01
Privacy Policy
how we treat your data.Data controller and owner
Imaginarium (India) Private Limited (hereinafter referred to as “We,” “Us”, “Our”) owns and manages website www.imaginarium.io and its other digital platforms and applications.
Email: legal@imaginarium.io
Phone: 0091 22 6738 0100
Introduction
This privacy policy informs you, in detail, regardless of your status (internet user, customer, prospect, partner, supplier, or candidate) (“you”), about how we collect and process your personal data. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. This Privacy Policy applies to all who are accessing or using our website, or otherwise engaging with us through email or other means. By accessing or using our website or by otherwise giving us your information, you confirm that you have read and understood and agreed to the practices outlined in this Privacy Policy.
Types of data collected
- We collect your information either directly from you or through offline documentation and/or the Website. We may also collect information when you visit any of our offices to enquire about or avail our Services. You agree and acknowledge that such information is collected and processed for fulfilling purposes mentioned below and Consent to Our collection thereof.
- We may collect information about you from Third parties such as service providers to provide relevant services, offers and marketing services and the same would be used and processed with your Consent only. We, including our service providers may monitor, record and retain your conversation and/or electronic communication between you and us or otherwise as deemed approved.
Data collected through this website
Specifically, this website collects personal data only when you voluntarily provide it through one of the following:
- Contact / inquiry form · your name, company, email address, phone number, project details, and any CAD or design files you choose to upload. If you request a mutual NDA, the company details you enter (legal entity name, registration number, registered address, signatory) are used solely to prepare the NDA document.
- Gated downloads · before releasing certain documents (for example material datasheets or company profiles), we ask for your name, email address and company. We also record which documents you download and from which page, so that we can follow up meaningfully.
- Newsletter sign-up · your email address.
This data is transmitted over an encrypted connection (HTTPS) and stored with our processing providers: our hosting provider (Vercel Inc.), our workflow provider (Make / make.com) and Google Workspace (Google Sheets and Google Drive), where it is accessible only to authorised Imaginarium staff. Uploaded files, including CAD files and generated NDA documents, are stored under access-restricted links and are treated as confidential. We use this information to respond to your inquiry, prepare quotations and NDAs, and, where you have opted in, to send you updates. It is not sold or shared for third-party marketing.
Mode and place of processing the data
The Data Controller processes the Data of Users in a proper manner and shall take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Data Controller at any time.
Place
The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved with the processing are located. For further information, please contact the Data Controller.
Retention time
Your personal data is processed and retained securely for no longer than is necessary for the purposes for which the personal data was collected or unless required as per the applicable laws. At the expiry of such periods, your personal data will be deleted or archived to comply with legal retention obligations or in accordance with applicable statutory limitation periods.
The use of the collected data
The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes:
- Providing products and services;
- Monitoring and improving our website and its content;
- Conducting market research and surveys with the aim of improving our products and services;
- Sending you information about our products and services for marketing purposes and promotions, for which appropriate Consent is taken;
- Surveillance of premises (video recording);
- To process your requests (such as replying to your queries);
- Establishing, exercising, or defending legal rights in connection with legal proceedings (including any prospective legal proceedings) and seeking professional or legal advice in relation to such legal proceedings;
- Complying with applicable local or foreign law, regulation, policy, voluntary codes, directive, judgement, or court order, as well as any contractual obligation pursuant to agreements between Us and any authority, regulator or enforcement agency or body or any request coming from said entities;
- We may track your user behaviour, preferences, and other information that you choose to provide on our website. We use this information to do internal research on our users’ demographics, interests, and behaviour to better understand, protect and serve our users. This information is compiled and analysed on an aggregated basis. This information may include the URL that you just came from (whether this URL is on our website or not), which URL you next go to (whether this URL is on our website or not), your computer browser information, and your IP address;
- We may collect personal data (such as name, email address, phone number, organisation details, designation, mailing address, location, etc.) from you when you fill any forms on our website or register with us for any events.
Retention of personal information
Your personal data is processed and retained securely for no longer than is necessary for the purposes for which the personal data was collected or unless required as per the applicable laws. At the expiry of such periods, your personal data will be deleted or archived to comply with legal retention obligations or in accordance with applicable statutory limitation periods.
