Privacy Policy

How we handle personal information.

Privacy Policy

Last updated: 6 October 2026

1. Introduction

IMBA Dynamics Ltd (“IMBA Dynamics”, “we”, “us” or “our”) is committed to protecting personal information and handling it transparently, securely and lawfully.

This Privacy Policy explains how we handle personal data when you:

  • visit our website;
  • contact us about our services;
  • become or consider becoming a client, supplier or business contact;
  • interact with us in connection with our own business operations.

It also explains the distinction between information we process for our own purposes and information we process on behalf of our clients.

2. Who We Are

Company: IMBA Dynamics Ltd
Company number: 15925507
Business: Software development and technical consultancy
Privacy contact: privacy@imba-dynamics.com

For personal data collected and used for IMBA Dynamics’ own business purposes, such as website enquiries, supplier management, business administration and invoicing, IMBA Dynamics generally acts as the data controller.

Where IMBA Dynamics develops, hosts, maintains or supports systems containing personal data on behalf of a client, we will normally act as a data processor or sub-processor. In those circumstances, the relevant client determines the purposes and means of the processing and IMBA Dynamics processes the data only on documented instructions and in accordance with the applicable contract.

3. Personal Data We Collect

The personal information we collect depends on how you interact with us.

3.1 Website and Business Enquiries

If you contact us through the website, email or another business communication channel, we may collect:

  • your name;
  • job title and organisation;
  • email address and other contact details you provide;
  • the content of your enquiry;
  • information relating to a potential or existing business relationship.

3.2 Clients, Suppliers and Business Contacts

Where necessary to manage a business relationship, we may process:

  • names and business contact details;
  • company and role information;
  • correspondence and meeting records;
  • contracts, proposals and statements of work;
  • billing and transaction records;
  • supplier and professional-adviser details.

We do not normally collect payment-card details directly through this website.

3.3 Technical Website Information

When you visit our website, limited technical information may be generated automatically by our hosting, security or analytics services. Depending on the services in use, this may include:

  • IP address;
  • browser and device information;
  • operating system;
  • referring page;
  • pages visited;
  • date and time of access;
  • technical or security events.

We aim to collect only the information reasonably required to operate, secure and understand the use of the website.

4. Client Data Processed Through Systems We Support

IMBA Dynamics develops and supports software and data services for clients.

Those systems may contain personal, confidential or commercially sensitive information belonging to the client or its customers.

Where we process that information as a processor or sub-processor:

  • we process it only on documented client instructions;
  • we do not use identifiable client data for our own marketing, benchmarking, product development or AI/model training unless this has been separately and lawfully authorised;
  • access is restricted according to role and operational need;
  • appropriate confidentiality and security controls apply;
  • retention, return and deletion are governed by the client contract and documented instructions.

If you are an individual whose information is held within a client system, the client will normally be the appropriate organisation to contact regarding your data-protection rights. If you contact us directly about such information, we may forward your request to the relevant client.

5. Special Category and Sensitive Information

IMBA Dynamics does not intentionally collect special category personal data through its public website.

However, systems we develop or support for clients may contain sensitive or special-category information where this is necessary for the client’s lawful business activities.

Where we encounter such information while acting as a processor or sub-processor, we handle it only in accordance with the client’s documented instructions and the applicable security and confidentiality controls.

6. Lawful Bases for Processing

Where IMBA Dynamics acts as controller, our lawful basis will depend on the circumstances.

We may rely on:

  • Contract – where processing is necessary to enter into or perform a contract;
  • Legal obligation – where we must process information to comply with law, taxation, accounting or regulatory requirements;
  • Legitimate interests – where processing is necessary for legitimate business purposes such as responding to enquiries, managing business relationships, maintaining security, preventing fraud, administering our services and improving the operation of our own website, provided those interests are not overridden by your rights;
  • Consent – where consent is specifically appropriate, for example for optional marketing or non-essential cookies.

Where IMBA Dynamics acts as a processor or sub-processor, the relevant client is responsible for determining the lawful basis for the underlying processing.

7. How We Use Personal Information

Where we act as controller, we may use personal information to:

  • respond to enquiries;
  • discuss or provide our services;
  • administer client and supplier relationships;
  • prepare proposals, contracts and invoices;
  • maintain business and accounting records;
  • secure our website, accounts and systems;
  • investigate suspicious activity or security incidents;
  • maintain and improve the operation of our own website and business processes;
  • comply with legal and regulatory obligations;
  • establish, exercise or defend legal rights.

We do not sell personal information.

8. Data Security

We use technical and organisational measures appropriate to the nature and risk of the information we process.

