Privacy policy

Applicability

This Privacy Policy describes how Insight Enterprises, Inc. and our affiliates treat the personal information of individuals who interact with us. For a full list of Insight entities visit here.  

This Policy applies to the practices on the websites and apps where it appears. This includes when you are a job applicant or an employee or contractor. It also applies to information about individuals employed by our business partners. It does not apply in other situations.

Notice At Collection

Information We Collect

What information we collect depends on our relationship with you and the jurisdictions in which you reside. It may also depend on the laws that apply in your jurisdiction. Depending on these, we may collect the following:

• Contact information. We collect names and addresses. We also collect phone numbers and email addresses. We may collect information about your company and job title.
• Online and account information. We collect login details from those who use digital platforms like login records. When you create an account, you provide us with a password. You also provide your email address.
• Job-related information from employees. From our employees we may collect information about work roles and work output or about performance or training. We also collect information about compliance and other job-related information. We may also collect clearance or permit information. We will also collect financial information needed for payroll and benefits, like bank account numbers or beneficiary details. We may also collect identification numbers like Social Security Numbers, drivers’ license numbers, or other forms of government ID.
• Other employment-related demographic information. From certain employees, we may collect additional information as permitted by law. The following is information we may collect as permitted by local law: work permit status, date of birth, marital status, gender, race/ethnicity, citizenship, veteran status, trade union membership and/or religious affiliation.
• Job applicant information. We collect information about education and work history from job applicants. This includes information we receive from CVs and other documents submitted to us. It also includes information shared during job interviews or otherwise. We may also ask them about their skills and qualifications. We collect information about criminal offenses and information necessary to carry out background checks where permitted by law. We may ask about your ability to perform a position. We do not request sensitive personal information during the application process. If you provide sensitive personal information within your application, we will process it in accordance with applicable laws and this policy.
• Payment information. Third party payment processors may collect payment information on our portals or when you make purchases with us. This may include credit or debit card numbers and security codes. We may also work with them to collect shipping information.
• Other purchase information. We collect information about purchases. This includes amount purchased and the time and day of your purchase. We also keep track of whether you used a discount or promotion code. We may collect your order information and preferences. We may also collect information about events you have attended.
• Information you submit. We collect information that you post on our site. This might be through our chatbot or by giving us comments or suggestions. It may include comments you post publicly. We also collect information you provide when you contact us by email or phone. This includes contacting customer service. We may also collect survey response information and product reviews.
• Site and device information. We collect log and session data when you visit our platforms or interact with our systems. We may also collect browser and operating system information or an IP address. If you are an employee, or at our facilities, we collect information about how you interact with our IT systems. We also collect device identifiers. When visiting our platforms we may collect what site you came from or what site you visit when you leave us. We may also collect information about your interactions with our emails and advertisements.
• Social media activity and images or photographs. We may collect information about you from social media. This includes when you follow us or share our content. The information we collect depends on your privacy settings with the social network. We may collect photographs or other images and likenesses. This might be on social media, or if you attend an event.
• Information relating to internal or legal investigations and proceedings. We may collect information in connection with internal or legal investigations. This includes whistleblowing investigations. This also includes any official or court proceedings we may have initiated or may participate in. Information might include criminal offenses or criminal background.

Notice Under California Law: California law requires that we tell you what categories of information we might share for cross-contextual behavioral advertising purposes. The categories of information we might share for cross-contextual behavioral advertising are your site usage information and in some cases information about your purchases. It might also include device information. To modify your preferences read our Notice of Right to Opt-out of Sale/Sharing section below.

Business Purposes for Information Use

How we use your information depends on your relationship with us and the jurisdiction in which you reside. The reasons we might use your information are the following:

