The Insight Factory Privacy Policy

This Privacy Policy applies to our websites, software and services, including:

Insight Factory – TheInsightFactory.com
Insight Rover – InsightRover.com (and sub-domains)

(together, the “Services” and the “websites”, respectively).

The websites and the Services are owned and operated by The Insight Factory Pty Ltd (collectively, “We”, “Us”, or “Our”). This Privacy Policy describes how we collect, use, share and secure the personal information you provide via the websites or the Services. It also describes your choices regarding use, access and correction of your personal information. Personal information is information, or a combination of different types of information, that could reasonably allow you to be identified. For the avoidance of doubt, this Privacy Policy does not supersede or replace any additional or supplementary requirements that may be present in our customer contracts.

1. Personal information we use

You can generally visit our websites without actively entering any personal information about yourself. However, in certain areas of this site, we may ask you to contact us with questions or comments or request more information about our services. In these cases, we will collect personal information from you directly as described below.

We may be required to collect certain personal information about you either by law or as a consequence of any contractual relationship we have with you. Failure to provide this information may prevent or delay the fulfillment of these obligations. We will inform you at the time your information is collected whether certain data is compulsory and the consequences of the failure to provide such data.

1.1 Information we collect directly from you

The categories of information that we collect directly from you are:

Personal details (e.g. name, title, employer or organization)
Contact details (e.g. phone number, email address, postal address or phone number)
Additional information about your role or organization (e.g. position, organisation structure)
Information we collect automatically from you, including data collected using cookies and other device identifying technologies (‘Cookies and Tracking Technologies’).
Other information provided in use of the Services.

1.2 Information we collect from other sources:

We collect information about you from your employer or organization or our business partners.

The categories of information we collect from other sources include:

Personal details (e.g. name, title, employer or organization)
Contact details (e.g. phone number, email address, postal address or phone number)
Additional information about your role or organisation (e.g. position organisation structure)

1.3 Other information we use about you

We may also collect information in the course of your on-going relationship with our Services and this website. The categories of information we collect in this context include:

Account information (such as user ID, contact details or answers to security questions); and
Information about your usage of our Services or the websites (such as metadata, support requests or information provided to us to resolve such support requests).

1.4 Special categories of personal data

Some of the categories of information that we process solely as a processor in connection with provision of our Services may constitute special categories of personal data (also known as sensitive personal information). In particular, we may process personal data revealing racial or ethnic origin, religious or philosophical beliefs, or trade union membership, or data concerning health if such information is uploaded to our Services. We will not process such information for any other purpose other than as a provider of the Services in accordance with the terms of use for the Service.

2. How we use your personal information and the basis on which we use it

We use your personal information to:

Identify and authenticate you: We use your identification information to verify your identity when you access and use our services and to ensure the security of your personal information. We do this to comply with our contractual obligations to you or your organization.
Provide you with services: We process your personal information to provide the services you or your organization have requested. We do this to comply with our contractual obligations to you or your organization.
Improve our services: We analyse information about how you use our services to provide an improved experience for our customers of all our services, including product testing and site analytics. It is in our legitimate interest to use the information provided to us for this purpose, so we can understand any issues with our services and improve them.
Communicate with you: We may use your personal information when we communicate with you, for example if we are providing information about changes to the terms and conditions or if you contact us with questions. It is in our legitimate interest to provide you with appropriate responses and provide you with notices about our services.
Market our services: We may use your personal information to build a profile about you and place you into particular marketing segments in order to understand your preferences better and to appropriately personalize the marketing messages we send to you. It is in our legitimate interest to provide more relevant and interesting advertising messages. Where necessary, we will obtain your consent before sending such marketing messages.
Exercise our rights: We may use your personal information to exercise our legal rights where it is necessary to do so, for example to detect, prevent and respond to fraud claims, intellectual property infringement claims or violations of law or our applicable contract terms and conditions.
Comply with our obligations: We may process your personal information to, for example, carry out fraud prevention checks or comply with other legal or regulatory requirements, where this is explicitly required by law.
Customize your experience: When you use the services, we may use your personal information to improve your experience of the services, such as by providing interactive or personalized elements on the services and providing you with content based on your interests.

We may obtain your consent to collect and use certain types of personal information when we are required to do so by law (for example, in relation to our direct marketing activities, Cookies and Tracking Technologies or when we process sensitive personal information). If we ask for your consent to process your personal information, you may withdraw your consent at any time by contacting us using the details at the end of this Privacy Policy.

Customer Testimonials

We may post customer testimonials on our websites which might contain personal information. We obtain the customer’s consent via email prior to posting the testimonial to post their name, title, and organization name along with their testimonial. If you wish to update or delete your testimonial, you can contact us at ContactUs@TheInsightFactory.com.

