PRIVACY POLICY
iMask Intelligence
Last updated: Jul 15, 2026
1. INTRODUCTION
This Privacy Policy explains how iMask Intelligence ("iMask Intelligence," "we," "us," or "our") collects, uses, discloses, and protects information when you visit our website (the "Site") or interact with us through the Site, including by submitting our contact form.
This Policy applies only to information collected through the Site. It does not govern information collected, processed, or handled by iMask Intelligence in the course of client engagements, investigations, due diligence work, or other professional services. That information is governed separately by the applicable client engagement agreement, confidentiality terms, and relevant law, and is not addressed by this Policy. See Section 8 below for more detail.
2. INFORMATION WE COLLECT
a) Information you provide directly
When you submit our contact form, we collect:
First and last name
Email address
Phone number (if provided)
Job title (if provided)
Organization (if provided)
Location (if provided)
Your preferred method of contact
A description of the matter or decision you are seeking advice on
We collect only what you choose to submit through this form.
Please limit the information you submit through the contact form to what is necessary to describe your inquiry, and avoid including sensitive personal information about yourself or personal information about third parties. If your inquiry leads to a client engagement, further collection and handling of information will be governed by a separate engagement agreement and confidentiality terms, not by this Policy.
b) Information collected automatically
Our Site is hosted on Squarespace. Squarespace and its service providers may automatically collect limited technical information when you visit the Site, such as IP address, browser type, device information, and general usage data, and may set essential or platform-level cookies necessary for the Site to function (for example, security and session cookies). We do not currently use additional analytics, advertising, or tracking tools beyond what Squarespace provides by default.
If this changes — for example, if we add analytics, retargeting, or CRM tracking tools to the Site — we will update this Policy in advance of doing so and, where required by applicable law, obtain your consent before any non-essential cookies are set.
3. HOW WE USE YOUR INFORMATION
We use the information you submit to:
Respond to your inquiry and assess whether we can assist with the matter described
Communicate with you about our services
Maintain internal records of inquiries
Comply with legal, regulatory, or contractual obligations
Improve and maintain the Site
We do not use information submitted through the contact form for advertising or marketing purposes unless you separately opt in to receive communications from us.
4. LEGAL BASIS FOR PROCESSING
Where applicable law requires a legal basis for processing (such as under the EU/UK General Data Protection Regulation), we rely on:
Your consent, given by voluntarily submitting the contact form
Our legitimate interest in responding to inquiries and operating our business
Compliance with legal obligations, where relevant
You may withdraw consent at any time by contacting us at the email below; this will not affect the lawfulness of any processing carried out before withdrawal.
5. HOW WE SHARE INFORMATION
We do not sell your personal information. We may share information submitted through the Site with:
Service providers who help us operate the Site (for example, Squarespace, our website hosting provider)
Professional advisors (legal, accounting) where necessary
Authorities or third parties where required by law, or to protect our rights, safety, or property
We do not share contact-form submissions with unrelated third parties for their own marketing purposes.
6. DATA RETENTION
We retain information submitted through the contact form for up to three (3) years from the date of your last contact with us, or as long as necessary to respond to your inquiry, maintain business records, and comply with legal or regulatory requirements — whichever period is longer. If your inquiry results in a client engagement, further retention of related information is governed by the applicable engagement agreement rather than this Policy.
7. YOUR RIGHTS
a) General
Depending on your location, you may have rights regarding your personal information, which may include the right to:
Request access to the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information
Object to or restrict certain processing
Request a copy of your information in a portable format
Lodge a complaint with a relevant data protection authority
To exercise any of these rights, contact us at info@imaskintel.com. We will respond within 30 days of receiving a verifiable request (or 45 days for California residents, as described below, including one permitted 45-day extension where necessary under applicable law).
b) California Residents (CCPA/CPRA)
California residents have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know what personal information we have collected, request its deletion, request correction of inaccurate information, and opt out of the sale or sharing of personal information, without discrimination for exercising these rights.
As stated in Section 5, we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and no "Do Not Sell or Share My Personal Information" mechanism is currently required for that reason. If this changes, we will implement the required mechanism and update this Policy accordingly. California residents may submit requests using the contact information in Section 13.
8. SCOPE — WEBSITE ONLY
iMask Intelligence provides private intelligence and commercial risk advisory services. In the course of these services, we and our clients may collect, process, analyze, or store information about individuals or entities that are the subject of due diligence, investigative, or risk-assessment work. This activity is separate and distinct from the operation of this Site and is governed by the terms of the applicable client engagement, professional obligations, and applicable law — not by this Privacy Policy. This Policy relates solely to personal information collected through your direct interaction with the Site (for example, through the contact form).
9. SECURITY
We maintain reasonable administrative, technical, and organizational safeguards designed to protect information submitted through the Site from unauthorized access, disclosure, alteration, or loss. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. INTERNATIONAL VISITORS
Our Site may be accessed by visitors from around the world. Information you submit may be processed and stored in a country other than your own, which may have different data protection laws. By using the Site, you understand that your information may be transferred to and processed in such locations.
11. CHILDREN'S PRIVACY
The Site is not directed at individuals under the age of 18, and we do not knowingly collect personal information from children.
12. CHANGES TO THIS POLICY
We may update this Policy from time to time. The "Last updated" date above reflects the most recent revision. Continued use of the Site after changes are posted constitutes acceptance of the updated Policy.
13. CONTACT US
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:
iMask Intelligence