1. Who we are
InsightsIQ Solutions Ltd ("InsightsIQ", "we") is the data controller for personal data collected through this website. Privacy contact: support.tumaini@insightsiq.co. Office address: Dennis Pritt Road, next to Maalim Juma Road, Kilimani, Nairobi, Kenya.
2. What this notice covers
Visitors to theinsightsiq.com, people who use the contact form or subscribe to the briefing, and people who email us or apply for roles. It does not cover information collected inside a patient support programme, which is governed by that programme's own privacy notice, given to participants when they join, and by the consent they gave at that point.
3. Personal data we collect
- Contact form and briefing signup: name, organisation, work email, phone if you give it, and the message you write. Please do not include patient or other sensitive information. These forms do not submit anything to this website; see section 5.
- Email and applications: what you send us, including a CV if you apply for a role.
- Website technical data: none that we collect or keep. We run no analytics on this website, so nothing records which pages you read. Delivering a page necessarily involves our host handling your IP address and request details; we do not build that into profiles or statistics about you. See the cookie and analytics notice.
4. Why we use it and on what basis
- To reply to your enquiry and follow up on it: our legitimate interest in responding to business contacts.
- To send the briefing you subscribed to: your consent, which you can withdraw at any time by replying to any briefing or writing to us.
- To consider you for a role: our legitimate interest in recruiting, for up to twelve months.
- To comply with law and defend legal claims where necessary.
5. Who we share it with
Service providers who process data on our instructions: our website host (Netlify), our email and document systems (Google Workspace), and professional advisers where required. We do not sell personal data.
The forms on this website have no mailbox or database behind them. When you press "Send message" or "Subscribe", your browser opens your own email application with what you have typed, for you to send yourself. Nothing is transmitted to this website and nothing is stored by it. Your details reach us only as an ordinary email, once you choose to send it, and are then handled as described in sections 4 and 7.
We do not use website analytics. No analytics, advertising or social-network measurement script is loaded on any page of this site, and no such provider receives anything about your visit. If we start using one, we will name it here and in the cookie and analytics notice, under a new version of both, before it is switched on.
6. International transfers
Our providers store data on servers outside Kenya, including in the European Union and the United States. Transfers are protected by contractual safeguards, including data-processing terms and, where applicable, standard contractual clauses. Data stored outside Kenya may be subject to the laws of the host country.
7. Retention
Enquiries and correspondence that reach us by email: up to three years after the last contact. Briefing subscriptions: until you unsubscribe. Job applications: twelve months. There is no analytics data to retain, and no form submissions are stored on this website.
8. Security
We use role-based access, encryption in transit and at rest with our providers, staff confidentiality obligations and secure handling procedures. No system is perfectly secure; we maintain measures appropriate to the risk.
9. Your rights
Under the Data Protection Act 2019 you may request access to your personal data, correction, deletion in lawful circumstances, restriction of processing, and portability where applicable. You may also object to processing and withdraw your consent. Write to support.tumaini@insightsiq.co. Programme participants can also use the data subject rights request form (PDF). We may need to verify your identity. If you are not satisfied with our response you may complain to the Office of the Data Protection Commissioner.
10. Children
This website and our programmes are intended for adults. Caregivers should only submit information they are authorised to share.
11. Changes
We publish updates here with a new version number and effective date. Material changes to programme processing are notified to participants through available channels.