Privacy Policy
Last updated: 8 February, 2026
Table of Contents
Introduction
Your privacy matters to us. Immido ("we," "our," "us") is committed to protecting your personal information and complying with all applicable data protection laws and regulations, including the Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data ('GDPR'), the Law of Ukraine "On Personal Data Protection", the California Consumer Privacy Act, as amended by the CPRA (CCPA/CPRA), where applicable.
This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website https://immido.co, contact us via forms or email, or use our services.
This Privacy Policy applies to all users, clients, and visitors of the Website, regardless of their country of residence, to the extent their personal data is processed by Immido.
1. Definitions
Personal Data: Any information relating to an identified or identifiable individual.
Processing: Any action or set of actions performed on personal data, including its collection, recording, storage, use, transmission, and other operations.
Data Controller: Immido, which determines the purposes and means of processing your personal data.
Data Processor: Any third party that processes data on behalf of Immido.
Sensitive Personal Data: Data revealing racial or ethnic origin, health, biometric or genetic data, religious beliefs, criminal records, or similar categories requiring special protection.
Third Parties: External service providers, contractors, or partners who may receive personal data solely to provide technical, administrative, analytical, or professional support services.
2. Information We Collect
We may collect and process the following categories of personal data:
a) Contact and Identification Data:
- First and last name
- Email address
- Phone number
b) Communication Data:
- Messages submitted via contact or inquiry forms
- Email correspondence
c) Technical and Website Usage Data:
- IP address, browser type, and device information
- Pages visited, time spent on site, and referring URLs
- Cookies and tracking technologies
We do not collect or process sensitive personal data (e.g., health, biometric, or religious data) unless strictly required by applicable law.
Our services are not intended for children under the age of 16 (or the minimum age permitted by the applicable law of the user's country). We do not knowingly collect personal data from children. If you become aware that we have inadvertently collected personal data from a child without parental consent, please contact us, and we will delete such data as soon as possible.
3. How We Use Personal Data
We process personal data for the following purposes:
- Providing consulting and related services
- Responding to inquiries and requests
- Communicating with clients and prospective clients
- Concluding and performing contracts
- Improving the Website and user experience
- Ensuring security and preventing fraud
- Complying with legal and regulatory obligations
Data Minimization: We collect and process only the personal data necessary to provide and improve our services, in accordance with the principles of data minimization and purpose limitation. Data will not be retained or used for other purposes.
Contact Forms and Consent: By submitting any contact or inquiry form on our website, you consent to the processing of your personal data as described in this Privacy Policy. This includes using your information to respond to your inquiry, provide requested information, and maintain communication related to your request.
4. Legal Bases for Processing
We process your personal data on the following legal grounds:
- Performance of a Contract or pre-contractual measures
- Legal Obligation: To comply with applicable tax, accounting, and regulatory requirements
- Legitimate Interests: We process business contact data to manage ongoing partnerships, respond to inquiries, ensure service quality, and protect our legal rights and interests in the course of business operations
- Consent: For marketing communications or optional cookies (where required)
Marketing and Communications: We will only send you promotional or informational materials if you have provided explicit consent or if you are an existing client, in accordance with applicable direct marketing laws. You may withdraw consent or unsubscribe at any time.
- CCPA-compliant purposes, where applicable
6. International Data Transfers
In certain cases, your personal data may be transferred to and processed in other countries where our partners, service providers, or servers are located. Such transfers are conducted only where necessary and in full compliance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the Law of Ukraine "On Personal Data Protection".
When personal data is transferred outside the European Economic Area (EEA), we ensure that:
- The transfer is made to a country that provides an adequate level of personal data protection, as officially recognized by the European Commission or the authorized data protection authority of Ukraine; or
- We enter into Standard Contractual Clauses (SCCs) or equivalent data transfer agreements approved by the European Commission; or
- We apply other appropriate safeguards, such as explicit data subject consent or transfer necessity for contract performance (e.g., for the performance of consulting services or technical operations).
All parties involved in international data processing are required to maintain the same level of confidentiality, integrity, and security of personal data as guaranteed under EU law.
You may contact us at any time to request more information about the legal basis, safeguards, or destinations applicable to the transfer of your personal data.
7. Data Retention
We retain personal data only for as long as necessary to achieve the purposes of its processing or to comply with legal obligations. The specific retention period is determined in accordance with the purpose of processing the personal data and the requirements of applicable law.
8. Your Rights
All users of the Website shall have the following rights with respect to the processing of their personal data:
Right to access: You have a right to request a copy of the personal data that we hold on you, along with meaningful information on how it is used and who we share it with. This right always applies, but there are some instances where we may not be able to provide you with some or all of the information we hold. Where this is the case, we will explain to you the reason and when we can respond to your request, unless the relevant laws or regulations prevent us from doing so.