The rights of users
Users have the right, at any time, to know whether their Personal Data has been stored and can consult the Data Controller to learn about their contents and origin, to verify their accuracy or to ask for them to be supplemented, cancelled, updated or corrected, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons. Requests should be sent to the Data Controller at the contact information set out above.
This website does not support “Do Not Track” requests. To determine whether any of the third party services it uses honor the “Do Not Track” requests, please read their privacy policies.
Consent
By using our site, you agree that the terms set out in this privacy policy are reasonable.
Disclosure of your information
We do not sell, trade, rent, license, or otherwise transfer your personal information to one or more third parties. This does not include trusted third parties who assist us in operating our website, managing our business, or providing services to you. These third parties are not authorised to use your personal data for purposes other than those authorised by us.
The categories of recipients who may have access to your data include:
- Employees of the Company and companies within our group that provide us with services.
- Service providers who provide IT and system administration services.
- Professional advisors, including lawyers, bankers, auditors, and insurers.
- If necessary, relevant authorities, mediators, accountants, auditors, bailiffs, debt collection agencies, government bodies.
- Third parties who may place cookies on your devices with your consent (for more details, see the Cookie Policy below).
Social media
We operate channels, pages, and accounts on some social media sites to inform, assist and engage with employees, vendors, clients/customers, and the public at large. We monitor and record comments and posts made on these channels about us in order to improve its products and services.
It is advisable to use official and authorized channels only for communication purposes.
Data security
The security and confidentiality of your Personal Data is important to us, and we have invested significant resources to safeguard your personal information. When using external service providers acting as processors, we require that they adhere to substantially similar standards of confidentiality and security as ours. Regardless of where your personal information is transferred or stored, we take all steps reasonably necessary to ensure that personal data is kept secure.
The data that we collect from you will be transferred to and stored in India by us.
Changes to our privacy policy
Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.
Definitions and legal references
- Personal Data (or Data)
- Means any data about an individual who is identifiable by or in relation to such data.
- Personal Data Breach
- Means any unauthorised processing of personal data or accidental disclosure, acquisition, sharing, use, alteration, destruction or loss of access to personal data that compromises the confidentiality, integrity or availability of personal data.
- Specified Purpose
- Means the purpose mentioned in the notice given by the Data Fiduciary to the Data Principal in accordance with the provisions of this Act and the rules made thereunder.
- Usage Data
- Information collected automatically from this Application (or third party services employed in this Application), which can include: the IP addresses or domain names of the computers utilized by the Users who use this Application, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User’s IT environment.
- User
- The individual using this Website, which must coincide with or be authorized by the Data Subject, to whom the Personal Data refers.
- Data Subject
- Means a representation of information, facts, concepts, opinions or instructions in a manner suitable for communication, interpretation or processing by human beings or by automated means.
- Data Processor (or Data Supervisor)
- Means any person who processes personal data on behalf of a Data Fiduciary.
- Data Controller (or Owner)
- The natural person, legal person, public administration or any other body, association or organization with the right, also jointly with another Data Controller, to make decisions regarding the purposes, and the methods of processing of Personal Data and the means used, including the security measures concerning the operation and use of this Application. The Data Controller, unless otherwise specified, is the Owner of this Application.
- Data Fiduciary
- Means any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data.
- Data Principal
- Means the individual to whom the personal data relates and where such individual is: (i) a child, includes the parents or lawful guardian of such a child; (ii) a person with disability, includes her lawful guardian, acting on her behalf.
- Consent Manager
- Means a person registered with the Board, who acts as a single point of contact to enable a Data Principal to give, manage, review and withdraw her consent through an accessible, transparent and interoperable platform.
- This Application/Website
- The hardware or software tool by which the Personal Data of the User is collected.
- Cookies
- We use cookies and similar technologies to analyse and understand how you access, use, and interact with our website and our consumer’s preferences (such as country and language choices), as well as to assess, secure, protect, optimize, and improve the performance of our website. To know more on our use of cookies, please refer to our cookie policy.