after changes indicates acceptance of the updated policy.
Contact Us
For questions, concerns, or requests regarding this privacy policy or your personal information:
Email: connect@insightsinaction.com
Subject Line: Privacy Policy Inquiry
We'll respond to privacy-related inquiries within 30 days.