• Delivering products and other business purposes. We use your information to complete and deliver your orders. We also use your information to process payments. We may also use your information to maintain your account.
• Communicating with you. We use information to answer questions and respond to feedback. This includes questions about your orders or job opportunities. It may also include information about event registrations (including sending you invitations or follow up messages). We may provide you with technical notices or security alerts or to provide policies or other technical information. For job applicants we may also communicate with you about your application. We may communicate with employees about employment-related matters.
• Improving products and platforms. We use your information to improve our platforms and products. This may include customizing your experience with us. We also use your information to maintain accounts or perform services.
• Marketing purposes. We use information to provide you with information about new products and offers. We may also tell you about new features or updates. This may be by phone or email, or through social media platforms. We do this when legally permitted. We may also analyze trends or statistical data that we collect.
• Protecting our company and constituents. We use information to protect our company, customers and other business partners. We also use information to identify fraud and secure and protect our systems and assets. This includes our IT systems assets. It also includes using information for internal investigations including on internal whistleblowing systems. Our use may include reviewing usage and logging data from email communications. It may also include using information to assess and address potential contractual violations. It also includes using information to maintain the health and safety of individuals on our premises. We will also use information to comply with the law. This includes responding to law enforcement or regulatory requests.
• Recruitment activities. We use your information for recruitment purposes. This includes reviewing your qualifications and suitability for positions. In some cases we may engage in automatic decision making for this activity as permitted by law. This may include using third party tools to help us match candidates with opportunities. Please see our statement about automated decision making and AI tools below.
• Human resources activities. We use employee information to administer benefits and compensation and to fulfil our other obligations as your employer. We use employee information for performance and personnel management. We also use employee information to provide mentoring support and employee training management. We may also use it to ensure compliance with our internal policies and guidelines governing the employment relationship. We also use your information for other administrative processes.

If you are located in Europe or this Privacy Policy is provided to you by an entity established in Europe: Some jurisdictions require that we tell you the “legal basis” for how we use your information. This includes Member States of the European Union and the United Kingdom. Our legal basis for processing your information is to enter or perform a contract or because we have a legal obligation to process your information. It also includes if the processing is in our legitimate interest, and not overridden by your rights or interests. It also may in some cases be based on your consent. If we are using information based on consent, you have the right to refuse consent. If you consent and later wish to revoke your consent, you have the right to do so. To learn more, read the Choices section below.

We use all categories of information for other purposes as permitted by law or as we may notify you.

How Long We Keep Information

We keep information for as long as necessary or relevant for the purposes described in this policy. We also keep information as required by law.

Sensitive Information

We do not use or disclose sensitive personal information, as defined by California law, for inferring characteristics or for purposes other than those permitted by law. For European employees we may process sensitive information as that term is defined in your region. This might include information about sick days. Where possible or where required we use this information with your consent, which you may have the right to refuse or revoke.

More Information

For more information about our privacy practices, read the rest of our Privacy Policy below.

How We Collect Information

We collect information directly from you. We collect personal information when you contact us. This includes when you create an account or place an order. This also includes when you participate in a survey or our events. It includes when you communicate with us online or via phone. We may collect employee data directly from our employees and potential employees. This includes during the job application process. We also collect employee data during the onboarding process.

We collect information passively. We collect information through tracking tools over time and across different websites and apps. We will collect this information on our platforms or on third party platforms we control, as well as from monitoring our IT and communication systems. Tools we use include cookies and pixels. To learn more about cookies visit here.  We may do this on our websites and in emails that we send to you. We may have third parties collect personal information this way.  

We collect information about you from others. We may collect information from data sellers to enhance or supplement our contact information where not restricted by law. We may also get information about you from our affiliates or other business partners. For employees and potential employees we may get reference or performance information. We may also get information from courts or other government authorities. Business partners include joint marketing partners and social media platforms. We may get information from third party data suppliers and third-party sites. We may get information from digital advertising networks and delivery services. We also get information from survey providers and other service providers.

We combine information

We combine information that we have collected offline with information we collect online. We also combine information collected across devices. This might include information collected from computers with that collected on mobile devices. We also combine information that we get from others with information we already have.

Security measures

We use reasonable security measures as required by law. The Internet is not 100% secure. We cannot promise that your use of our sites or apps will be completely safe. We encourage you to use caution when using the Internet. This includes not sharing your passwords.

Information Storage

Information we collect may be stored in the country in which you reside. It may also be transferred to and stored in the United States. If you live outside of the United States and choose to use our platforms or otherwise enter into a relationship with us, you understand that it is at your own risk. The United States may not afford the same level of protection as laws in your own country.

When We Disclose Information

Listed below is when we may disclose your information. We may disclose all categories of information we have collected above with the categories of parties below.

