Privacy Policy

This policy describes how IMH Group, Inc. processes personal data through press.imh-group.us. It includes regional addenda for U.S. state privacy laws, the CCPA/CPRA, and other major privacy frameworks worldwide.

Data Controller

IMH Group, Inc., 8 The Green Ste B, Dover, DE 19901, United States

Website: press.imh-group.us
Email: privacy@imh-group.us

Overview

We process the following categories of personal data:

Account data (company name, email, country, VAT ID)
Order and billing data (Stripe payment references)
Press release content and media uploads
Technical logs, IP-derived security hashes, consent records

For visitors and customers in the EU, EEA, and United Kingdom, GDPR and UK GDPR apply. IMH Group, Inc. is the controller; processors are bound by contract and data processing agreements.

Legal Bases (Art. 6 GDPR)

Art. 6(1)(b) GDPR — performance of a contract (orders, distribution services)
Art. 6(1)(c) GDPR — legal obligations (tax, accounting, fraud prevention)
Art. 6(1)(f) GDPR — legitimate interests (security, service improvement)
Art. 6(1)(a) GDPR — consent (analytics/marketing cookies, optional newsletters)

Transparency & Your Rights (Arts. 13–22)

Information under Arts. 13–14 GDPR is provided in this policy. You may exercise rights under Arts. 15–22 (access, rectification, erasure, restriction, portability, objection) by contacting us. Supervisory authority complaints are available in your EU/EEA member state or the UK ICO.

Sub-processors are listed in the Data Processors section below and are bound by data processing agreements where required.

United States — State Privacy Laws, CCPA/CPRA

For U.S. residents, we comply with applicable state privacy laws including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and similar statutes in Colorado, Connecticut, Virginia, and other states where applicable. These laws provide rights regarding personal information collected for business purposes including account management, analytics (with consent), and service delivery.

Do Not Sell or Share: We do not sell personal information for monetary consideration. We may share identifiers and usage data with analytics providers only after consent. California residents may opt out via cookie settings or by emailing privacy@imh-group.us.

Rights: Know, delete, correct, and limit use of sensitive personal information (CPRA). Non-discrimination for exercising privacy rights.

Canada — PIPEDA

For Canadian users, we collect, use, and disclose personal information with consent or as permitted under PIPEDA. You may access and challenge accuracy of your data by contacting us.

Australia — Privacy Act 1988

For Australia, personal information is handled under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You may request access, correction, or erasure, and lodge complaints with the Office of the Australian Information Commissioner (OAIC).

Brazil — LGPD

For Brazil, processing follows LGPD (Lei 13.709/2018). Legal bases include consent, contract performance, and legitimate interest. Data subjects may confirm processing, correct data, and request deletion where applicable.

Thailand — PDPA

For users in Thailand, processing complies with the Personal Data Protection Act B.E. 2562 (PDPA). You may request access, correction, deletion, or restriction as provided by law.

Japan — APPI

For Japan, handling of personal information follows the Act on the Protection of Personal Information (APPI). You may request disclosure, correction, or suspension of use.

Singapore — PDPA

For Singapore, the Personal Data Protection Act (PDPA) governs collection, use, and disclosure. Consent is obtained for non-essential processing; contact us to withdraw consent or access personal data.

South Korea — PIPA

For South Korea, the Personal Information Protection Act (PIPA) applies. You may exercise rights of access, correction, deletion, and processing suspension.

China — PIPL

For China, personal information is processed under PIPL with lawful bases including consent and contract performance. Cross-border transfers follow applicable requirements. You may exercise statutory rights including access and deletion.

UAE & MENA — Data Protection Notice

For users in the UAE and broader MENA region, personal data is processed lawfully and transparently under applicable local laws (including UAE Federal Decree-Law No. 45/2021 where applicable). Contact us for access or correction requests.

Your Rights (All Regions)

Depending on your location, you may have rights to access, rectify, delete, restrict, port, or object to processing, and to lodge complaints with supervisory authorities. We respond within statutory timeframes.

Contact & Requests

Privacy requests: privacy@imh-group.us. Include your account email and jurisdiction for faster handling.