Legal Documentation

Privacy Policy

IMAVISSIO Ltd — Group Privacy Policy · Last updated: 1 July 2026 · Version 1.0

1. Who We Are

IMAVISSIO Ltd is the data controller responsible for all personal data collected across our product portfolio. We are an independent innovation group developing technology ventures across talent, enterprise, adaptive systems and next-generation infrastructures.

Formal Data Protection Officer (DPO) has not been appointed as IMAVISSIO Ltd does not currently meet the statutory requirement to do so under UK GDPR Article 37.

However, all data protection matters are handled centrally via the contact above.

Where required for EU-based users, IMAVISSIO Ltd may appoint an EU representative in accordance with Article 27 GDPR.

This policy covers all IMAVISSIO products and services:

Each product collects and processes data appropriate to its specific function. Where detail is specific to an individual product, it is provided within that product's own dedicated documentation (e.g. the VisioHire Job Search Privacy Policy and Terms of Service).

2. What Data We Collect

The personal data we collect depends on which product or service you interact with. Across the IMAVISSIO portfolio we may collect the following categories:

• Identity data: Full name, professional title, organisation name
• Contact data: Email address, telephone number (where provided)
• Professional data: Career history, professional preference enquiry details — collected via product-specific intake forms
• Research and interest data: Investment interest areas, technology registration preferences — collected via early access and interest registration forms
• Usage data: Service interaction patterns, feature engagement, dashboard usage — used to improve product performance
• Payment data: Subscription tier only — payment processing is handled by our third-party payment provider (Merchant of Record); IMAVISSIO Ltd does not store payment card details
• Technical data: IP address, browser type, device information — collected only where analytics consent has been provided

We collect only what is necessary for the specific product or service. Not all categories apply to every product.

3. How We Use Your Data

We process personal data only where we have a lawful basis under UK/EU GDPR. Our purposes and data categories across the product portfolio include:

• Service delivery (Contract): Operating the specific product or service you have subscribed to or engaged with
• Account and subscription management (Contract): Managing access, profiles, billing, and service continuity
• Communications (Contract / Legitimate Interest): Sending service-specific updates, digests, development progress reports, and support responses
• Interest and waitlist management (Consent): Notifying registered users of product launch milestones, early access availability, and development updates
• Product improvement (Legitimate Interest): Analysing usage patterns and feedback to improve system quality across the portfolio
• Legal compliance (Legal Obligation): Retaining records as required by applicable law

and:

• Identity and Contact Data: Contract / Legitimate Interest
• Professional / Research Data: Contract
• Usage Data: Legitimate Interest
• Technical Data (analytics): Consent
• Payment Metadata: Contract / Legal Obligation

4. Data Sharing

IMAVISSIO Ltd does not sell, rent, monetise, or trade personal data under any circumstances, including for advertising or data brokerage purposes. We do not share personal data with third parties for their own marketing purposes.

We engage the following service providers who process data on our behalf under appropriate data processing agreements:

• Third-party payment provider: Subscription payment processing and VAT management (Merchant of Record)
• Google Workspace / Apps Script / Drive: Operational infrastructure, workflow automation and data processing
• Cloudflare: Website delivery, security, performance optimization, and traffic protection services

All processors are contractually bound by GDPR-compliant data processing terms.

Some of the above providers may process data in the United States or other jurisdictions outside the UK/EU.

5. Data Retention

Retention periods are determined by product type and the nature of the data relationship:

• Active subscription products: Data retained throughout the subscription plus 90 days following cancellation, then permanently deleted
• Interest registrations and early access lists: Retained until consent is withdrawn, deletion is requested, or 24 months of inactivity
• Enquiry and contact data: Retained for 12 months from receipt unless a formal engagement commences
• Legal and financial records: Retained as required by applicable law (typically 6 years for UK incorporated entities)

You may request immediate deletion of any personal data at any time.

6. Data Security

We implement appropriate technical and organisational security measures across all products, including access controls, encrypted data environments, and regular security reviews. Data is not accessible to unauthorised parties.

6a. Data Breach Procedure

In the event of a personal data breach, IMAVISSIO Ltd will:

• Assess risk to affected individuals
• Notify the UK Information Commissioner’s Office (ICO) within 72 hours where required
• Notify affected users without undue delay where there is a high risk to their rights and freedoms

We maintain internal procedures for breach detection, investigation, and reporting.

7. Your Rights (UK/EU GDPR)

In relation to personal data we hold about you, you have the right to:

• Access: Request a copy of data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request permanent deletion of your personal data
• Restriction: Request limitation on how your data is processed
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing carried out on the basis of legitimate interests
• Withdraw consent: Where processing is consent-based, withdraw at any time without affecting the lawfulness of prior processing

To exercise any right, contact: Legal & Privacy→
We respond within 30 days. You also have the right to complain to a supervisory authority:

• UK: Information Commissioner's Office — ico.org.uk
• EU: Your relevant national Data Protection Authority

7a. Automated Decision-Making and Profiling

Certain IMAVISSIO products use automated processing and profiling techniques to generate personalised outputs, such as job match scoring or investment signal analysis.

These processes do not produce legal or similarly significant effects on users. They are designed to support decision-making, not replace it. You have the right to:

• Request human review of any automated output
• Object to profiling where applicable
• Request explanation of how outputs are generated

8. Cookies

IMAVISSIO websites use cookies for essential functionality and, where you have consented, for anonymised analytics. A cookie consent banner is presented on first visit and consent can be withdrawn at any time via browser settings or by contacting us.

• Essential cookies: Required for core site and product functionality — cannot be disabled
• Analytics cookies (consent only): Anonymised usage data via Google Analytics 4

9. International Data Transfers

Some service providers may process data outside the UK or EU. Where this occurs, we ensure appropriate transfer safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms approved under UK/EU GDPR.

10. Minimum Age

IMAVISSIO products and services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor's data has been submitted to us, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our products, services, or legal obligations. Material changes will be communicated to active users by email with reasonable notice. The current version is always available at this URL. Continued use of any IMAVISSIO product following notification of changes constitutes acceptance of the updated policy.

12. Contact

IMAVISSIO Ltd
Registered in England and Wales · Company No. 14396770
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Data protection enquiries: Legal & Privacy→
Business enquiries: Marketing & Sales→