BOOM CGI is a trading name of Imaginar Ltd (Company No. 06111370), registered in England & Wales. Registered Office: C/O Gf & Co, 3 Braid Drive, Herne Bay, Kent, CT6 5DZ, United Kingdom. Website:https://boomcgi.com Privacy contact: enquiries@boomcgi.com
We act as the data controller for personal data collected through our website and during client relationships.
We comply with the UK GDPR and the Data Protection Act 2018. If you are in the EEA, we also endeavour to comply with the EU GDPR. If legally required, we will appoint an EU representative and publish their details here.
2. What Personal Data We Collect
A) Data you provide to us
Name, email address, phone number
Company, job title/role
Enquiry messages and project briefs
Files and references you share (e.g., brand assets, imagery)
B) Data collected automatically
IP address, device and browser type, settings, and identifiers
Pages viewed, navigation paths, timestamps, and interaction data
Cookies and similar technologies (see Cookies)
C) Data from third parties / integrations
Social media or embedded platforms you interact with
Project tools or file transfer services used for collaboration
Invoicing/accounting systems (billing status, not full card data)
D) Data collected through Google reCAPTCHA v3 We use Google reCAPTCHA v3 to protect the website from spam and abuse. reCAPTCHA analyses interactions and collects technical and behavioural data (e.g., IP address, device/browser characteristics, mouse movements, scrolling, time on page, cookies placed by Google, and signals from previously set Google cookies). This information is transmitted to Google for security analysis.
3. How We Use Personal Data and Lawful Bases
Service delivery & client communication
Responding to enquiries, scoping and delivering CGI/animation/VFX/post‑production projects, communicating with clients and collaborators. Lawful basis:Performance of a contract and Legitimate interests (efficient studio operations).
Website operation, security & fraud prevention
Running and protecting the website, detecting abuse and malicious activity (including via Google reCAPTCHA v3). Lawful basis:Legitimate interests (website security and availability).
Analytics and improvement
Understanding site usage, improving content and performance (aggregated/non‑identifying where possible). Lawful basis:Legitimate interests (improving user experience).
Marketing communications
Showcasing our work, studio news, and updates where permitted. Lawful basis:Consent (for opt‑in channels) and/or Legitimate interests for B2B communications where appropriate. You can opt out at any time.
Legal and financial compliance
Accounting, taxation, audit, regulatory compliance, and enforcing our rights. Lawful basis:Legal obligation and Legitimate interests.
Notes on reCAPTCHA Google may use aggregated data to improve its machine‑learning models. reCAPTCHA data is not used for personalised advertising by default.
4. Sharing Your Personal Data
We may share personal data with:
Service providers / processors: hosting, cloud storage, email, CRM, analytics, project management and file transfer tools, security tools, portfolio/video platforms.
Subcontracted artists / partners: engaged under NDA and subject to confidentiality obligations.
Professional advisors: legal, accounting, audit.
Authorities: where required by law or to protect rights and safety.
Business transfers: in connection with a merger, acquisition, or asset sale (with appropriate safeguards).
Google reCAPTCHA: Certain technical and behavioural data is transmitted to Google LLC as part of reCAPTCHA’s security function. Google processes this data as an independent controller; see Google’s Privacy Policy.
We do not sell personal data.
5. International Data Transfers
Some providers (including Google) may process data outside the UK/EEA (e.g., in the United States). Where applicable, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), and/or supplementary measures to protect your data.
6. Data Retention
We keep personal data only for as long as necessary:
Enquiries (non‑clients): up to 24 months after last contact.
Client/project records and assets: typically 6 years after project completion (for legal/tax/audit).
Billing and accounting records: minimum 6 years.
Analytics logs/cookies: typically 12–26 months, depending on the tool.
We may retain data longer if required by law or to establish, exercise, or defend legal claims.
7. Your Rights
You may have the right to:
Access your personal data
Rectify inaccurate data
Erase data (subject to legal exemptions)
Restrict or object to processing
Data portability
Withdraw consent (where processing is based on consent)
To exercise your rights, email {insert privacy@ email}. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk.
8. Security
We implement appropriate technical and organisational measures to protect personal data, including access controls, least‑privilege practices, encryption in transit where appropriate, staff training, and vendor due diligence. However, no method of transmission or storage is 100% secure.
9. Cookies and Similar Technologies
We use cookies and similar technologies for:
Strictly necessary: site security and core functionality (including _GRECAPTCHA for Google reCAPTCHA v3).
Analytics: understanding and improving site performance.
Preferences/Functionality: remembering choices.
Embeds/third‑party: video and social embeds may set their own cookies.
reCAPTCHA cookies are classified as strictly necessary for security and do not require consent under UK PECR. You can manage non‑essential cookies via your browser settings or any cookie banner/manager we provide.
A detailed cookie list can be provided on request and will be updated if our providers change.
10. Children’s Data
Our website and services are not directed to children. Please do not use the website if you are under 13 (or local equivalent).
11. Automated Decision‑Making / AI
We do not conduct automated decision‑making producing legal or similarly significant effects. If this changes, we will update this Notice and describe your rights to obtain human review.
12. Updates to This Notice
We may update this Notice from time to time. Changes will be posted here with a new “Last updated” date.
13. Contact
For privacy enquiries or to exercise your data rights, contact: enquiries@boomcgi.com Postal: Imaginar Ltd (BOOM CGI), C/O Gf & Co, 3 Braid Drive, Herne Bay, Kent, CT6 5DZ, United Kingdom
Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
