Privacy Policy

1. Introduction & Data Controller

InsightBoard is committed to protecting your privacy and ensuring transparent data handling practices. This Privacy Policy explains how C&J BUYERS LTD (trading as InsightBoard), registered at Unit C, Auster Road, York, YO30, United Kingdom, collects, processes, stores, and shares your personal information.

We comply with the General Data Protection Regulation (GDPR), UK Data Protection Act 2018, and all applicable data protection laws. If you have questions, contact us at [email protected] or +44 1904 456 789.

2. Cookie Categories & Purpose

3. Marketing Cookies – Mandatory Disclosures

4. Consent Requirements & Data Protection

When you first visit InsightBoard, you are presented with a cookie consent banner offering three options: "Accept All", "Reject Non-Essential", or "Manage Preferences". Marketing and analytics cookies are activated only after you select "Accept All" or specifically enable them through preferences.

Your consent choice is recorded with a timestamp and stored in localStorage for 12 months. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred while consent was valid.

GDPR Compliance Statement (EEA & UK Users): Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is provided through affirmative action (clicking "Accept All" or enabling specific categories). Pre-ticked boxes and opt-out mechanisms do not constitute valid consent under GDPR.

By clicking "Accept All Cookies" or enabling marketing/analytics categories, you consent to the storing of cookies on your device for analytics and advertising purposes, including personalised advertising delivered by Google and Meta across their respective networks.

5. Data Sharing with Advertising Partners

We share certain categories of data with advertising partners for campaign delivery, measurement, and audience building. Recipients and data categories shared include:

We do not sell personal data to unrelated third parties. All transfers to Google and Meta operate under Standard Contractual Clauses (SCCs) approved by the European Commission where applicable. Data shared with advertising partners is processed for ad targeting and campaign measurement only—not resold to unaffiliated third parties. Google and Meta may use this data across their own platforms and services in accordance with their respective policies. We encourage you to review those policies directly.

6. Lead Forms & Contact Requests

When you submit a contact form, investor registration form, or request a quote, we collect the information you provide. This typically includes: full name, email address, phone number, investment range preference, and your message or inquiry details.

Legal Basis for Processing: We process form data based on your consent (GDPR Article 6.1.a) and, where a business relationship is being established, legitimate performance of a contract (GDPR Article 6.1.b). Your form submission constitutes consent for InsightBoard to contact you regarding investment opportunities.

Data Retention: Form submission data is retained for up to 2 years from the date of submission, unless a longer retention period is required by applicable law or accounting standards. After 2 years, data is securely deleted unless you have an ongoing business relationship with InsightBoard.

Your Rights: You may request deletion of your form data at any time by contacting us at [email protected]. We will respond within 30 days and securely delete your information, subject to legal retention obligations.

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting any form constitutes acknowledgment and acceptance of this policy and our data handling practices.

7. Google Services & Advertising Technologies

Google's advertising products and privacy practices are governed by: https://policies.google.com/technologies/ads

8. Meta Advertising Services & Facebook Pixel

InsightBoard uses the Meta Pixel to measure the effectiveness of our advertising campaigns on Facebook and Instagram. The pixel records page views, time spent on site, form submissions, and specific conversion events. Data collected through the Meta Pixel may be used for:

• Measuring the effectiveness of Facebook and Instagram advertisements
• Building custom audiences for retargeting previous website visitors
• Creating lookalike audiences to reach similar users
• Tracking conversion events linked to paid social campaigns
• Generating performance reports and optimising ad delivery

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within Meta's own systems and platforms. Meta may use this data to improve its services, prevent fraud, and deliver personalised content. Refer to Meta's Data Policy for complete details: https://www.facebook.com/privacy/policy

To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

9. Prohibited Content Self-Declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, unlicensed gambling services, adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies fully with the respective platform policies. InsightBoard maintains rigorous content compliance review processes to ensure adherence to advertising platform standards at all times.

10. Landing Page Integrity & Transparent Cloaking

The content of this website accurately represents the products and services advertised through paid advertising campaigns. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors regardless of traffic source. Cloaking, automatic redirects, and content variation by user type or traffic source are not used on this website. All visitors see the same content, layout, and investment opportunities.

11. Children's Privacy & Age Restrictions

This website is not directed at individuals under the age of 16. InsightBoard provides investment advisory services to adults only. We do not knowingly collect personal data from minors. If we discover that personal data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly upon notification. Contact us at [email protected] if you believe we have received data from a minor.

