This Privacy Policy explains how Insight Meridian Group ("we", "us", "our"), together with our brands InsightLead Partners and Prime Meridian, collects, uses, shares and protects personal information when you visit insightmeridiangroup.com (the "Site"), contact us, or use our services. We serve clients in the United States and worldwide, and we handle personal information in line with applicable privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), other U.S. state privacy laws, the EU General Data Protection Regulation (GDPR) and the UK GDPR.
1. Information we collect
Information you give us
- Contact and enquiry details — name, email address, company, phone number, country, the service you are interested in, and the content of your message.
- Client account and project information — business contact details, billing information and materials you share with us to deliver services.
- Communications — emails, call notes and other correspondence with us.
Template preview tool
On our templates pages you can type your business name, tagline, phone number and city, choose a colour and add a logo to see how a website could look. These details stay in your browser. They are not sent to or stored on our servers. They are only sent to us if you choose to submit the contact form. If you copy a share link, your typed details are held in the link itself, so anyone you give the link to can see them.
Information collected automatically
- Technical and usage data — IP address, browser and device type, pages viewed, referring pages and approximate location, collected through server logs and, where used, cookies or similar technologies.
Business contact data (data services)
When providing business data and lead generation services, we process professional contact information about individuals in their business capacity — such as name, job title, company, business email and business phone number. This information is obtained from publicly available sources, licensed third-party data providers and direct business interactions. We do not intentionally collect sensitive personal information for these services. Individuals may object to or opt out of this processing at any time (see Section 7).
2. How we use information
- To respond to enquiries and provide consultations and proposals.
- To deliver, manage and improve our services, including websites, data, marketing, CRM and technology services.
- To send service-related communications and, where permitted, marketing communications you can opt out of at any time.
- To operate, secure and improve the Site, and to prevent fraud, spam and abuse.
- To comply with legal obligations and enforce our agreements.
Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract, our legitimate interests (such as responding to business enquiries and B2B outreach, balanced against your rights), your consent where required, and compliance with legal obligations.
3. How we share information
We do not sell personal information collected through this Site. We share information only with:
- Service providers who help us operate — for example hosting, email delivery, CRM, analytics and payment providers — under contracts that require them to protect it.
- Clients, where we deliver business data or lead generation services under contract. Clients receive business contact data for B2B purposes and must use it in line with applicable law.
- Professional advisers and authorities where required by law or to protect our rights.
- A successor business in the event of a merger, acquisition or sale of assets.
Where our data services involve making business contact information available to clients, residents of certain U.S. states may consider this a "sale" or "sharing" of personal information. You can opt out at any time using our Do Not Sell or Share My Personal Information form, or by emailing info@insightmeridiangroup.com. A Global Privacy Control (GPC) signal from your browser keeps optional website analytics disabled. For professional contact records in our data services, use the request form so our team can identify and process your request.
4. Cookies and analytics
The Site uses technologies needed for it to function. Where analytics is enabled, it loads only after you accept it in our cookie preferences. You can withdraw that choice using Cookie Settings in the footer. We do not send enquiry field contents to analytics. Global Privacy Control keeps optional analytics disabled.
5. Marketing communications
We comply with the U.S. CAN-SPAM Act and applicable electronic marketing laws. Every marketing email we send identifies us, includes a valid postal address and provides a clear way to unsubscribe. We process unsubscribe requests promptly.
6. International data transfers
We work with clients and service providers around the world, so your information may be processed in countries other than your own, including the United States. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.
7. Your privacy rights
Depending on where you live, you may have the right to:
- Know and access the personal information we hold about you.
- Correct inaccurate information.
- Delete your personal information.
- Receive a copy of your information in a portable format.
- Opt out of the sale or sharing of personal information, targeted advertising and profiling.
- Object to or restrict certain processing, and withdraw consent at any time.
- Not be discriminated against for exercising your rights.
To exercise any right, email info@insightmeridiangroup.com. We will verify your request and respond within the time required by law (generally 45 days under U.S. state laws and one month under the GDPR). You may use an authorized agent where permitted. If we deny your request, you may appeal by replying to our decision. EU and UK residents may also complain to their local data protection authority.
8. Data retention
We keep personal information only as long as needed for the purposes described above — for example, enquiry records for up to 24 months after our last contact, and client records for the duration of our relationship plus any period required for legal, tax or accounting purposes. Business contact data is regularly reviewed and refreshed, and records that are outdated or subject to an opt-out are removed or suppressed.
9. Security
We use appropriate technical and organizational measures to protect personal information, including encryption in transit, access controls and trusted infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information and will notify affected individuals and authorities of a breach where required by law.
10. PulseCRM and Google user data
PulseCRM is the application name of our Prime Meridian CRM platform, operated by Insight Meridian Group. This section applies when you connect a Gmail or Google Workspace mailbox to PulseCRM and takes precedence over the general data-services, marketing, sharing and retention descriptions above for Google user data.
Access and use
With your authorization, PulseCRM requests permission to send email on your behalf and read email through the Gmail API. It accesses your mailbox address, message headers (including sender, recipients, subject and dates), message text and HTML, and synchronization identifiers. It stores message and conversation records to display your CRM inbox, associate replies with outreach, and support the email workflows you initiate. Google access and refresh tokens let the connection continue without asking you to sign in for every action. These tokens are stored encrypted. PulseCRM does not ask for your Google password.
Sharing and access by people
Authorized CRM users can view messages according to their workspace permissions. Our hosting and database providers, including Vercel and Supabase, process data to operate the application. Where reply notifications are enabled, Resend processes the sender address, mailbox address, subject and a short message preview to deliver notifications to configured CRM administrators. These providers may process data only as needed to provide these features, subject to applicable data-protection obligations.
We do not sell Google user data, add it to our business-contact data products, use it for advertising or credit decisions, or use it to train generalized AI or machine-learning models. Access by our personnel is limited to your affirmative agreement for specific messages, security investigations, legal obligations, or other exceptions expressly permitted by Google's Limited Use requirements. Any transfer in a business acquisition remains subject to those requirements and, where required, your prior consent.
PulseCRM's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, and the Google Workspace API User Data and Developer Policy.
Disconnecting, retention and deletion
You can revoke PulseCRM's access in your Google Account connections at any time. A CRM administrator can also disconnect the mailbox in PulseCRM, which clears its saved access and refresh tokens and disables sending and receiving through that connection. Disconnecting does not delete messages already stored in CRM history or copies held in Google or recipients' mailboxes.
CRM message records are retained while needed to provide your account's email history and workflows. To request deletion of stored Google user data or your CRM account, email info@insightmeridiangroup.com with the connected mailbox address and the scope of your request. We verify your authority before processing it and retain information only where needed for applicable legal obligations. Removing data from PulseCRM does not remove copies held by recipients or independently in your Google account.
11. Children
Our Site and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date and, where changes are significant, notify you by other appropriate means.
13. Contact us
For privacy questions or requests, contact us at info@insightmeridiangroup.com. You can also reach us through our contact page.