INSIDER

Privacy Policy

Privacy Policy · INSIDER

Last updated: 5 October 2026

1. Introduction

INSIDER (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of our users (“you,” “your”). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you visit insaiders.com, join our community, including LEGEND by INSIDER, or interact with our services.

This Policy is prepared in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) of the United Arab Emirates and its implementing regulations.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

INSIDER is operated by Bliss Pass Portal (operating license), which acts as the data controller for your personal data across all INSIDER services, including content, community, communications, products, paid memberships, and online sales.

Bliss Pass Portal is licensed in Dubai, the United Arab Emirates.

Contact for privacy matters:
Email: blisspassbyr@gmail.com

3. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity and contact data: first name, last name, email address, WhatsApp number, and company name.
  • Account data: username and password (stored in encrypted form) when you create an INSIDER account.
  • Membership track: whether you joined through INSIDER or through LEGEND by INSIDER, so that we send you the right welcome and the content made for you.
  • Professional data: your role in the diamond and jewelry industry, your AI experience level, and your stated interests and goals. From the answers you give, we also record an internal classification of your AI experience, which we use to decide what reaches you. This classification is never shown to you or to anyone else, and it has no effect on your access, your rights, or any price.
  • Transaction data: details of products or paid memberships you purchase. Payment card details are processed directly by our payment provider and are not stored by us.
  • Content you provide: questions, messages, and any text you enter into INSIDER forms or tools.
  • Card data (INSIDER QR tool): the details you type into the QR tool, such as your name, title, company, phone and WhatsApp numbers, email, website, address, social profiles, where you met, a link you choose, and a logo you upload. These are processed in your own browser to draw your code and card, and they are not sent to us unless you choose to save your card. If you save it, we store these details and your logo with your INSIDER account so you can edit your card later.
  • VITRINE data (members): the details you add to your VITRINE, such as your name, company, role, a short line about you, city and country, time zone, business hours, languages, the links you choose to show, the shows and events you attend, your memberships, a photo or logo you upload, your design choices, and the address you pick. We also record your choices on the INSIDER directory and on INSIDER updates, with the date and time you made them. You need an INSIDER account to claim a VITRINE address. While you build your VITRINE before registering, your work is kept only in your own browser.
  • VITRINE visit data (visitors): when someone opens a VITRINE, we count the visit and the links they click, without cookies and without storing their IP address. To stop abuse, we briefly use a scrambled form of the IP address, which is discarded within a day and never stored with the visit. Only if the visitor selects “Allow analytics” do we also record the website that referred them, campaign details in the link they followed, their device type, browser language, time zone region, country where our hosting provides it, time spent and how far they scrolled, linked to a random session number that ends when they close the tab. We do not collect a visitor’s name, email or phone number. A member’s own visits to their VITRINE are not counted.
  • Where We Meet: the industry shows and events you mark, the city you are based in, and the visibility you choose for each event. Only signed-in members can see who is going, and only members who chose to be visible are named. If you suggest an event, we receive the details you send with your name and email, which are never shown on the site.
  • Technical data: IP address, browser type, device information, and usage data collected automatically through cookies and similar technologies, including Google Analytics.
  • Communications data: any messages or content you send to us, including via WhatsApp where you choose to join our community group.
  • Consent record: when you tick the consent box on a form, we record the exact wording you agreed to and the date and time you agreed to it. We keep this as proof of your consent and so that we can tell you what you agreed to if you ask.

We do not intentionally collect sensitive personal data (such as data revealing racial or ethnic origin, religious beliefs, or health data). Please do not submit such data to us.

4. Legal Basis for Processing

In line with Article 4 of the PDPL, we process your personal data on one or more of the following legal bases:

  • Your consent, which you provide when you submit our forms or join our community;
  • Performance of a contract or service you have requested;
  • Compliance with a legal obligation;
  • Our legitimate interests, where these are not overridden by your rights and freedoms.

You may withdraw your consent at any time (see Section 9).

5. How We Use Your Personal Data

We use your personal data to:

  • Provide access to the INSIDER community and curated content;
  • Save your INSIDER card when you ask us to, and let you edit it later;
  • Publish your VITRINE at the address you chose, let you change it at any time, and show you how many people visited and which links they used;
  • Communicate with you about INSIDER updates, intelligence, and relevant offerings;
  • Personalize and improve our services based on your role and stated interests;
  • Operate, secure, and improve our website;
  • Comply with applicable laws and regulations.