12. International Data Transfers & Adequacy

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based. These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly at [email protected].

By using InsightBoard, you acknowledge that your data may be transferred internationally and processed by our service providers in accordance with this policy and applicable law.

13. Your Rights Under GDPR & Data Protection Law

If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:

• Right of Access (Article 15): Request a copy of all data we hold about you in a structured, portable format.
• Right to Rectification (Article 16): Correct inaccurate, incomplete, or outdated personal data.
• Right to Erasure (Article 17): Request deletion of your data ('right to be forgotten'), subject to legitimate retention obligations.
• Right to Restrict Processing (Article 18): Limit how we process your data whilst we verify accuracy or handle disputes.
• Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object (Article 21): Object to processing based on legitimate interest, including direct marketing and profiling.
• Right to Withdraw Consent (Article 7.3): Withdraw consent for processing at any time without penalty.
• Rights Related to Automated Decision-Making (Article 22): Obtain human review of automated decisions that have legal or significant effects on you.

To exercise any of these rights, email us at [email protected] with "Data Rights Request" in the subject line. Include clear details of your request and verification of your identity. We will respond within 30 days (extendable by 60 days for complex requests). You also have the right to lodge a complaint with your local data protection authority:

• EU Users: European Data Protection Board: https://edpb.europa.eu
• UK Users: Information Commissioner's Office (ICO): https://ico.org.uk

14. Data Categories Collected

InsightBoard collects the following categories of personal data where applicable:

• Full name and contact information
• Email address and phone number
• IP address and device identifiers
• Browser type, version, and operating system
• Device type (mobile, tablet, desktop)
• Cookies and tracking identifiers
• Pages visited and time spent on site
• Click paths and interaction patterns
• Form submission content and inquiry details
• Conversion events (registrations, inquiries, contact requests)
• Investment range preferences and interests

15. Legal Basis for Processing Data

We process personal data based on the following legal bases under GDPR Article 6:

• Contact form data: Consent (Art. 6.1.a) and contract performance (Art. 6.1.b) where you enquire about investment opportunities.
• Analytics data: Consent (Art. 6.1.a) – activated only after explicit acceptance of analytics cookies.
• Marketing and remarketing data: Consent (Art. 6.1.a) – activated only after explicit acceptance of marketing cookies.
• Security and fraud prevention: Legitimate interest (Art. 6.1.f) – protecting our systems and users from unauthorised access and fraudulent activity.
• Compliance with legal obligations: Legal obligation (Art. 6.1.c) – where required by law, regulation, or court order.

16. Data Retention Periods

We retain personal data for specific periods based on purpose and legal obligation:

• Contact form submissions: 2 years from submission date, unless an ongoing business relationship requires longer retention.
• Analytics data (GA4): 14 months from collection date.
• Marketing and advertising cookies: Up to 540 days (Google Ads default) or as configured by advertising partners.
• Email communications: Duration of business relationship plus 1 year for archival purposes.
• Server logs: 90 days.
• Cookie consent records: 3 years (for audit and compliance purposes).
• Account data (if created): Duration of account ownership plus 2 years after closure or last interaction.

17. Data Security & Protective Measures

InsightBoard implements technical and organisational safeguards to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data transmission
• Secure password hashing and authentication protocols
• Limited access controls—only authorised personnel access personal data
• Regular security audits and vulnerability assessments
• Secure data disposal procedures for retired systems
• Incident response procedures for potential data breaches

No data transmission over the internet is entirely secure. While we implement industry-standard protections, we cannot guarantee absolute security. Users transmit data at their own risk.

18. Third-Party Links & External Websites

InsightBoard may contain links to third-party websites, including Google and Meta services. We are not responsible for the content, accuracy, or privacy practices of external websites. If you click external links, you leave our site and enter their domain. We encourage you to review third-party privacy policies before providing data or using their services. Links do not constitute endorsement.

19. Changes to This Privacy Policy

InsightBoard may update this Privacy Policy to reflect changes in our practices, legal requirements, or other operational factors. Significant changes will be notified via homepage banner or email notification at least 14 days before taking effect. Your continued use of the site after changes become effective constitutes acceptance of the updated policy. The "Last Updated" date at the top of this page reflects the most recent revision.

20. Contact Information & Data Controller Details

For data protection inquiries, privacy concerns, or to exercise your rights, contact us using the details above. We will respond within 30 days.