Industry Insider — Privacy Policy

Version 2.0 · Last updated September 1st, 2026

This policy replaces our previous privacy policy dated 26 July 2025, and applies to everyone whose personal information we hold — including members who joined under the earlier policy.

The short version

We hold three kinds of personal information: details of the businesses that buy from us and the people at them, business contact details of people we approach about the product, and a small amount of incidental personal information inside the marketing material we collect. We don’t sell any of it, and we don’t collect consumer data about the shoppers of the brands we track.

1. Who we are, and what this policy covers

1.1. Industry Insider (“we”, “us”, “our”) is based in Australia. Our website is www.myindustryinsider.com (the “Website”) and our subscriber platform is the Portal.

1.2. This policy covers the personal information we handle about:

visitors to the Website;
our business customers, and the people at those businesses who hold accounts or access;
people we contact about Industry Insider, including prospects sourced from data providers and public sources; and
individuals whose details appear incidentally in the marketing material we collect about the brands we track.

1.3. In this policy, “personal information” has the meaning given in the Privacy Act 1988 (Cth), and includes “personal data” as that term is used in the UK and EU GDPR.

1.4. Our role. For the information described in this policy, we are the data controller (in GDPR terms) and the APP entity (in Australian terms). Where a customer chooses to put personal information into the Portal or the AI assistant — which our Terms of Use ask them not to do — that customer remains responsible for it, and we handle it on their behalf.

2. What we collect, and why

A. Website and Portal usage information

What: IP address, browser and device type, time zone, pages viewed, referring URLs, and how you move through the Portal, including which brands and files you open.

Why: To serve the Website and Portal correctly, monitor performance, understand which parts of the product get used, and detect misuse.

Source: Collected automatically through cookies and analytics tools.

Shared with: Google Analytics, and the analytics built into Sotion, our Portal platform.

B. Customer and billing information

What: Your name, work email address, company name, business address, ABN or equivalent tax number, and payment details. Card numbers are handled by Stripe and never stored by us.

Why: To take payment, issue receipts and tax invoices, give you access, administer your subscription, and meet our tax and record-keeping obligations.

Source: Provided by you, or by Stripe when you pay.

Shared with: Stripe, Sotion, and our accounting and tax advisers.

C. Your team’s access information

What: The name and email address of your nominated point of contact, the email domain we enable for your Portal access, the email addresses of the people we share Figma projects with, and login and access activity in the Portal.

Why: To grant and manage access, to identify who holds access on your behalf, and to protect the dataset against unauthorised distribution.

Source: Provided by you, or generated when your team uses the Portal.

Shared with: Sotion and Figma.

Your responsibility: When you give us a colleague’s or contractor’s details, or enable your email domain for Portal access, you confirm that you are entitled to give us that information and that you have told those people how it will be used. We ask you to point them to this policy.

D. AI assistant conversations

What: The questions you ask our AI assistant and the answers it gives, along with the account or domain the conversation came from.

Why: To answer your questions, to monitor quality, and to improve the assistant and the underlying dataset.

Source: Provided by you when you use the assistant.

Shared with: Chatbase, which hosts the assistant, and the AI model providers Chatbase uses to generate responses. These may be used to train third-party models, and state the position here plainly.

Please don’t enter your clients’ confidential information, your own customers’ personal information, or anything else you aren’t entitled to disclose. Our Terms of Use say the same thing.

E. Business contact information for marketing

What: Name, job title, employer, work email address, business phone number, LinkedIn profile and publicly available information about the company.

This is the category most people don’t expect, so we’ve set it out in full in section 3.

F. Support and correspondence

What: The content of emails, calls, demos and messages between us, and notes we make about them.

Why: To answer questions, run sales conversations, keep a record of what was agreed, and improve the product.

Shared with: Our email provider and our customer relationship tracker.

G. Personal information inside the material we collect

Covered separately in section 4, because it works differently from everything else here.

3. How we approach businesses about Industry Insider

3.1. We market Industry Insider to marketing agencies and ecommerce brands. To do that, we hold business contact details for people at those companies — often before they have ever visited our Website.

3.2. Where it comes from. From business data providers, from public sources including company websites and LinkedIn, and from our own research. It is not collected from the person directly, and this policy is how we tell you that we hold it.