Depending on the relevant system or service, these controls may include:

  • encryption in transit and, where appropriate, at rest;
  • named user accounts;
  • multi-factor authentication;
  • role-based and least-privilege access;
  • separate development and production environments;
  • secure management of credentials and secrets;
  • controlled software-development and release processes;
  • vulnerability and dependency review;
  • logging and monitoring;
  • backup and recovery controls;
  • incident-response procedures;
  • periodic access and security review.

No information system can be guaranteed to be completely secure. We therefore review risks and controls on an ongoing basis and respond to identified security issues in accordance with our internal governance procedures.

9. Sharing Personal Information

We may share personal information where this is necessary and lawful.

Recipients may include:

Service Providers

Trusted technology and business suppliers that provide services such as:

  • website or cloud hosting;
  • source-code hosting;
  • business email and productivity services;
  • accounting and administration services;
  • security or monitoring services.

Suppliers are subject to appropriate contractual, security and data-protection requirements where applicable.

Professional Advisers

We may disclose information to accountants, lawyers, insurers, security specialists or other professional advisers where reasonably necessary.

Legal and Regulatory Authorities

We may disclose information where required by law, court order or legitimate regulatory request.

Business Transactions

Information may be disclosed where reasonably necessary as part of a genuine corporate restructuring, acquisition, sale or similar transaction, subject to appropriate confidentiality safeguards.

10. International Data Transfers

We aim to use UK-hosted services where appropriate for client systems and sensitive information.

Some technology suppliers may operate internationally or provide support from outside the UK.

Where personal data is transferred internationally and UK data-protection law requires safeguards, we will ensure that an appropriate lawful mechanism is in place, such as:

  • UK adequacy regulations;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to the EU Standard Contractual Clauses;
  • another legally recognised safeguard.

Client data processed outside the UK will also remain subject to the relevant contractual instructions and approvals.

11. Retention and Deletion

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for any applicable legal, accounting, contractual or dispute-resolution requirements.

Retention periods depend on the type of information and the context in which it is processed.

When information is no longer required, we will delete or anonymise it securely where reasonably practicable.

Where IMBA Dynamics acts as processor or sub-processor, retention, return and deletion of client data are governed by the applicable client instructions and contractual arrangements.

12. Your Data Protection Rights

Where IMBA Dynamics acts as controller, you may have rights under UK data-protection law including the right to:

  • request access to your personal data;
  • request correction of inaccurate information;
  • request deletion in certain circumstances;
  • request restriction of processing;
  • object to certain processing;
  • request data portability where applicable;
  • withdraw consent where processing is based on consent.

These rights are not absolute and may depend on the circumstances and the lawful basis relied upon.

To exercise a right relating to personal information for which IMBA Dynamics is the controller, contact: privacy@imba-dynamics.com

We may need to verify your identity before acting on a request.

Where the information is processed by IMBA Dynamics solely on behalf of a client, we may refer your request to that client.

13. Complaints

If you have concerns about how IMBA Dynamics has handled personal information, please contact us first at:

privacy@imba-dynamics.com

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

Information about making a complaint is available from the ICO at ico.org.uk.

14. Cookies

Our website may use cookies or similar technologies that are necessary for the website to operate or that help us understand how the website is used.

Cookies may include:

  • Strictly necessary cookies required for security or core website functionality;
  • Analytics cookies, where enabled, to help us understand website performance and usage.

Non-essential cookies should not be activated without the appropriate consent where consent is required by law.

The exact cookies and technologies in use should be reflected in the website’s cookie settings or cookie notice.

We do not use advertising or targeting cookies unless this is specifically disclosed and the appropriate consent mechanism is in place.

15. Third-Party Websites

Our website may contain links to external websites operated by third parties.

IMBA Dynamics does not control those websites and is not responsible for their content or privacy practices. You should review the privacy information provided by the relevant third party before providing personal information to them.

16. Children

Our public website and business services are intended for organisations and adult business users and are not directed at children.

We do not knowingly collect children’s personal information through the public website.

Client systems supported by IMBA Dynamics may contain information relating to children where this is lawful and necessary for the client’s purposes. In such circumstances, IMBA Dynamics processes that information only on the client’s documented instructions and subject to the applicable security and confidentiality controls.

17. Changes to This Privacy Policy

We may update this Privacy Policy where our business, website, technology suppliers, processing activities or legal obligations change.

The latest version will be published on our website and the “Last updated” date will be amended accordingly.

18. Contact Us

For questions about this Privacy Policy or IMBA Dynamics’ handling of personal information, contact:

IMBA Dynamics Ltd
Company No. 15925507
Email: privacy@imba-dynamics.com

For general business enquiries, please use the contact details published on our website.