Privacy Policy

Who we are

Inside the Decision Room is an independent editorial interview series published by Nikki Jarvis. For any privacy question, use the contact form, reply to any newsletter email, or reach us on LinkedIn (opens in a new tab).

Categories of personal information we collect

• Identifiers: email address, optional first name, and (for contact messages) organisation.
• Commercial / subscription data: your subscription status and a consent record — the wording you agreed to, the timestamp, and the page you subscribed from.
• Internet activity: standard server request data such as IP address, browser type and requested page, processed by our hosting provider for security and reliability.
• Content you send us: the message text in a contact or privacy request.
• Preferences: your cookie and privacy choices, stored locally in your browser.

We do not collect sensitive personal information for the purpose of inferring characteristics, we do not collect biometric or geolocation data, and we do not knowingly collect information from children under 16.

Where the information comes from

Directly from you, when you subscribe, send a message or submit a privacy request; and automatically from your device through standard server logs when you visit the site.

Why we use it and our legal basis

• To send the monthly newsletter — legal basis: your consent.
• To answer a message or a privacy request — legal basis: your request and our legal obligations.
• To keep a record that consent was given — legal basis: legal obligation and legitimate interests.
• To keep the site secure and operational — legal basis: legitimate interests.

We do not use your information for automated decision-making or profiling.

Categories of third parties we disclose to

We do not sell, rent, trade or share personal information for cross-context behavioural advertising. Information is disclosed only to service providers acting on our instructions, for a business purpose:

• Website and database hosting provider (site delivery, subscriber and message storage).
• Google Sheets, used as the editor's contact list for newsletter subscribers.
• Email delivery provider, where email is sent on our behalf.
• Legal or regulatory authorities, where we are required by law to disclose.

Interviews published on Substack, and anything you do on LinkedIn, are governed by those platforms' own privacy policies.

How long we keep it

• Subscriber records: for as long as you remain subscribed.
• Suppression records after unsubscribing: email and unsubscribe date only, kept so we do not email you again. You can ask us to delete this entirely.
• Contact and privacy request messages: up to 24 months after the matter is closed, then deleted.
• Server logs: retained by our hosting provider for a short security window, typically under 90 days.

California privacy rights

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information we collect and how it is used and disclosed, to request deletion, to request correction, to opt out of the sale or sharing of personal information, and to limit the use and disclosure of sensitive personal information.

In the preceding 12 months we collected the categories listed above, used them for the purposes listed above, and disclosed them only to the service providers listed above for a business purpose. We have not sold personal information and have not shared it for cross-context behavioural advertising, and we do not do so knowingly with respect to consumers under 16.

You may submit a request through Your Privacy Choices, or via the contact page. No account is required. We ask only for the information needed to verify the request — normally your name and the email address we hold — and we use it for nothing else. Authorised agents may submit requests with written permission. We aim to respond within 45 days and will tell you if we need more time. We will not discriminate against you for exercising any of these rights.

Global Privacy Control: if your browser or extension sends a GPC signal, we treat it as a valid opt-out of sale and sharing for that browser and will not ask you to opt back in.

Your rights elsewhere

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to withdraw consent at any time, and to data portability. To exercise any of these, contact us and we will respond within 30 days. You also have the right to complain to your local data protection authority.

To unsubscribe immediately, use the link in any newsletter email or the unsubscribe page.

Security and international transfers

Subscriber data is stored in a managed, access-controlled database. Only authenticated administrators can read subscriber records. Data may be processed on servers outside your country; where that happens we rely on our providers' standard contractual safeguards.

Cookies and tracking

No analytics or advertising technology is installed on this site, and nothing optional loads before you choose. The Cookie Policy lists every category and the full third-party inventory.

Changes

We may update this policy. Material changes will be reflected in the “last updated” date above and, where appropriate, announced in the newsletter.