This Privacy Policy explains how Insight Meridian Group ("we", "us", "our"), together with our brands InsightLead Partners and Prime Meridian, collects, uses, shares and protects personal information when you visit insightmeridiangroup.com (the "Site"), contact us, or use our services. We serve clients in the United States and worldwide, and we handle personal information in line with applicable privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), other U.S. state privacy laws, the EU General Data Protection Regulation (GDPR) and the UK GDPR.
1. Information we collect
Information you give us
- Contact and enquiry details — name, email address, company, phone number, country, the service you are interested in, and the content of your message.
- Client account and project information — business contact details, billing information and materials you share with us to deliver services.
- Communications — emails, call notes and other correspondence with us.
Information collected automatically
- Technical and usage data — IP address, browser and device type, pages viewed, referring pages and approximate location, collected through server logs and, where used, cookies or similar technologies.
Business contact data (data services)
When providing business data and lead generation services, we process professional contact information about individuals in their business capacity — such as name, job title, company, business email and business phone number. This information is obtained from publicly available sources, licensed third-party data providers and direct business interactions. We do not intentionally collect sensitive personal information for these services. Individuals may object to or opt out of this processing at any time (see Section 7).
2. How we use information
- To respond to enquiries and provide consultations and proposals.
- To deliver, manage and improve our services, including websites, data, marketing, CRM and technology services.
- To send service-related communications and, where permitted, marketing communications you can opt out of at any time.
- To operate, secure and improve the Site, and to prevent fraud, spam and abuse.
- To comply with legal obligations and enforce our agreements.
Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract, our legitimate interests (such as responding to business enquiries and B2B outreach, balanced against your rights), your consent where required, and compliance with legal obligations.
3. How we share information
We do not sell personal information collected through this Site. We share information only with:
- Service providers who help us operate — for example hosting, email delivery, CRM, analytics and payment providers — under contracts that require them to protect it.
- Clients, where we deliver business data or lead generation services under contract. Clients receive business contact data for B2B purposes and must use it in line with applicable law.
- Professional advisers and authorities where required by law or to protect our rights.
- A successor business in the event of a merger, acquisition or sale of assets.
Where our data services involve making business contact information available to clients, residents of certain U.S. states may consider this a "sale" or "sharing" of personal information. You can opt out at any time using our Do Not Sell or Share My Personal Information form, or by emailing info@insightmeridiangroup.com. We also honor Global Privacy Control (GPC) signals where required by law.
4. Cookies and analytics
The Site uses only the cookies and technologies needed for it to function and, where enabled, analytics that help us understand how the Site is used. You can control cookies through your browser settings. If we introduce advertising or non-essential cookies, we will update this policy and request consent where the law requires it.
5. Marketing communications
We comply with the U.S. CAN-SPAM Act and applicable electronic marketing laws. Every marketing email we send identifies us, includes a valid postal address and provides a clear way to unsubscribe. We process unsubscribe requests promptly.
6. International data transfers
We work with clients and service providers around the world, so your information may be processed in countries other than your own, including the United States. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.
7. Your privacy rights
Depending on where you live, you may have the right to:
- Know and access the personal information we hold about you.
- Correct inaccurate information.
- Delete your personal information.
- Receive a copy of your information in a portable format.
- Opt out of the sale or sharing of personal information, targeted advertising and profiling.
- Object to or restrict certain processing, and withdraw consent at any time.
- Not be discriminated against for exercising your rights.
To exercise any right, email info@insightmeridiangroup.com. We will verify your request and respond within the time required by law (generally 45 days under U.S. state laws and one month under the GDPR). You may use an authorized agent where permitted. If we deny your request, you may appeal by replying to our decision. EU and UK residents may also complain to their local data protection authority.
8. Data retention
We keep personal information only as long as needed for the purposes described above — for example, enquiry records for up to 24 months after our last contact, and client records for the duration of our relationship plus any period required for legal, tax or accounting purposes. Business contact data is regularly reviewed and refreshed, and records that are outdated or subject to an opt-out are removed or suppressed.
9. Security
We use appropriate technical and organizational measures to protect personal information, including encryption in transit, access controls and trusted infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information and will notify affected individuals and authorities of a breach where required by law.
10. Children
Our Site and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date and, where changes are significant, notify you by other appropriate means.
12. Contact us
For privacy questions or requests, contact us at info@insightmeridiangroup.com. You can also reach us through our contact page.