Right to request data portability: You have the right to receive your personal data which was provided to us for processing, in a structured and machine-readable format. You may also have the right to request transmission of such personal data to another controller, where technically feasible.
Right to rectification: You have a right to ask us to correct inaccurate or incomplete personal data that we hold about you. We will either confirm to you that this has been done, or if there is a valid reason that this cannot be done, we will let you know the reason.
Right to erasure: You can request that we delete your personal data in certain circumstances, for example if we no longer need the personal data for the purpose(s) for which we collected it. We will either confirm to you that this has been done, or if we are unable to delete it due to a compelling overriding reasons or retention is required by any legal or regularly obligations, we will let you know the reason for continuing to hold personal data and the period we are required to hold such personal data.
Right to restrict processing: You can ask us to restrict the processing of your personal data in certain circumstances. If you do so, we will either confirm to you that this has been done, or if we are unable to do so, we will inform you the reason.
Right to object to automated decision-making: You have the right to object to decisions made about you, using your personal data and undertaken by purely automated means, including profiling. If you do so, we will arrange for someone to assess the automated decision and confirm the outcome of this assessment to you.
Right to object to certain processing, including direct marketing: You can object to certain processing, including to receive direct marketing from us. You can object to receiving direct marketing from us by simply clicking on the unsubscribe link in any email you receive from us or alternatively getting in touch with us through the contact details mentioned hereunder.
Right to withdraw your consent: You have the right to withdraw your consent at any time to the use of your personal data for a particular purpose (where we have asked you for consent to use your information for that particular purpose).
California Residents (CCPA): California residents additionally have the right to know, delete, and opt out of the sale or sharing of personal data, where applicable. Immido does not sell or share personal data for monetary or other valuable consideration within the meaning of the California Consumer Privacy Act (CCPA), as amended by the CPRA.
We will respond to rights requests within 30 days, unless extended due to complexity.
To exercise your rights or if you have any questions regarding this Privacy Policy, please contact our Privacy Contact at:
- Email: info@immido.co
- Phone: +44 7458 038482
9. Security Measures
We take the security of your personal data seriously and implement a combination of technical and organizational measures to protect it.
Our Security Measures:
- Encryption: All personal data is encrypted both in transit and at rest.
- Access Controls: Multi-factor authentication and role-based access ensure that only authorized personnel can access data.
- Data Minimization: Sensitive personal data is pseudonymized or anonymized wherever possible.
- Staff Awareness: Regular training and awareness programs are conducted to ensure employees understand data protection responsibilities.
- System Testing: We perform regular security audits, penetration tests, and maintain incident response procedures to detect and mitigate vulnerabilities.
11. Data Breach Notification
If a personal data breach occurs, we will take immediate and proportionate steps to contain, assess, and mitigate the incident. A personal data breach may include unauthorized access, disclosure, alteration, loss, or destruction of personal data, whether accidental or unlawful.
Under GDPR: We will notify the relevant supervisory authority within 72 hours, and affected individuals if necessary.
Ukrainian Law: We notify the Ukrainian Parliament Commissioner for Human Rights (Ombudsman) and other relevant authorities without undue delay if a data breach may lead to a violation of the rights and freedoms of individuals.
We will also inform affected data subjects as soon as reasonably possible, explaining the nature of the incident, the types of data involved, and actions they can take to protect themselves.
12. Changes to This Privacy Policy
We are constantly reviewing our Privacy Policy to ensure compliance with data protection legislation. Our apps are also constantly evolving and new features and services may change how we process your personal data. Any substantive or material change to this Privacy Policy will be brought to your attention.
In the event of such changes, we will notify Users, Clients, and third parties by posting a notice on the Website and/or, where possible, sending an informational email. We recommend that you periodically review this Privacy Policy to stay informed about how we process your personal data.
Following amendments to this Privacy Policy, we may require Users, Clients, and third parties to provide renewed consent to the updated version. Unless otherwise stated, all amendments shall become effective thirty (30) days after the publication of the revised version of this Privacy Policy.
Our electronic or otherwise stored copies of this Privacy Policy shall be deemed to be the authentic, complete, valid, and enforceable version of the Policy in effect at the time of your interaction with the Website.
Updates will be published on this page with a new "Last Updated" date.
The Ukrainian version of this Privacy Policy shall prevail. In the event of any discrepancies between language versions, the Ukrainian version shall take precedence.
13. Contact Us
If you have any questions regarding this Privacy Policy or wish to exercise your rights regarding your personal data, please contact us at:
Immido