Legal
Privacy policy
This privacy policy explains how IMH Group, Inc. processes personal data on imh-group.us (corporate site, film archive UI, and licensing portal). Practices are designed to respect GDPR, US state privacy laws (including CCPA/CPRA), and other major frameworks summarized below.
Last updated August 18, 2026 · Version 2026-08-18
Data controller
IMH Group, Inc., 8 The Green Ste B, Dover, DE 19901, United States. Email: privacy@imh-group.us (privacy) · info@imh-group.us (general) · Phone: +1 302 212 0640.
Scope
Applies to visitors, shop customers, account holders, and inquiry submitters on imh-group.us. Sister sites (e.g. press.imh-group.us, partner sites) may have their own notices.
Personal data we process
Licensing/contact form data (name, email, company, territory, rights type, message, optional film slug/title); shop/account data (email for magic-link login, order references, license keys tied to purchases); technical logs (IP address hashed where feasible, timestamps) for security; cookie identifiers as described in the Cookie policy; optional first-party analytics events if you consent. Payment card data is handled by Stripe — we do not store full card numbers on our servers.
Purposes & legal bases
Respond to licensing and business inquiries; operate the software shop, customer account, downloads, and license activation; process payments via Stripe; secure and operate the website; with consent — first-party analytics and marketing measurement/opt-in communications; comply with legal obligations.
Processors & payments
Stripe, Inc. acts as a payment processor / Auftragsverarbeiter for checkout (card processing, invoices, Customer Portal). Checkout and license fulfillment cookies/sessions are essential for the contract — not marketing cookies. Hosting and transactional email providers process data under contracts. First-party analytics are stored locally under our control (var/analytics); optional GA4 runs only with analytics consent. If Google AdSense is enabled later, ads and related cookies load only after marketing consent (and never without the site ads flag and configured ad units).
Sharing
We do not sell personal information. We may share data with processors (hosting, email delivery, Stripe for payments, optional analytics) under contracts, or when required by law. Film catalog metadata is fetched live from Inter-Pathé; your inquiry is handled by IMH.
Retention
Inquiries and account correspondence are kept as long as needed for the business relationship and legal obligations, then deleted or anonymized. Shop orders and license records are retained for accounting/tax and license support periods, then anonymized on request where legally possible. Security logs and consent records are retained for a limited period to demonstrate compliance. First-party analytics events follow configured retention (typically up to ~400 days).
Security
We apply appropriate technical and organizational measures (TLS, access control for admin, least privilege). No method of transmission is perfectly secure; please avoid sending highly sensitive data via the public form.
Children
This site is directed to business users. We do not knowingly collect personal data from children.
International transfers
IMH is established in the United States. If you access the site from elsewhere, your data may be processed in the US and other countries where our processors (including Stripe) operate. Where required, we use appropriate safeguards (e.g. SCCs for EEA/UK transfers).
Privacy contact
For access, correction, deletion, portability, or other privacy requests: privacy@imh-group.us · +1 302 212 0640 · or info@imh-group.us.
EEA / UK — GDPR & UK GDPR
If you are in the European Economic Area or United Kingdom, IMH processes personal data under GDPR / UK GDPR principles: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and accountability.
Your GDPR rights
You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with your local supervisory authority.
Legal bases we rely on
Art. 6(1)(b) performance of a request/contract steps; Art. 6(1)(f) legitimate interests (secure site, respond to B2B inquiries); Art. 6(1)(a) consent (optional analytics/marketing cookies); Art. 6(1)(c) legal obligation where applicable.
IMH has not appointed a separate DPO for this corporate site; contact privacy@imh-group.us for all privacy matters.
United States — CCPA / CPRA (California) & similar state laws
If you are a California resident (or resident of a state with similar laws), you may have rights to know, delete, correct, and opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising.
IMH does not sell personal information and does not share it for cross-context behavioral advertising in the ordinary course of this corporate site. Optional marketing cookies, if ever enabled, would only run after consent.
Your US privacy rights
Request to know categories/sources/purposes of personal information collected; request deletion or correction; non-discrimination for exercising rights. Submit requests to privacy@imh-group.us. We will verify your request with reasonable steps.
We do not seek sensitive personal information via the licensing form. Please do not submit government IDs, health data, or similar in free-text fields.
Shine the Light / other US notices: email privacy@imh-group.us for applicable disclosures.
International user rights (summary)
Depending on where you live, frameworks such as Brazil’s LGPD, Canada’s PIPEDA, and Japan’s APPI may grant access, correction, deletion, and related rights. This summary is not legal advice and does not create rights beyond applicable law. Contact privacy@imh-group.us to exercise applicable rights; we respond without over-promising outcomes outside those laws.
Canada — PIPEDA
For individuals in Canada, we align with PIPEDA fair information principles: accountability, identifying purposes, consent where required, limiting collection/use/disclosure/retention, accuracy, safeguards, openness, individual access, and challenging compliance. Contact privacy@imh-group.us to exercise access or correction rights.
Brazil — LGPD
For data subjects in Brazil, Law No. 13.709/2018 (LGPD) may apply. You may request confirmation of processing, access, correction, anonymization, portability, deletion of unnecessary data, information about sharing, and revocation of consent. Contact privacy@imh-group.us. You may also contact Brazil’s ANPD.
Australia — Privacy Act & APPs
For individuals in Australia, we handle personal information in line with the Australian Privacy Principles (APPs): open and transparent management, collection by fair means, notification, limited use/disclosure, cross-border disclosure awareness, quality, security, and access/correction. Contact privacy@imh-group.us for APP access or correction requests. Complaints may be directed to the OAIC.
Thailand — PDPA
For data subjects in Thailand, the Personal Data Protection Act B.E. 2562 may apply. We process data for stated purposes, apply security measures, and honor rights to access, correct, erase, restrict, object, and withdraw consent where processing is consent-based. Contact privacy@imh-group.us.
Japan — APPI
For individuals in Japan, we respect the Act on the Protection of Personal Information (APPI): specify purposes, no improper acquisition, security control measures, and responses to disclosure, correction, and cessation requests. Contact privacy@imh-group.us.
Singapore — PDPA
For individuals in Singapore, we align with the Personal Data Protection Act: consent/notification, purpose limitation, accuracy, protection, retention limitation, transfer limitation, and access/correction. Contact privacy@imh-group.us. You may approach the PDPC for unresolved concerns.
South Korea — PIPA
For data subjects in the Republic of Korea, the Personal Information Protection Act may apply. We limit collection to necessary data, inform of purposes, and support rights to access, correction, deletion, and suspension of processing. Contact privacy@imh-group.us.
China — PIPL
For individuals in the People’s Republic of China, the Personal Information Protection Law may apply. We process information for clear purposes related to site operation and inquiry handling, apply security measures, and respond to access, correction, and deletion requests where required. Contact privacy@imh-group.us. Cross-border transfers are limited to what is needed to operate a US-based corporate site and respond to your request.
United Arab Emirates — PDPL
For individuals in the UAE, Federal Decree-Law No. 45/2021 on Personal Data Protection may apply. We process personal data for legitimate business purposes (responding to inquiries, site security), apply appropriate safeguards, and honor rights to access, rectification, erasure, restriction, and objection where applicable. Contact privacy@imh-group.us.