Privacy Notice

This Privacy Notice explains how IMD GLOBAL UK LIMITED ("IMD", "we", "us", "our") collects and uses personal data when you visit imdglobaluk.com or contact us.

IMD GLOBAL UK LIMITED is a company registered in England and Wales under company number 16349894. Our registered office is c/o 536 Lordship Lane, Wood Green, London N22 5BY, United Kingdom.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, IMD GLOBAL UK LIMITED is the controller of the personal data described in this notice.

You can contact us about this notice or your personal data at info@imdglobaluk.com.

This notice applies to personal data we process through this website and through enquiries you send to us by email or through our enquiry form. It does not apply to other websites, including those we link to, which have their own privacy notices.

Enquiries. When you contact us through our enquiry form or by email, we collect the information you provide. Through the form this is your full name, professional email address, organisation (optional), country or region (optional), enquiry category and message. By email, it is your name, email address and anything you choose to include in your message.

Security check data. When you use our enquiry form, a security check provided by Cloudflare Turnstile runs on the Contact page to confirm that the form is being used by a person and not an automated program. To do this, Cloudflare processes technical signals such as your IP address, browser and device information (including the user agent) and connection characteristics. We do not receive these signals ourselves; we only receive a pass or fail result.

Technical data. When you visit our website, our hosting provider automatically records limited technical information needed to deliver and protect the website, such as your IP address, browser type, device information, the pages requested and the date and time of the request.

We do not use analytics, advertising or tracking technologies on this website. Please see our Cookie Policy for more information.

We do not ask for, and ask you not to send us, special category data (for example, information about health) through the enquiry form or by email.

Where we rely on legitimate interests, we have considered that these interests are not overridden by your rights and freedoms. You can ask us for more information about this assessment.

We do not use your personal data for marketing unless you have asked us to, and we do not use automated decision-making or profiling.

We share personal data only where necessary, with:

• Service providers acting on our instructions. These are Vercel Inc. (website hosting), Google (business email, through Google Workspace), Resend (delivery of enquiry form messages to our inbox, using servers in the European Union) and Cloudflare, Inc. (the Turnstile security check on our enquiry form). They may use your data only to provide their services to us.
• Cloudflare as an independent controller. Cloudflare also uses Turnstile signals to improve its bot detection, as an independent controller. This is described in Cloudflare's Turnstile Privacy Addendum (cloudflare.com/turnstile-privacy-policy).
• Professional advisers, such as lawyers and accountants, where needed for the purposes described in this notice.
• Authorities, regulators or courts, where we are required to do so by law.
• A successor business, if IMD's business or assets are reorganised or transferred, subject to appropriate confidentiality.

We do not sell your personal data.

Some of our service providers are based in, or process data in, countries outside the United Kingdom, including the United States. Where personal data is transferred outside the UK, we ensure it is protected by appropriate safeguards recognised under UK data protection law, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the recipient is certified) or the International Data Transfer Agreement or Addendum issued by the Information Commissioner's Office. You can contact us for more information about these safeguards.

• Enquiries: we keep enquiry data for up to 24 months after our last contact with you, unless a business relationship develops, in which case we keep it for as long as needed for that relationship and any related legal or accounting obligations.
• Enquiry form delivery records: kept by Resend for a limited period in line with its retention practices, so that we can confirm messages were delivered.
• Security check data: processed by Cloudflare in line with its Turnstile Privacy Addendum. We do not store these signals.
• Technical data: kept by our hosting provider for a limited period in line with its log retention practices, generally no longer than needed for security and operational purposes.

When personal data is no longer needed, we delete it or anonymise it securely.

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. These include encrypted connections to our website (HTTPS), access controls on our email and business systems, and limiting access to people who need it. No method of transmission over the internet is completely secure, but we work to protect your personal data.

Under UK data protection law you have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request erasure of your personal data;
• request restriction of processing;
• object to processing based on our legitimate interests;
• request transfer of personal data you have provided to us (data portability), where applicable.

To exercise any of these rights, please email info@imdglobaluk.com. We may ask you to confirm your identity. We will respond within one month, which may be extended in certain circumstances as permitted by law. There is usually no charge.

If you have concerns about how we handle your personal data, please contact us first at info@imdglobaluk.com so that we can try to resolve them.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk (external website, opens in a new tab) or 0303 123 1113.

Our website contains links to other websites and services, including EXODIAMOND (exodiamond.com), Instagram and WhatsApp. These links are provided for convenience and do not load content from those services until you choose to follow them. Once you leave our website, the privacy notice of the website you visit applies.

Our website and services are intended for businesses and professionals. They are not directed at children, and we do not knowingly collect personal data from anyone under 18.

We may update this Privacy Notice from time to time. The latest version will always be available on this page, with the date it was last updated.