3. The information we collect on behalf of the Clients

Where a customer of ours has retained us to provide Services and either provides us with personal information or requires us to collect personal information on their behalf in connection with such Services, then our use of such personal information shall be limited to the purpose of providing these Services.

In the circumstances described under this Section, we have no direct relationship with the individuals whose personal information we process. If your data is processed on behalf of one of our customers, please contact the customer interact with directly. We may transfer personal information to companies that help us provide our service. Transfers to subsequent third parties are covered by the service agreements with our Clients.

An individual whose data is being processed in the circumstances described in this section should direct any queries with respect to access, correction, amendment, or deletion of inaccurate data to our customer (the data controller). If requested to remove data, we will respond within a reasonable timeframe.

Personal information processed under this section will be retained as long as needed to provide services to our customer. We will retain this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

4. Your rights over your personal information

You have certain rights regarding your personal information, subject to local law. These include the following rights to:

access your personal information
rectify the information we hold about you
erase your personal information
restrict our use of your personal information
object to our use of your personal information
receive your personal information in a usable electronic format and transmit it to a third party (right to data portability)
lodge a complaint with your local data protection authority.

If you would like to discuss or exercise these rights, please contact us at the details below.

We encourage you to contact us to update or correct your information if it changes or if the personal information we hold about you is inaccurate.

We will contact you if we need additional information from you in order to honour your requests.

5. Information Sharing

We may share your personal information with third parties under the following circumstances:

Service providers and business partners. We may share your personal information with our service providers and business partners that perform marketing services and other business operations for us. For example, we may partner with other companies to ship your order or offer customer support. These companies are authorized to use your personal information only as necessary to provide these services to us.
Law enforcement agency, court, regulator, government authority or other third party. We may share your personal information with these parties where we believe this is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party. Where permitted by law or regulation and reasonably practicable, we will attempt to notify you of such requirements.
The company or organization that has made you an authorized user of the services.
Asset purchasers. We may share your personal information with any third party that purchases, or to which we transfer, all or substantially all of our assets and business. Should such a sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this Privacy Policy. You will be notified via email and/or a prominent notice on our websites of any change in ownership or uses of your personal information.

Because we operate as part of a global business, the recipients referred to above may be located outside the jurisdiction in which you are located (or in which we provide the services). See the section on “International Data Transfer” below for more information.

6. Information Security and Storage

We implement technical and organizational measures to ensure a level of security appropriate to the risk to the personal information we process. These measures are aimed at ensuring the ongoing integrity and confidentiality of personal information. We evaluate these measures on a regular basis to ensure the security of the processing.

We will keep your personal information for as long as we have a relationship with you. Once our relationship with you has come to an end, we will retain your personal information for a period of time that enables us to:

Maintain business records for analysis and/or audit purposes
Comply with record retention requirements under the law
Defend or bring any existing or potential legal claims
Deal with any complaints regarding the services
Enforce our commercial agreements.

We will delete your personal information when it is no longer required for these purposes. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data.

7. International Data Transfer

The personal information that you provide, and that of your users, will not be stored or processed outside of Australia unless we specifically notify you or unless you request that of us.

8. Links to Other Sites

Our site includes links to other websites whose privacy practices may differ from our practices. If you submit personally identifiable information to any of those sites, your information is governed by their privacy policies. We are not responsible for the privacy practices or the content of any sites to which our sites provide links. We encourage you to carefully read the privacy statement of any website you visit.

Social Media Widgets

Our websites may include Social Media Features, such as the Facebook Like button, and Widgets, such as the Share this button or interactive mini-programs that run on our websites (the “Features”). These Features may collect your Internet protocol address, which page you are visiting on our website, and may set a cookie to enable the Feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on our website. Your interactions with these Features are governed by the privacy statement of the company providing it.

9. Contact Us

The Insight Factory are the controllers responsible for the personal information we collect and process.

Our Data Protection Officer can be contacted at: ContactUs@TheInsightFactory.com.

If you have questions or concerns regarding the way in which your personal information has been used, please contact ContactUs@TheInsightFactory.com. If you have inquiries related a data subject access requests, please contact ContactUs@TheInsightFactory.com.

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority.

10. Changes to the Policy

You may request a copy of this Privacy Policy from us using the contact details set out above. We may modify or update this Privacy Policy from time to time.

If we change this Privacy Policy, we will notify you of the changes. Where changes to this Privacy Policy will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise your rights (e.g. to object to the processing).

Last Updated: 4^th November, 2020