Legal

Privacy Policy

This Privacy Policy describes how Imagine Works collects, uses, retains, and protects personal information when you visit imagine-works.com or engage our advisory services. Last updated 16 April 2026.

1. Who we are

Imagine Works is an advisory-first AI strategy, architecture, and governance practice based in India. We are the data controller for personal information collected through this website and through direct client engagements. Contact: info@imagine-works.com.

2. Information we collect

  • Contact form data: name, work email, phone, company, role, message — submitted voluntarily through the contact form.
  • Analytics data: pseudonymous identifiers, page views, referrer, device and browser metadata, country-level location — collected through Google Analytics 4 only after you consent.
  • Server logs: IP address (truncated where supported), request timestamps, status codes — retained for security and abuse prevention.
  • Engagement data: meeting notes, deliverables, contractual records — collected only during active client engagements.

3. How we use your information

  • To respond to enquiries you submit through our contact form.
  • To deliver advisory services under engagement letters or contracts.
  • To improve site content and user experience, using aggregated, anonymised analytics.
  • To meet legal, regulatory, and contractual obligations.

We do not sell, rent, or trade personal information to third parties. We do not use site visitor data for advertising or remarketing.

4. Legal bases (GDPR / UK GDPR)

For visitors and clients in the EU and UK, we rely on the following lawful bases: consent (analytics cookies and marketing communications), contract performance (delivering services you have engaged us for), legitimate interests (responding to business enquiries, securing the site), and legal obligation (record-keeping, taxation).

5. DPDP Act 2023 (India)

For data principals in India, we process personal data under the consent and legitimate-uses framework of the Digital Personal Data Protection Act 2023. You have the right to access, correct, complete, update, and erase your personal data, and to nominate another individual to exercise these rights in the event of incapacity. Contact us at info@imagine-works.com to exercise any of these rights.

6. Cookies and analytics

We use Google Analytics 4 and Google Tag Manager to understand site usage. These tools set first-party cookies and process pseudonymised data. We operate Google Consent Mode v2 — analytics and advertising signals default to denied until you accept on the cookie banner. Strictly necessary cookies (theme preference, consent state) are always set.

You can change or withdraw consent at any time by clearing the consent cookie in your browser and reloading the site.

7. Data sharing and processors

We use a limited number of vetted processors to operate the site and deliver services: hosting providers, email delivery services, analytics (Google), and document collaboration tools. Each processor is bound by data protection terms equivalent to those set out here.

8. International transfers

Personal data may be transferred to and processed in jurisdictions outside India and the EU, including the United States, where some of our processors are based. Where this happens, we rely on Standard Contractual Clauses or equivalent safeguards approved by the relevant regulator.

9. Retention

Contact-form submissions are retained for up to 24 months. Engagement records are retained for the duration of the contract plus seven years for tax and audit purposes. Analytics data is retained per Google Analytics 4 default of 14 months.

10. Your rights

Subject to applicable law, you may have rights to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. To exercise any right, email info@imagine-works.com from the address associated with the data. We respond within 30 days.

11. Security

We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorised access, disclosure, alteration, or destruction. No internet transmission is fully secure — we encourage you not to send sensitive personal information by unencrypted email.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be flagged on the homepage or by email to active clients. The "last updated" date at the top of this page reflects the most recent revision.

13. Contact

Questions or complaints about this policy? Contact us or write to info@imagine-works.com.