Privacy Policy — CORE Insights Group

The short version

We are a procurement firm, not an advertising business. We collect two kinds of information: what you deliberately hand us — a form, a conversation with CAI — and ordinary analytics about how the site gets used. We don’t sell any of it.

Analytics and visitor-tracking tools load by default. Click Decline on the cookie notice and they stop — on this visit and on every future visit from the same browser.
You can talk to CAI, our AI assistant, without accepting any cookies at all.
Anything you send us goes to the CORE team so a person can reply. It is not sold, rented or traded.
Want to see what we hold, correct it, or have it deleted? Email Interested@COREInsightsGroup.com and we’ll do it.

Who we are

This site, www.coreinsightsgroup.com, is operated by CORE Insights Group (“CORE”, “we”, “us”) — a managed-procurement and advisory firm serving hospitality, foodservice and recreation operators in the United States. This policy covers the website and the CAI assistant that runs on it.

Questions, requests or complaints go to a real person: Interested@COREInsightsGroup.com, or call 1.866.511.1411.

Information you give us

The contact form

The form on our contact page asks for your name, company, job title, what you do, phone number, email address, industry, what you’re interested in, whether you already work with a GPO, and your message. FormSubmit — a third-party form relay — delivers it to a CORE mailbox so a member of the team can reply. The enquiry then lives in our email and in our CRM.

The CLUB360 enrollment form

The form on the CLUB360 enrollment page is hosted by Zoho Creator and submits straight into CORE’s Zoho CRM. What you type there is handled by Zoho on our behalf, under Zoho’s terms as well as this policy.

Anything you tell CAI

Covered in its own section below, because it deserves one.

CAI, our AI assistant

CAI is the chat assistant that sits at the bottom of most pages. It answers questions about CORE and, if you’d like to speak to someone, takes your details. Here is exactly what happens when you use it.

CAI opens for everyone and sets no cookies. Its session identifier is held in your browser’s sessionStorage, which the browser clears when you close the tab.
Before CAI will talk to you it runs a Cloudflare Turnstile check — the standard “confirm you’re not a bot” test. It loads on every page that carries CAI, and Cloudflare receives your IP address and basic browser information in order to run it. It is what stops our chat assistant being drained by automated traffic.
Your messages are sent to CORE’s chat service, and to Anthropic, whose Claude models write CAI’s replies. Anthropic’s commercial terms state that inputs and outputs from its API are not used to train its models.
Transcripts are stored for 90 days and then deleted automatically. Stored with each one: timestamps, your IP address, the approximate city, region and country derived from it, and whether the conversation produced a lead.
If you give CAI your name and email address, that becomes a lead record in CORE’s Zoho CRM and an alert email to the CORE team, so someone can follow up. A copy of that conversation is saved to the CRM record so the person replying knows what you asked. That copy is kept under our CRM retention below, not the 90 days above — ask us and we will delete it.
Please don’t send CAI confidential business information, contract terms, payment details or anyone else’s personal data. It is a sales assistant, not a secure channel.

Information collected automatically

Like every website, this one is served by a host that keeps standard request logs — IP address, browser and device type, the page requested, and the time. Our host is Vercel. Those logs exist to run and secure the site.

Our typefaces are served by Google Fonts, so loading a page sends your IP address to Google even before any analytics run.

Cookies and tracking: exactly what runs here

Three analytics and tracking tools run on this site. None of them run on development or preview builds — only on the live site. One further third-party service, Cloudflare, loads on every page as part of CAI; it is described in the CAI section above and is not an analytics tool.

Google Analytics 4 (Google LLC) — aggregate usage: pages viewed, how visitors arrive, roughly where they are.
Zoho PageSense (Zoho Corporation) — how pages are actually used: scrolling, clicks, heatmaps, and occasional A/B tests.
Zoho SalesIQ (Zoho Corporation) — visitor tracking. It recognises a returning browser, infers the organisation an IP address belongs to where it can, and connects that to CORE’s CRM. Its chat button is switched off; only the tracking runs.

Each of these sets its own cookies under its own name. Their handling is governed by Google’s privacy policy and Zoho’s privacy policy.

Our consent model, stated plainly

Consent on this site is opt-out. Analytics and visitor tracking load by default, and the cookie notice appears so you can turn them off. Click Decline and we record that choice in your browser and load none of them — not on this visit, and not on any future visit from the same browser. Declining also switches off Google Analytics collection and tears down the SalesIQ connection on the page you’re already on.

What we keep in your browser

cig-cookie-consent — whether you accepted or declined. Without it we’d have to ask on every page.
cig-visitor — if you submit the contact form, your name, email, company and title are stored here so Zoho SalesIQ recognises you if you come back. The most recent submission replaces the previous one. It is not written if you have declined.
CAI’s session token — in sessionStorage, gone when you close the tab.
Cookies set directly by Google and Zoho under their own names.

How we use it

To answer you, and to come to the conversation already understanding your operation.
To run and improve the site — what people read, where they lose interest, what we should write next.
To keep the site working and secure, and to catch abuse.
To send you information you asked for. We do not run a marketing email list off this website.

How long we keep it

CAI transcripts — 90 days in the chat archive, then deleted automatically. The one exception is a conversation that produced a lead: a copy of it is attached to that CRM record and follows the line below.
Enquiries and leads — held in our email and CRM, including any attached chat transcript, for as long as we have a relationship or a reason to follow up. Ask us to delete yours and we will.
Analytics — held by Google and Zoho in aggregate form under their own retention settings.
Your consent choice — stays in your browser until you clear that browser’s data for this site.

Your choices and your rights

Turn tracking off — click Decline on the cookie notice. To change a choice you already made, clear this site’s data in your browser and the notice will come back.
Block it at the browser — every major browser can block or delete cookies. Google also publishes a Google Analytics opt-out add-on.
See it, correct it, delete it — email Interested@COREInsightsGroup.com and we will tell you what we hold about you, fix it, or delete it, once we are satisfied the request is genuinely yours.

Depending on where you live — California, Colorado, Connecticut, Virginia and a growing list of other states, or the UK and EU — you may have specific statutory rights over your personal data. We apply the rights above to anyone who asks, wherever you are. We will never charge you for exercising them, and we will never treat you differently because you did.

How a request actually works

Write to us at the address above and tell us what you want. Before we act, we have to be satisfied the request really comes from you — usually that means replying from the email address we already hold for you, or answering something only you would know. If we cannot establish that, we will not hand anything over: giving your information to somebody impersonating you is by far the worse mistake. Where someone is acting on your behalf, we will need reasonable proof that you authorised them.

We aim to answer quickly and will respond within 45 days at the latest, telling you if we need longer and why. We may decline a request that is clearly unfounded, or the same request repeated over and over. Anything genuine, we will simply do.

Security

Traffic to and from this site is encrypted in transit (HTTPS). Access to our CRM and to the CAI transcript store is limited to people at CORE who need it. No system is perfect, and we won’t pretend otherwise — which is precisely why CAI asks you not to send confidential information through a chat window.

Children

This is a business-to-business site. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.

Where your information is handled

CORE operates in the United States, and the service providers listed above process data in the United States. If you contact us from outside the US, your information will be transferred to and handled there.

Changes to this policy

If we add a tool, change what we collect, or change the consent model, we update this page and move the date at the top of it. We keep this policy in the same place as the code that runs the site, so the two stay in step.

Talk to a person

Email Interested@COREInsightsGroup.com or call 1.866.511.1411. Our Terms of Use cover the rest of what it means to use this site.