• We disclose information to our affiliates and suppliers. We disclose all categories of information as necessary to manage daily operations and pursue our business interests. This includes to complete your orders and process your payments. For information about our  affiliates, see here. For information about our suppliers and subprocessors, see here.
• We share information for cross-contextual behavioral advertising. This includes online ads targeted to your interests. The Notice at Collection (above) outlines which categories of information we share for this reason.
• We disclose information to vendors who perform services on our behalf. We may disclose all categories of information with trusted service providers depending on the services that they provide. This includes group companies, agents, contractors or vendors of Insight who provide data processing services to us or who otherwise process personal data for the purpose of performing services for you or Insight. It also includes for the purpose notified to you when we collected your personal data. For example it these may be vendors who help us send communications or assist us with recruitment functions. It also includes Cloud storage providers and IT service providers. We may also disclose information to fraud prevention services and data analytics companies.
• We disclose information to comply with the law or to protect ourselves. We disclose all categories of information to respond to a court order or subpoena. We also disclose this information in response to a government agency, public authority or investigatory body request. This includes to meet national security or law enforcement requirements. We may also disclose this information to investigate potential fraud or to enforce our policies and terms. This may include disclosures to lawyers or other external professional advisors. It may also include complying with employment obligations like disclosures to tax authorities or health insurers. We may make these disclosures where we have a good faith belief that we are required to make a disclosure.
• We will transfer information with successors to all or part of our business. If all or part of our business is sold, we may transfer all categories of information as part of that transaction. If there is a merger or acquisition, we will do this as well.
• We may disclose information for other reasons we may describe to you. We will also disclose information as otherwise permitted by law.

Additional information for residents of certain US jurisdictions: California, Colorado, Connecticut, Utah, Virginia, and Nevada law require that we tell you if we sell personal information with a third party for monetary or (in California) other valuable consideration. We do not do this. We also do not sell personal information of minors under the age of 16 for monetary or other valuable consideration.

Your Rights and Choices

Marketing Choices

You may opt out of receiving marketing emails you receive from us. To do so follow the instructions in the message you receive. You will still receive our transactional and relevant operational communications.

Cookies and Tracking Tools

We collect personal information about users over time and across different websites as permitted by law. We also serve content on our platform or third-party platforms based on your behaviors and interests as permitted by law. We also have vendors that do this. To do this, we use common tracking tools. These may include browser cookies or web beacons. We may also use flash cookies and similar technologies.

• You can control cookies and tracking tools. Your browser may give you the ability to control cookies or other tracking tools. How you do so depends on the type of tool. Certain browsers can be set to reject browser cookies. If you block cookies, certain features on our Sites may not work. If you block or reject cookies, not all the tracking described here will stop.
• Our Do Not Track Policy. Some browsers have “do not track” features that allow you to tell a website not to track you. These features are not all uniform. Included in our Privacy Preference Center is information on how to enable “Do Not Track” features.
• Cross-contextual behavioral advertising. These ads include ones based on your digital activities. To opt out, read our Notice of Right to Opt-out of Sharing below. You can also manage preferences with tools from the Self-Regulatory Program for Online Behavioral Advertising. To manage online preferences here. To manage mobile choices, go here. 
• Notice of Right to Opt-out of Sharing. You can opt out of the sharing of your personal information for cross-contextual behavioral advertising by visiting “Cookies Settings” in the bottom banner of insight.com and following the instructions there. You can also configure certain browsers to tell websites not to share your information for these reasons through the “global privacy control” signal. We will respond to this signal in a frictionless manner. If you configure this setting on your browser, certain features may not work. To learn how to configure this setting, view here.

Options you make are browser and device specific.

Specific Rights in Certain Jurisdictions

If you are a consumer who lives in the EU, the UK, Canada, California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, Virginia, or jurisdictions with similar laws, you may have additional rights. Those rights depend on our relationship. The rights are subject to certain limitations and are not absolute. This might include if a legal exception applies. If that is the case, we will not be able to process your request.

The rights include the following and may be offered based on your location:

• Access to or copies of your information: This includes finding out the categories of information we hold about you and the purposes of processing. It may also include the recipients of your information and retention periods. For those in California, you also have the right to find out the sources of collection and the business purpose for collection.
• Portability: This includes asking us to provide you with (a copy of) your information in a structured, commonly used and machine-readable format. You can use this to send the information to another entity.
• Correction and asking us to make changes to your information.
• Restriction: This includes asking us to restrict processing of your information.
• Deletion: This includes asking us to delete your information.
• Objection to how we process your information: Your objection may be based on grounds relating to your particular situation. This is based on when we process your personal data based on our legitimate interests. In case we process your information for direct marketing purposes, you may object to this at any time.
• Not being subject to automated decision-making: This includes profiling that has legal effect on you or similarly significantly affects you. For automated decision making that occurs as part of our job applicant process, you can opt out of this by submitting your application by email.

If you are in the EU or the United Kingdom. You may take legal action and to lodge a complaint with the competent supervisory authority.

