Privacy Policy

BOOM CGI – Privacy Notice

Last updated: 6th October 2026
View Our Work
Start a Project

1. Who We Are (Controller)

BOOM CGI is a trading name of Imaginar Ltd (Company No. 06111370), registered in England & Wales.

Registered Office: C/O Gf & Co, 3 Braid Drive, Herne Bay, Kent, CT6 5DZ, United Kingdom.

Website:  https://boomcgi.com

Privacy contact:  enquiries@boomcgi.com

We act as the data controller for personal data collected through our website and during client relationships.

We comply with the UK GDPR and the Data Protection Act 2018. If you are in the EEA, we also endeavour to comply with the EU GDPR. If legally required, we will appoint an EU representative and publish their details here.

2. What Personal Data We Collect

A) Data you provide to us

  • Name, email address, phone number
  • Company, job title/role
  • Enquiry messages and project briefs
  • Files and references you share (e.g., brand assets, imagery)

B) Data collected automatically

  • IP address, device and browser type, settings, and identifiers
  • Pages viewed, navigation paths, timestamps, and interaction data
  • Cookies and similar technologies (see Cookies)

C) Data from third parties / integrations

  • Social media or embedded platforms you interact with
  • Project tools or file transfer services used for collaboration
  • Invoicing/accounting systems (billing status, not full card data)

D) Data collected through Google reCAPTCHA v3 We use Google reCAPTCHA v3 to protect the website from spam and abuse.

reCAPTCHA analyses interactions and collects technical and behavioural data (e.g., IP address, device/browser characteristics, mouse movements, scrolling, time on page, cookies placed by Google, and signals from previously set Google cookies). This information is transmitted to Google for security analysis.

3. How We Use Personal Data and Lawful Bases

Service delivery & client communication
  • Responding to enquiries, scoping and delivering CGI/animation/VFX/post-production projects, communicating with clients and collaborators.
    Lawful basis: Performance of a contract and Legitimate interests (efficient studio operations).

 

Website operation, security & fraud prevention
  • Running and protecting the website, detecting abuse and malicious activity (including via Google reCAPTCHA v3).
    Lawful basis: Legitimate interests (website security and availability).

 

Analytics and improvement
  • Understanding site usage, improving content and performance (aggregated/non-identifying where possible).
    Lawful basis: Legitimate interests (improving user experience).

Marketing communications
  • Showcasing our work, studio news, and updates where permitted.
    Lawful basis: Consent (for opt-in channels) and/or Legitimate interests for B2B communications where appropriate. You can opt out at any time.

Legal and financial compliance
  • Accounting, taxation, audit, regulatory compliance, and enforcing our rights.
    Lawful basis: Legal obligation and Legitimate interests.

Notes on reCAPTCHA

Google may use aggregated data to improve its machine-learning models. reCAPTCHA data is not used for personalised advertising by default.

4. Sharing Your Personal Data

We may share personal data with:

  • Service providers / processors: hosting, cloud storage, email, CRM, analytics, project management and file transfer tools, security tools, portfolio/video platforms.

  • Subcontracted artists / partners: engaged under NDA and subject to confidentiality obligations.

  • Professional advisors: legal, accounting, audit.

  • Authorities: where required by law or to protect rights and safety.

  • Business transfers: in connection with a merger, acquisition, or asset sale (with appropriate safeguards).

 

Google reCAPTCHA: Certain technical and behavioural data is transmitted to Google LLC as part of reCAPTCHA’s security function. Google processes this data as an independent controller; see Google’s Privacy Policy.

We do not sell personal data.

5. International Data Transfers

Some providers (including Google) may process data outside the UK/EEA (e.g., in the United States). Where applicable, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), and/or supplementary measures to protect your data.

6. Data Retention

We keep personal data only for as long as necessary:

  • Enquiries (non-clients): up to 24 months after last contact.

  • Client/project records and assets: typically 6 years after project completion (for legal/tax/audit).

  • Billing and accounting records: minimum 6 years.

  • Analytics logs/cookies: typically 12–26 months, depending on the tool.

 

We may retain data longer if required by law or to establish, exercise, or defend legal claims.

7. Your Rights

You may have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase data (subject to legal exemptions)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent (where processing is based on consent)

To exercise your rights, email enquiries@boomcgi.com
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk.

8. Security

We implement appropriate technical and organisational measures to protect personal data, including access controls, least-privilege practices, encryption in transit where appropriate, staff training, and vendor due diligence. However, no method of transmission or storage is 100% secure.

9. Cookies and Similar Technologies

We use cookies and similar technologies for:

  • Strictly necessary: site security and core functionality (including _GRECAPTCHA for Google reCAPTCHA v3).

  • Analytics: understanding and improving site performance.

  • Preferences/Functionality: remembering choices.

  • Embeds/third-party: video and social embeds may set their own cookies.

reCAPTCHA cookies are classified as strictly necessary for security and do not require consent under UK PECR. You can manage non-essential cookies via your browser settings or any cookie banner/manager we provide.

A detailed cookie list can be provided on request and will be updated if our providers change.

10. Children’s Data

Our website and services are not directed to children. Please do not use the website if you are under 13 (or local equivalent).

11. Automated Decision-Making / AI

We do not conduct automated decision-making producing legal or similarly significant effects. If this changes, we will update this Notice and describe your rights to obtain human review.

12. Updates to This Notice

We may update this Notice from time to time. Changes will be posted here with a new “Last updated” date.

13. Contact

For privacy enquiries or to exercise your data rights, contact: enquiries@boomcgi.com
Postal: Imaginar Ltd (BOOM CGI), C/O Gf & Co, 3 Braid Drive, Herne Bay, Kent, CT6 5DZ, United Kingdom