Privacy Policy

1. Who we are

Insera Labs Pty Ltd (ABN 92 687 784 247) (“Insera Labs”, “we”, “us”) is a pharmacy automation hardware company based in Sydney, NSW, Australia. This policy covers the information we handle through this website, our contact, reservation, and pilot enquiry forms, and the Insera Inventory client dashboard.

2. Information we collect

We only collect what we need to respond to you and run our pilot and preorder programs:

• Contact details and what you tell us — name, email, phone, organization or pharmacy name, and the content of any message or note you write to us — when you submit an enquiry, request a demo, reserve a machine, or apply for a role.
• Reservation details — if you reserve a machine, the number of machines you want and your rough weekly DAA pack volume.
• Pilot & operational data — for pilot pharmacies, machine activity such as packs processed, uptime, and stock counts generated by your deblistering machine and surfaced in Insera Inventory.
• Technical data — standard log information (IP address, browser type, pages visited) collected automatically to keep the site secure and working.

We do not collect patient health records. Insera Inventory tracks medication stock at the product level, not individual patient information.

3. How we use it

• To respond to your enquiries and arrange demos or pilot installs.
• To process machine reservations and preorders — including sending you a quote or invoice, confirming payment, and keeping the records we're required to keep about a sale.
• To operate, support, and improve our machines and the Insera Inventory dashboard.
• To assess job applications and communicate with candidates.
• To meet our legal, safety, and record-keeping obligations.

We only use your details to reply and to deliver what you asked for. We do not sell your personal information, and we do not add you to marketing lists without your consent.

4. Sharing & disclosure

We share personal information only with trusted service providers who help us run the business — such as email, hosting, and analytics providers — and only as needed to deliver those services. We may disclose information where required by law. We do not disclose your information overseas except through standard cloud service providers acting on our instructions.

5. Data security & retention

We take reasonable technical and organizational steps to protect your information against loss, misuse, and unauthorized access. Client dashboard access is restricted to accounts we provision. We keep personal information only as long as we need it for the purposes above, or as required by law, and then securely delete or de-identify it.

6. Cookies & analytics

When you first visit, we ask which kinds of cookies you allow. You can accept them all, refuse them all, or choose per purpose. Nothing optional is set until you say yes, and refusing changes nothing about how the site works.

One thing runs without asking, and it is the one thing that stores nothing. We count page views through Vercel Web Analytics, which sets no cookie and saves nothing to your device — so there is no storage on your computer or phone for us to ask permission for. It records the page you opened, the site you arrived from, and rough details of your device and country. It also counts when one of our main buttons or links is clicked — which button, and which part of the page it was in, and nothing else. We use that to work out which of the things we offer people actually want; it tells us nothing about you, and it is not tied to anything you have sent us. To tell one visit from another within a day, Vercel converts your IP address and browser type into a scrambled value that cannot be turned back into either, discards the originals, and starts over the next day. There is nothing to switch off, because nothing is kept: we cannot recognise you tomorrow, we cannot tell that two visits were the same person, and we cannot follow you to any other website. If you would rather not be counted at all, a tracker-blocking extension will stop it, and the site works normally without it.

Necessary — always on. One cookie, il_consent, records the choice you made here so we don't ask again. It holds only the list of purposes you allowed, and expires after 12 months. This is the one cookie you cannot switch off, because without it we would have to ask on every page.

Analytics cookie — off unless you allow it. This is the one the banner asks about, and it is separate from the cookieless counting described above. It sets il_vid, which holds a randomly generated identifier (for example 9f2c8a41-6b3e-4d5a-9c17-2e8f0b4a7d31) and nothing else. We use it to keep you on a consistent version of a page while we are testing a change, to tell whether that change actually improved anything, and when working out which pages and sections of the site are switched on for you. It is not linked to your name, email, or any enquiry you send us, and we do not use it to build a profile or follow you across other websites. Expires after 12 months. We process this through Statsig, acting on our instructions.

If you decline, we still need to know which parts of the site are switched on — we just work it out without any identifier for you, using a single shared value that is the same for every visitor and stored nowhere.

Marketing — off unless you allow it. Would let us measure whether our advertising reaches the right people. We do not currently run any marketing cookies; if that changes, this policy will be updated before any are set.

Embedded content — off unless you allow it. Would let embedded video, maps and booking tools load, which sets cookies belonging to those providers. No such embeds currently run on this site; if we add one, it will appear as a placeholder you can click to load.

You can change your mind at any time: use the Cookie preferences link in the footer, which clears everything and asks again, or clear cookies through your browser settings, which has the same effect. Withdrawing analytics deletes the identifier — if you later allow it again, a new one is generated, and the old one is not recoverable.

All cookies we set ourselves are first-party: read by our servers alone, never sent to an advertising network, and not readable by JavaScript running in your browser.

7. Your rights

Under the Australian Privacy Principles you can ask us to access or correct the personal information we hold about you, and you can ask us to stop contacting you. To make a request — or to raise a privacy concern — email info@inseralabs.com and we'll respond within a reasonable timeframe.

8. Changes to this policy

We may update this policy as our products and obligations evolve. When we do, we'll revise the “last updated” date above. Material changes will be highlighted on this page.