Nevada residents. You may opt out of the future sale of your information to a third party so that they may license or sell that information. To do this, email us at the contact information listed at the end of this notice.

How it Works

You can exercise your rights by contacting us via mail or email. If you would like to exercise your rights please get in touch with the relevant Insight affiliate. The contact details of each Insight affiliate are detailed on our website at here. You can also contact us as indicated in the “how to contact us” section below.

You must be able to provide your name and email address or other information sufficient to allow us to identify you. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

These rights are not absolute. In some situations, we may not be able to process your request. This may include if a legal exception applies. We will let you know when or if a right does not apply to you. If you disagree with our decision, you can contact us as described at the end of this notice. We will not discriminate against you because you exercised your rights.

Third Party Agents

If you are submitting a request on someone else’s behalf, we may ask for additional verification. This may include a signed letter verifying your right to make this request. This may also include providing proof that you are registered with the Secretary of State to act on someone’s behalf or proof of a power of attorney.

Statement on Use of Automated Decision Making and AI Tools in Recruiting

We may use third-party service partners and a third-party which leverage artificial intelligence and machine learning technologies to process application data.

We may use a third party recruitment tool using these technologies to support our recruitment which will make an automated decision on the suitability of your application based on predefined criteria, helping us filter internal and external candidates for careers at Insight; for example, when applying for a technical cloud-based role, the tool will look for experience, job titles, tenure, and skills which match our requirements.

Candidates have the option to use a “Get Matched” function within the Tool. If you elect use that function you will be prompted to upload additional documents to the website. This includes your CV, certificates and/or a cover letter. An automated algorithm compares the documents you provide with current vacancies at Insight. This enables us to provide you with further career opportunities tailored to your candidate profile. Insight’s recruitment team will review the scores and profiles produced by the Tool when considering applications.

Our third-party service partners may also retain pseudonymized (de-personalized) information about candidates to assist with the development of their services, which may include further machine learning to improve their artificial intelligence models. If you do not want your personal data to be used for machine learning, you can submit your application by email.

Data Privacy Framework and Third-Country Data Transfers

Insight complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Insight has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Insight has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

The controlled U.S. subsidiaries of Insight, as identified in our self-certification submission, also adhere to the DPF Principles. Find below the list of Insight U.S. entities or subsidiaries adhering to the DPF Principles:

• Insight Enterprises, Inc.
• Insight North America, Inc.
• Insight Direct USA, Inc.
• SADA Systems, LLC
• Infocenter.IO, LLC

If you have a question or complaint related to participation by Insight in the DPF, we encourage you to contact us at compliance@insight.com or DPO@insight.com.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Insight commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you. In addition, in the context of our handling of human resources data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Insight commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints in the context of an employment relationship.

As further explained in the DPF Principles, binding arbitration is also available to address residual complaints not resolved by other means.

EU and UK individuals and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Insight at: compliance@insight.com or DPO@insight.com. Insight will endeavor to respond within 30 days. In the unlikely event that we fail to respond within 30 days, or if our response does not address your concern, Insight will undertake to refer the concern to our Global Compliance Officer who will investigate the matter and communicate with you within 14 days.

Information Collection From Children

Our sites and apps are meant for adults. We do not knowingly collect personal information from children. If you are a parent or legal guardian and think your child has given us information without your permission, you can email us and request that your child’s information be corrected or deleted. You can also write to us at the address listed at the end of this Policy. Please mark your inquiries "COPPA Information Request." Parents, you can learn more about how to protect children's privacy on-line here.

Third-Party Sites and Links

Our platforms may have links to third party sites or apps. If you click on a third-party link, you will be taken to platforms we do not control. This Privacy Policy does not apply to the privacy practices of those platforms. Read the other companies’ privacy policies carefully. We cannot be and are not responsible for these third parties.

Updates To This Privacy Policy

We may make updates to this Policy from time to time. We will notify you as required by law and will post the updated version on the sites where this appears. Please check back periodically for updates.

How To Contact Us

You can contact compliance@insight.com (for North America and APAC regions) or DPO@insight.com (for EMEA countries) with any questions about this Policy or our data practices. You may also contact our global data protection officer (DPO) at the following postal addresses:

• The Global Compliance Officer for North America and APAC regions
  • 2701 E. Insight Way
    Chandler, AZ
    85286 USA
• The DPO (Legal Department) for EMEA countries
  • 1st Floor - St. Paul's Place
    121 Norfolk Street
    Sheffield
    S1 2JF United Kingdom