Privacy Policy
Last updated: 12 May 2026
Insight Division Labs ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and share your information when you visit our website or interact with our courses and emails.
We comply with:
- UK GDPR (UK General Data Protection Regulation) and the Data Protection Act 2018
- EU GDPR (Regulation (EU) 2016/679)
- California Consumer Privacy Act (CCPA) as amended by the CPRA
- CalOPPA (California Online Privacy Protection Act)
1. Who we are
Insight Division Labs
Registered in England & Wales
Website: insightdivisionlabs.com
For all enquiries, including privacy and data-rights requests, please use our contact form.
We are the data controller for the personal data collected through this website and our services.
2. What data we collect
We collect only the minimum data necessary to provide our courses and email communications.
On this website (our pages): we do not use first-party cookies for analytics. We use Matomo (self-hosted) with cookies disabled, and we do not add tracking pixels or behavioural advertising scripts to our pages.
When you use embedded or linked third-party tools (for example the contact form, course platform, or email signup), your browser may communicate with those providers on their domains. They may use cookies, similar technologies, or fraud-prevention tools (such as Google reCAPTCHA) according to their own policies. That activity is outside our direct control and is not the same as us storing cookies on your device for our own analytics.
Information you give us directly
- Email address — when you sign up for the free course or subscribe to our email updates via the MailerLite signup form.
- Name and email address — when you purchase a course through Teachable. Payment card details are processed entirely by Teachable's payment processor; we never see or store your payment card information.
- Messages and enquiries — any information you provide when you contact us through the website contact form.
Information collected automatically (anonymised)
We use Matomo, a self-hosted privacy-respecting analytics tool. Matomo is configured with cookies disabled and does not track you across sites. It collects:
- Anonymised IP address (last octet removed)
- Browser type and operating system (device fingerprinting is disabled)
- Pages visited and time spent on the site
- Referring website (if you arrived via a link)
This data is aggregated and used only to understand general usage patterns. It cannot identify you personally.
3. How we use your data
| Purpose | Data used | Legal basis (GDPR/UK GDPR) |
|---|---|---|
| Send you the free course and related email content | Email address | Consent — you opt in via the signup form |
| Process course purchases and provide access | Name, email, account details | Performance of a contract with you |
| Send transactional emails (receipts, course access, updates) | Email address, name | Legitimate interest — necessary to deliver the service you requested |
| Reply to your enquiries or support requests | As provided by you | Legitimate interest — to respond to your communication |
| Analyse site usage to improve our content | Anonymised analytics data | Legitimate interest — to understand how visitors use our site |
| Comply with legal obligations (e.g. tax records) | Transaction records | Legal obligation |
4. Third-party services (data processors)
| Service | Purpose | Data shared | Location |
|---|---|---|---|
| Teachable | Course hosting, payment processing, student accounts | Name, email, purchase history | USA (Privacy Shield certified) |
| MailerLite | Email marketing and course delivery | Email address, name, engagement data | EU (Lithuania) — GDPR compliant |
| Matomo (self-hosted) | Anonymised analytics | Anonymised IP, browser info, page views | UK |
| FormSubmit | Receives and forwards contact form submissions by email | Name, email, subject, and message as you enter them in the form | International (see FormSubmit's privacy policy) |
When you purchase a course, Teachable processes your payment through a third-party gateway (Stripe or PayPal). Your payment details are handled entirely by those processors and never stored by us.
5. Cookies
Our site (insightdivisionlabs.com): we do not set first-party cookies for analytics. Matomo is configured with cookies disabled for analytics on our domain, so it does not set or read analytics cookies here.
Contact form (FormSubmit): when you submit the form, your browser sends data to FormSubmit. FormSubmit may use cookies or similar technologies on their systems (their privacy policy describes this in general terms), and they may show Google reCAPTCHA, which can involve Google cookies or storage on Google's domains. We do not control those technologies.
Teachable and MailerLite: when you interact with their services (for example logging into your course account or their embedded forms), they may set their own cookies. Those are covered by their respective privacy policies.
6. Data retention
- Email subscribers: kept while subscribed. Unsubscribe anytime via link in every email. Removed from active lists within 30 days.
- Course students (Teachable): account data retained while account is active. Transaction records kept for 7 years for tax/accounting.
- Analytics data: aggregated, anonymised data retained indefinitely but cannot be linked to any identifiable person.
7. Your rights
Under UK and EU data protection law:
- Right of access — request a copy of the data we hold
- Right to rectification — correct inaccurate data
- Right to erasure ("right to be forgotten") — delete your data, subject to legal requirements
- Right to restrict processing — limit how we use your data
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests or direct marketing
- Automated decision-making — we do not use it
California privacy rights (CCPA)
- Right to know — request details about personal data collected
- Right to delete — request deletion of personal data
- Right to opt out of sale — we do not sell your personal data
- Right to non-discrimination
To exercise any right, contact us through our contact form. We respond within 30 days (UK/EU) or 45 days (California).
8. International data transfers
Your data may be transferred outside the UK/EEA, including to the US (Teachable). Safeguards in place:
- Teachable uses Standard Contractual Clauses (SCCs) approved by the European Commission and UK ICO
- MailerLite is based in Lithuania (EU) — no international transfer needed
- Matomo is hosted in the UK
9. Data security
HTTPS encryption, access controls, reliance on third-party providers with industry-standard security.
10. Children's privacy
Services are for adults 18+. We do not knowingly collect data from children under 13 (US) or under 16 (UK/EU).
11. Changes to this policy
We'll update the "Last updated" date. Material changes notified by email or website notice.
12. Contact us
For any privacy question or to exercise your data rights, use our contact form (insightdivisionlabs.com/contact).