Legal
Privacy policy
This privacy policy explains how IMH Group, Inc. processes personal data on imh-group.us (corporate site, film archive UI, and licensing portal). Practices are designed to respect GDPR, US state privacy laws (including CCPA/CPRA), and other major frameworks summarized below.
Last updated August 8, 2026
Data controller
IMH Group, Inc., 8 The Green Ste B, Dover, DE 19901, United States. Email: privacy@imh-group.us (privacy) · info@imh-group.us (general) · Phone: +1 302 212 0640.
Scope
Applies to visitors and inquiry submitters on imh-group.us. Sister sites (e.g. press.imh-group.us, partner sites) may have their own notices.
Personal data we process
Licensing/contact form data (name, email, company, territory, rights type, message, optional film slug/title); technical logs (IP address truncated or hashed where feasible, user agent, timestamps) for security; cookie identifiers as described in the Cookie policy; optional analytics events if you consent.
Purposes & legal bases
Respond to licensing and business inquiries (contract steps / legitimate interests / your request); administer rights requests and correspondence; secure and operate the website; with consent — analytics and marketing measurement; comply with legal obligations.
Sharing
We do not sell personal information. We may share data with processors (hosting, email delivery, optional analytics) under contracts, or when required by law. Film catalog metadata is fetched live from Inter-Pathé; your inquiry is handled by IMH.
Retention
Inquiries are kept as long as needed for the business relationship and legal obligations, then deleted or anonymized. Security logs are retained for a limited period. Consent records are kept to demonstrate compliance.
Security
We apply appropriate technical and organizational measures (TLS, access control for admin, least privilege). No method of transmission is perfectly secure; please avoid sending highly sensitive data via the public form.
Children
This site is directed to business users. We do not knowingly collect personal data from children.
International transfers
IMH is established in the United States. If you access the site from elsewhere, your data may be processed in the US and other countries where our processors operate. Where required, we use appropriate safeguards (e.g. SCCs for EEA/UK transfers).
Privacy contact
For access, correction, deletion, or other privacy requests: privacy@imh-group.us · +1 302 212 0640.
EEA / UK — GDPR & UK GDPR
If you are in the European Economic Area or United Kingdom, IMH processes personal data under GDPR / UK GDPR principles: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and accountability.
Your GDPR rights
You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with your local supervisory authority.
Legal bases we rely on
Art. 6(1)(b) performance of a request/contract steps; Art. 6(1)(f) legitimate interests (secure site, respond to B2B inquiries); Art. 6(1)(a) consent (optional analytics/marketing cookies); Art. 6(1)(c) legal obligation where applicable.
IMH has not appointed a separate DPO for this corporate site; contact privacy@imh-group.us for all privacy matters.
United States — CCPA / CPRA (California) & similar state laws
If you are a California resident (or resident of a state with similar laws), you may have rights to know, delete, correct, and opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising.
IMH does not sell personal information and does not share it for cross-context behavioral advertising in the ordinary course of this corporate site. Optional marketing cookies, if ever enabled, would only run after consent.
Your US privacy rights
Request to know categories/sources/purposes of personal information collected; request deletion or correction; non-discrimination for exercising rights. Submit requests to privacy@imh-group.us. We will verify your request with reasonable steps.
We do not seek sensitive personal information via the licensing form. Please do not submit government IDs, health data, or similar in free-text fields.
Shine the Light / other US notices: email privacy@imh-group.us for applicable disclosures.
Canada — PIPEDA
For individuals in Canada, we align with PIPEDA fair information principles: accountability, identifying purposes, consent where required, limiting collection/use/disclosure/retention, accuracy, safeguards, openness, individual access, and challenging compliance. Contact privacy@imh-group.us to exercise access or correction rights.
Brazil — LGPD
For data subjects in Brazil, Law No. 13.709/2018 (LGPD) may apply. You may request confirmation of processing, access, correction, anonymization, portability, deletion of unnecessary data, information about sharing, and revocation of consent. Contact privacy@imh-group.us. You may also contact Brazil’s ANPD.
Australia — Privacy Act & APPs
For individuals in Australia, we handle personal information in line with the Australian Privacy Principles (APPs): open and transparent management, collection by fair means, notification, limited use/disclosure, cross-border disclosure awareness, quality, security, and access/correction. Contact privacy@imh-group.us for APP access or correction requests. Complaints may be directed to the OAIC.
Thailand — PDPA
For data subjects in Thailand, the Personal Data Protection Act B.E. 2562 may apply. We process data for stated purposes, apply security measures, and honor rights to access, correct, erase, restrict, object, and withdraw consent where processing is consent-based. Contact privacy@imh-group.us.
Japan — APPI
For individuals in Japan, we respect the Act on the Protection of Personal Information (APPI): specify purposes, no improper acquisition, security control measures, and responses to disclosure, correction, and cessation requests. Contact privacy@imh-group.us.
Singapore — PDPA
For individuals in Singapore, we align with the Personal Data Protection Act: consent/notification, purpose limitation, accuracy, protection, retention limitation, transfer limitation, and access/correction. Contact privacy@imh-group.us. You may approach the PDPC for unresolved concerns.
South Korea — PIPA
For data subjects in the Republic of Korea, the Personal Information Protection Act may apply. We limit collection to necessary data, inform of purposes, and support rights to access, correction, deletion, and suspension of processing. Contact privacy@imh-group.us.
China — PIPL
For individuals in the People’s Republic of China, the Personal Information Protection Law may apply. We process information for clear purposes related to site operation and inquiry handling, apply security measures, and respond to access, correction, and deletion requests where required. Contact privacy@imh-group.us. Cross-border transfers are limited to what is needed to operate a US-based corporate site and respond to your request.
United Arab Emirates — PDPL
For individuals in the UAE, Federal Decree-Law No. 45/2021 on Personal Data Protection may apply. We process personal data for legitimate business purposes (responding to inquiries, site security), apply appropriate safeguards, and honor rights to access, rectification, erasure, restriction, and objection where applicable. Contact privacy@imh-group.us.