With your consent, we contact you by email and WhatsApp with updates, tools, and launches. You can opt out at any time by using the unsubscribe link in any email, replying STOP on WhatsApp, or contacting us.

6. Disclosure of Personal Data

We may share your personal data with:

  • Service providers and processors who support our operations (e.g., hosting, email, and form providers), including Google Workspace, where a copy of your registration details is kept in a private spreadsheet with restricted access, under appropriate contractual safeguards;
  • Analytics and payment providers, such as Google (Google Analytics) and our payment processor, which process data on our behalf;
  • Third-party platforms you choose to use in connection with our services (e.g., WhatsApp, subject to that platform’s own privacy policy);
  • Competent authorities, where required by UAE law or legal process.

We do not sell your personal data.

INSIDER tools help you create prompts. INSIDER does not send your prompts or content to any AI provider. If you choose to use a prompt in a third-party AI tool (such as ChatGPT, Claude, or Gemini), you do so directly, and that provider’s own privacy policy applies to what you share with it.

When you use the Share buttons in the INSIDER QR tool, your card or details are handed to the app you choose, such as WhatsApp, email, LinkedIn, Facebook, X or Instagram. We do not send them ourselves, and that platform’s own privacy policy applies. Anyone who scans your code receives the details you chose to put in it.

Your VITRINE is public by design. Everything you add to it can be seen by anyone who opens your address, and it is written in a format that search engines and AI tools can read, so that they describe you the way you describe yourself. Please add only what you are happy for anyone to see. If you choose to be listed in the INSIDER directory, other members can find you by role and city.

VITRINE and Where We Meet pages load typefaces from Google Fonts. When a page loads, Google receives the visitor’s IP address in order to deliver the typeface, under Google’s own privacy policy. We do not send Google any other VITRINE data.

7. Cross-Border Transfers of Data

Some of our service providers may be located outside the UAE. Where we transfer your personal data abroad, we do so in accordance with Articles 22 and 23 of the PDPL, ensuring that the receiving country provides an adequate level of protection or, where it does not, that appropriate safeguards (such as contractual clauses) or a valid exception (such as your explicit consent) are in place.

8. Data Retention

We keep account and community data for as long as your account is active and for up to 12 months after you close it or ask us to delete it. Saved INSIDER cards are kept while your account is active and are deleted together with your account. You can also delete your saved card yourself at any time, from the QR tool. Transaction records are kept for the period required by UAE commercial and tax law. Analytics data is kept in line with Google Analytics retention settings. When no longer needed, your data is securely deleted or anonymized.

Your VITRINE, your uploaded photo or logo and its visit data are kept while your account is active and are deleted together with your account. You can also take your VITRINE offline yourself at any time. VITRINE visit data is deleted automatically after 400 days.

Your Where We Meet marks, including marks on past events, are kept while your account is active and are deleted together with your account. The name and email on an event suggestion are deleted within 180 days.

9. Your Rights

Under the PDPL, you have the right to:

  • Access your personal data and request information about how it is processed;
  • Request correction of inaccurate or incomplete data;
  • Request deletion of your personal data;
  • Restrict or stop processing in certain circumstances;
  • Object to processing, including for direct marketing;
  • Object to automated decisions, including profiling, that produce legal or similarly significant effects on you;
  • Request data portability in a structured, machine-readable format;
  • Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at blisspassbyr@gmail.com. We will respond within the timeframes required by law.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure, as required under Article 20 of the PDPL. In the event of a data breach that poses a risk to your privacy, we will notify the UAE Data Office and affected individuals as required by law.

11. Cookies

Our website uses essential cookies to operate the site and analytics cookies (Google Analytics) to understand how the site is used.

We also set one first-party cookie of our own, named insider_src. It records where you arrived from, either the campaign details in the link you followed or the website that referred you, so that we know which of our channels brought you here. It holds no name, email, or phone number, it is not shared with anyone, and it expires after 30 days. If you register, the value is saved once against your member record as the source of your registration.

VITRINE sets no cookies. It uses your browser’s own storage for two things only: remembering whether you allowed analytics on a VITRINE, and keeping your work while you build a VITRINE before you register. This stays in your browser, and you can clear it through your browser settings at any time.

You can block or delete cookies through your browser settings. Blocking essential cookies may affect how the site works.

12. Children’s Privacy

Our services are intended for professionals in the diamond and jewelry industry and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when the latest changes were made. We encourage you to review this Policy periodically.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, or wish to file a complaint, please contact us at:

  • Email: blisspassbyr@gmail.com

You also have the right to lodge a complaint with the UAE Data Office.

The quiet group