3.3. What we hold. Work contact details and role information only — name, title, employer, work email, business phone, LinkedIn profile. We do not seek out personal email addresses or home contact details, and we do not collect or use sensitive information for marketing.

3.4. Why. To contact businesses whose work makes Industry Insider relevant to them, and to keep a record of who we have already approached so we don’t contact people repeatedly.

3.5. Our lawful basis. Where the UK or EU GDPR applies, we rely on our legitimate interests (Article 6(1)(f)) in marketing a business product to relevant businesses. We have weighed that against the privacy interests of the people we contact: the data is work-related rather than personal, the volume held about each person is small, the product is relevant to their professional role, and every message tells them how to stop hearing from us. You can object at any time under section 12.

3.6. Australian recipients. Under the Spam Act 2003 (Cth) we rely on inferred consent where a work address is published in connection with a person’s role and our message is relevant to that role. Every marketing email identifies us and carries a working unsubscribe link.

3.7. LinkedIn. We also approach people through LinkedIn. Those messages are subject to LinkedIn’s own terms and privacy practices as well as this policy.

3.8. Opting out. Reply asking us to stop, use the unsubscribe link, or email support@myindustryinsider.com. We will stop contacting you and add your address to a suppression list. We keep the minimum information needed to honour that — usually just your email address — because deleting it entirely would mean we could contact you again by mistake.

3.9. Who processes it. Instantly, which sends and tracks our outbound email; Hubspot, where we record contact history; and LinkedIn.

4. The material we collect about the brands we track

4.1. Industry Insider records what ecommerce brands do in their marketing over time. We collect:

advertisements from the Meta Ads Library;
marketing emails received at email addresses we control, having subscribed to those brands’ mailing lists ourselves; and
captures of publicly available website pages.

4.2. This is business marketing material, not personal data about consumers. We do not collect, buy or receive any information about the brands’ customers, shoppers, subscribers or website visitors, and nothing we hold identifies them.

4.3. The material can incidentally contain personal information — a staff member’s name in an email signature, a founder’s name in a campaign, the image or likeness of a model, creator or employee appearing in an advertisement. We don’t extract it, index it, or use it to build profiles of individuals. It is retained as part of the record of what a brand published, because altering the record would defeat the product’s purpose.

4.4. If you appear in material we hold and you want to discuss it, email support@myindustryinsider.com. We will look at each request on its facts, and we will tell you honestly what we can and can’t do — including where material has already been delivered to customers, since we cannot retrieve files they hold.

5. How we use personal information

To provide the Website, the Portal, the Figma projects and the AI assistant.
To take payment, administer subscriptions and issue tax documents.
To grant, manage and withdraw access, and to protect the dataset against unauthorised distribution, including through the identifiers described in our Data Licence.
To respond to enquiries and provide support.
To market Industry Insider to businesses, as section 3 describes.
To monitor, secure and improve the Website, Portal and AI assistant.
To meet legal obligations, enforce our Terms of Use and Data Licence, and defend legal claims.

6. Who we share personal information with

6.1. We share personal information with service providers who help us run the business, and only as far as they need it:

Provider

What it does

Stripe

Payments and billing

stripe.com/privacy

Sotion

Hosts the Portal and manages access

sotion.so/privacy-policy

Figma

Hosts the design files we deliver

figma.com/legal/privacy/

Chatbase

Hosts the AI assistant, with its AI model providers

chatbase.co/legal/privacy

Google Analytics

Website usage measurement

policies.google.com/privacy

Instantly

Sends and tracks outbound email

instantly.ai/privacy

Hubspot

Records contact and customer history

legal.hubspot.com/privacy-policy

Business outreach

linkedin.com/legal/privacy-policy

6.2. We may also disclose personal information to our professional advisers, to a purchaser if we sell the business or its assets, and where we are required to by law or need to in order to establish or defend a legal claim.

6.3. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

7. Cookies and tracking

7.1. We use:

essential cookies, so the Website and Portal work and keep you signed in;
analytics cookies, through Google Analytics and Sotion, to understand usage; and
functional cookies, for secure checkout through Stripe and for the AI assistant widget.

7.2. Session cookies expire when you close your browser. Persistent cookies may stay on your device for up to two years.

7.3. You can block or delete cookies in your browser settings, though some features may stop working. To opt out of Google Analytics specifically, use Google’s browser add-on at tools.google.com/dlpage/gaoptout.

