Privacy Policy

1. Scope & who we are

Ibex Insights is a higher education data, analytics, and digital strategy consultancy based in the United States. We are the controller responsible for the personal information described in this policy. You can reach us any time at team@ibexinsights.co.

This policy applies to our website and the data tool at ibexinsights.co, our email communications, and the forms we run on platforms such as LinkedIn. It does not apply to third-party websites or services that we link to but do not control. Our free public data tool presents aggregate institution-level statistics drawn from public government sources; it does not collect personal information about individual students.

2. Information we collect

We collect information in three ways:

a. Information you give us directly

• Contact and inquiry details you submit through a form, a LinkedIn Lead Gen Form, or by email, such as your name, work email address, phone number, job title, organization, and the content of your message.
• Any details you choose to include when you request a brief, a custom dashboard, or other services.

b. Information collected automatically

• Usage and device data such as your IP address, browser type, operating system, referring page, pages viewed, and the date and time of your visit.
• Cookies and similar technologies, including analytics and advertising identifiers. See Cookies & tracking technologies below.
• Standard server logs maintained by our hosting provider for security and reliability.

c. Information from third parties

• When you submit a LinkedIn Lead Gen Form, LinkedIn shares with us the profile fields you authorize, which may include your name, professional email, job title, and company.
• Analytics and advertising partners (for example Google and LinkedIn) provide aggregated or pseudonymous data about how visitors reach and use our site.

3. LinkedIn Lead Gen Forms

We run advertising on LinkedIn that may include a Lead Gen Form. When you choose to submit one, LinkedIn passes us the profile information you confirm, such as your name, work email, job title, and organization. We use that information to respond to your request, send you the resource you asked for, and tell you about Ibex Insights services that may be relevant to your institution.

LinkedIn's own handling of your data is governed by the LinkedIn Privacy Policy. You can withdraw your consent and ask us to delete the information you submitted at any time by emailing team@ibexinsights.co.

4. Cookies & tracking technologies

We and our partners use cookies, tags, pixels, and similar technologies to operate the site, understand traffic, and measure advertising. The main technologies we use are:

• Google Tag Manager and Google Analytics. We use Google Tag Manager to manage tags and Google Analytics to understand how visitors use the site. Google may set cookies that collect usage and device data. See the Google Privacy Policy.
• LinkedIn Insight Tag. We use the LinkedIn Insight Tag to measure the performance of our LinkedIn advertising and to enable conversion tracking and audience features. LinkedIn may set cookies and collect pseudonymous browsing data. See the LinkedIn Privacy Policy and its Insight Tag information.
• Strictly necessary cookies and local storage. A small amount of browser storage is used to remember your preferences and keep the site working.

Your choices. Most browsers let you block or delete cookies through their settings. You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on, and you can manage LinkedIn ad and tracking preferences in your LinkedIn account settings. You can also use industry opt-out tools such as the DAA and Your Online Choices (EU).

Blocking some cookies may affect how the site functions, but core content and the data tool will remain available.

5. How we use your information

• To respond to your inquiries and provide the resources, briefs, dashboards, or services you request.
• To communicate with you about Ibex Insights products and services that may be relevant to your institution. You can opt out of marketing at any time.
• To operate, maintain, secure, and improve our website and data tool.
• To measure and improve the performance of our content and advertising.
• To comply with legal obligations and to establish, exercise, or defend legal claims.

6. Legal bases for processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases:

• Consent, for non-essential cookies, advertising technologies, and marketing communications. You may withdraw consent at any time.
• Legitimate interests, to operate and secure our site, understand how it is used, and contact organizations about relevant services, balanced against your rights.
• Performance of a contract or steps taken at your request, when we respond to an inquiry or deliver a service you asked for.
• Legal obligation, where processing is required to comply with applicable law.

7. How we share information

We do not sell your personal information. We share it only in these limited circumstances:

• Service providers who process data on our behalf under contract, such as our website host (Netlify), analytics and advertising platforms (Google, LinkedIn), and email or CRM tools. They may use the data only to provide services to us.
• Legal and safety, when required to comply with law, enforce our terms, or protect the rights, property, or safety of Ibex Insights, our users, or the public.
• Business transfers, in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy.

8. Data retention

We keep personal information only as long as needed for the purposes described in this policy, including to respond to you, provide services, and meet our legal, accounting, and business requirements. We then delete or de-identify it. You may ask us to delete your information sooner, as described below.

9. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information.
• Restrict or object to certain processing.
• Request a portable copy of the information you provided.
• Withdraw consent at any time, without affecting processing already carried out.
• Lodge a complaint with your data protection authority. In the EEA or UK you may contact your local supervisory authority.

To exercise any of these rights, email team@ibexinsights.co. We will respond within the time required by applicable law and may need to verify your identity first. You can unsubscribe from marketing email at any time using the link in any message.

10. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and share it, to request access to and deletion of that information, to correct inaccurate information, and to not be discriminated against for exercising your rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising in exchange for money. Some use of advertising cookies may be considered a "sale" or "sharing" under California law; you can opt out by adjusting your browser and the cookie controls described in Section 4, or by emailing us. To submit a California rights request, contact team@ibexinsights.co. You may use an authorized agent to make a request on your behalf.

11. International data transfers

Ibex Insights operates in the United States, and our service providers may process data there and in other countries. If you access our site from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for these transfers.

12. Data security

We use reasonable technical and organizational measures to protect personal information against loss, misuse, and unauthorized access, including encryption in transit (HTTPS) and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Children's privacy

Our website and services are intended for institutions and professionals, not for children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.

14. Third-party links

Our site may link to third-party websites and services we do not control. This policy does not apply to those sites. We encourage you to review the privacy policy of any third-party site you visit.

15. Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is no common industry standard for how to respond, our site does not currently respond to Do Not Track signals. We do honor recognized opt-out preference signals where required by law, and you can use the cookie controls described in Section 4.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be made clear on this page. Your continued use of our site after an update means you accept the revised policy.

17. Contact us

If you have questions about this policy or how we handle your information, or to exercise any of your privacy rights, contact us at: