Privacy Policy
Last updated: [1st of December 2025]
Insightter (“Insightter”, “we”, “us”, or “our”) is committed to protecting personal data and respecting privacy in accordance with applicable data protection laws. This Privacy Policy explains how Insightter collects, uses, stores, transfers, and protects personal data when you visit www.insightter.com, communicate with us, or otherwise interact with us in the course of our business activities.
This Privacy Policy is designed to comply with:
- the EU General Data Protection Regulation (GDPR),
- the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) and applicable free-zone regimes, and
- the Saudi Arabia Personal Data Protection Law (KSA PDPL), where applicable.
1. Scope of This Privacy Policy
This Privacy Policy applies where Insightter determines the purposes and means of processing personal data, including personal data relating to website visitors, business contacts, clients, partners, and suppliers.
Where Insightter processes personal data on behalf of its customers in the delivery of analytics, artificial intelligence, or technology services, Insightter acts as a data processor. In such cases, processing is governed by the relevant customer agreements, data processing addenda, and the customer’s own privacy notices.
2. Personal Data We Process
Insightter processes personal data that is provided directly to us in a professional or commercial context, including contact details, professional information, and communications exchanged with Insightter.
We also collect limited technical data automatically when you access our website, such as IP address, device and browser information, and website usage data, for security, operational, and analytical purposes.
Insightter does not intentionally collect sensitive or special categories of personal data unless required by law or contract and processed in accordance with applicable legal requirements.
3. Purpose and Legal Basis of Processing
Insightter processes personal data only where there is a lawful basis to do so. Depending on the context, processing may be based on legitimate interests, contractual necessity, legal obligations, or consent, as required under GDPR, UAE PDPL, or KSA PDPL.
Personal data is processed to manage business relationships, respond to enquiries, deliver and improve services, operate and secure our systems and website, and comply with legal and regulatory obligations.
4. Marketing and Business Communications
Insightter may communicate with you regarding its services where such communications are relevant to your professional interests and permitted by applicable law.
You may opt out of marketing communications at any time by using the unsubscribe mechanism provided or by contacting Insightter directly. Opting out will not affect essential communications related to an existing business relationship.
5. Cookies and Website Technologies
Insightter uses cookies and similar technologies to ensure website functionality, analyze performance, and improve user experience. You may manage or disable cookies through your browser settings. Additional information may be provided in a separate Cookie Policy.
6. Data Sharing and Disclosure
Insightter may share personal data with affiliated entities, trusted service providers, professional advisors, and public authorities where required by law. Such parties process personal data only in accordance with Insightter’s instructions and applicable data protection obligations.
Personal data may also be disclosed in connection with corporate transactions, including mergers, acquisitions, or asset transfers, subject to appropriate safeguards.
7. International Data Transfers and Data Localisation
Insightter operates primarily in the Gulf region but may transfer personal data across borders as part of its business operations.
Where personal data is transferred outside the country in which it was collected, Insightter ensures that appropriate safeguards are implemented in accordance with GDPR, UAE PDPL, and KSA PDPL, including contractual protections such as Standard Contractual Clauses or equivalent lawful mechanisms.
Where applicable laws impose data localisation or additional transfer requirements, Insightter addresses such requirements through contractual, technical, and organisational measures agreed with the relevant customer.
8. Data Retention
Insightter retains personal data only for as long as necessary to fulfil the purposes for which it was collected, taking into account business needs, legal and regulatory requirements, and risk considerations. Personal data is securely deleted or anonymised when no longer required.
9. Data Security
Insightter implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or misuse. Access to personal data is limited to authorised personnel and approved service providers subject to confidentiality obligations.
While Insightter takes reasonable steps to protect personal data, no system or method of transmission over the internet is entirely secure.
10. Individual Rights
Subject to applicable law, individuals have rights in relation to their personal data, including the right to access, correct, delete, or restrict processing of personal data, to object to certain processing activities, and to withdraw consent where processing is based on consent.
Requests to exercise these rights may be submitted to [email protected]. Insightter may require verification of identity before responding. Individuals also have the right to lodge a complaint with the relevant data protection authority.
11. Regulatory Framework
Insightter processes personal data in accordance with applicable data protection laws, including the GDPR, UAE PDPL, and KSA PDPL. Where local laws impose additional or stricter requirements, Insightter implements appropriate measures to ensure compliance.
12. Changes to This Privacy Policy
Insightter may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. Updates will be posted on this page with a revised effective date.