7.4. We do not currently run advertising or retargeting pixels on the Website — no Meta pixel, no LinkedIn insight tag, no interest-based advertising trackers. If that changes, we will update this policy before we turn them on.

8. Where your information goes

We are based in Australia, and our service providers operate in other countries, including the United States. Most of our customers are United States businesses. Personal information covered by this policy is therefore stored and processed overseas, including in the United States. Where the GDPR applies to a transfer out of the UK or EEA, we rely on the transfer mechanisms our providers put in place, such as standard contractual clauses. We take reasonable steps to ensure anyone handling personal information for us protects it consistently with this policy.

9. How long we keep it

Information

How long

Prospect and business contact data

While the person remains relevant to our marketing, and no more than 24 months after our last contact or their last engagement

Suppression list (people who opted out)

Indefinitely, so we can keep honouring the opt-out

Customer and billing records

Seven years after the subscription ends, to meet Australian tax and record-keeping requirements

Access and login records

While the subscription is active, then up to 24 months, because they evidence who held access if data is later found where it shouldn’t be

AI assistant conversations

While your subscription is active and for 12 months afterwards. We also keep de-identified copies, with the account and domain stripped out, for as long as they remain useful for improving the assistant and the dataset

Website and Portal analytics

Aggregated reporting indefinitely, as it doesn't identify anyone. Visitor-level data for as long as our analytics providers retain it — currently up to 14 months in Google Analytics

Support correspondence

Seven years after our last exchange

We may keep information longer where we need it for a legal claim or a legal obligation. Otherwise we delete it or de-identify it.

10. Security

We take reasonable steps to protect personal information, including access controls on our systems, reputable providers for payments and hosting, and unique identifiers embedded in the files we supply so a leak can be traced. No system is completely secure. If a data breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires, and any other regulator we are obliged to tell.

11. Automated decisions

We don’t use automated processing to make decisions about individuals that have legal or similarly significant effects. Our AI assistant answers questions about the dataset; it doesn’t make decisions about people.

12. Your rights

Everyone

You can ask us to access the personal information we hold about you, correct it if it’s wrong, or delete it. Email support@myindustryinsider.com. We will respond within a reasonable period — normally 7 days — and we may need to verify who you are first.

Australia

We handle personal information in accordance with the Australian Privacy Principles. If you think we have mishandled your personal information, tell us first at support@myindustryinsider.com so we can try to sort it out. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

United Kingdom and European Economic Area

If the UK or EU GDPR applies to you, you have the right to access, correct, delete or receive a portable copy of your personal data, to restrict or object to processing, and to withdraw consent where we rely on it.

You have an unconditional right to object to direct marketing. If you tell us to stop, we stop.

We rely on these lawful bases: performance of a contract (to provide the product you’ve bought), legitimate interests (marketing to businesses, securing the dataset, improving the product), legal obligation (tax and record-keeping), and consent where we ask for it.

You can also complain to your local supervisory authority, or to the UK Information Commissioner’s Office if you are in the UK.

California

If you are a California resident, you may request to know what personal information we hold about you and where it came from, request its deletion or correction, and are protected from discrimination for exercising these rights. We do not sell personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of on that front; we also do not collect sensitive personal information as the CPRA defines it. You may use an authorised agent — email support@myindustryinsider.com.

Canada

If you are in Canada, you may request access to or correction of your personal information and withdraw consent to its collection or use, subject to legal and contractual limits.

13. Children

Industry Insider is a business product and is not intended for anyone under 18. We don’t knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we’ll remove it.

14. Do Not Track and Global Privacy Control

Some browsers send “Do Not Track” or Global Privacy Control signals. We do not currently respond to them, because we do not sell or share personal information for advertising and there is no settled standard for the rest. You can still control cookies as section 7 describes.

15. Changes to this policy

We may update this policy to reflect changes in what we do or what the law requires. Updates are posted on this page with a new “last updated” date. Where a change materially affects how we handle personal information, we will tell affected customers by email.

16. Contact us

📧 support@myindustryinsider.com 🌐 www.myindustryinsider.com

If you want to exercise any of the rights in section 12, or you have a concern about how we’ve handled your personal information, that address is the fastest route to a person.

At Industry Insider we are dedicated to providing timely support to our customers. Please email support@myindustryinsider.com with any questions and we will reply within one business day.

Terms & Conditions