Privacy Policy
This policy explains how IMAGINE collects and uses personal data when you visit imagine.one or community.imagine.one, join our community, register for our events or otherwise get in touch with us. It replaces our previous policy dated 8 April 2022.
Who we are
IMAGINE is the trading name of Imagine World Ltd, a private limited company registered in England and Wales under company number 11923974. Our registered office is 2 Leman Street, London, E1W 9US, United Kingdom. In this policy, "IMAGINE", "we", "us" and "our" mean Imagine World Ltd.
We are the controller of your personal data, which means we decide how and why it is used.
If you have any questions about this policy or how we handle your data, email us at leaders@imagine.one or write to us at our registered office.
Our websites are not intended for anyone under 18, and we do not knowingly collect data about children.
The data we collect
We collect the following kinds of personal data. Most of it comes directly from you.
| Type of data | What it includes | Where it comes from |
|---|---|---|
| Identity | Name, title, photograph, profile picture | You, when you join, apply, register or are nominated |
| Contact | Email address, phone number, LinkedIn profile, postal address | You, or the person who nominates you |
| Professional | Organisation, job title, sector, biography, areas of expertise, career history | You, your nominator, or public professional profiles such as LinkedIn |
| Membership | Membership tier, profile content, posts, forum contributions, Needs and Leads, Inner Circle participation, introductions made | You, through community.imagine.one |
| Event | Events you register for or attend, dietary requirements, accessibility needs, photos and recordings taken at events | You, our event platform Luma, and our event photographers |
| Call recordings | Video and audio recordings of community calls hosted on our platform, with comments and shared documents | You and other participants, through our Zoom integration |
| Financial | Billing name and address, payment status and transaction history. We never see or store your full card details | You, through our payment provider Stripe |
| Marketing | Your newsletter and communication preferences, and whether you open or click our emails | You, and our CRM platform HubSpot |
| Technical | IP address, browser and device type, pages visited, how you arrived at our site | Cookies and similar technologies, if you consent (see our Cookie Policy) |
Nominations. If someone nominates you to become an IMAGINE Leader, they will give us your name, contact details and professional information. We will contact you to let you know and you can ask us to delete this information at any time.
Special category data. We do not ask for sensitive data such as ethnicity or health information as a matter of course. Where we do, for example dietary or accessibility needs for an event, or optional diversity questions in a survey, we will only collect it with your explicit consent or where you choose to provide it, and only use it for that purpose.
If you do not provide data. Some information is needed to provide our services, for example your email address to manage your membership. If you do not provide it, we may not be able to offer you that service.
How we use your data
We only use your personal data where the law allows us to. The table below sets out what we use it for and the lawful basis we rely on under UK GDPR.
| Purpose | Lawful basis |
|---|---|
| Assessing nominations and applications to join IMAGINE | Legitimate interests (building a curated community of leaders) |
| Setting up and managing your membership, including your profile on community.imagine.one | Contract |
| Taking membership payments and managing billing | Contract; legal obligation (tax and accounting records) |
| Matchmaking and making introductions to other members | Contract; legitimate interests (delivering the core value of the community) |
| Registering you for events and managing attendance | Contract; legitimate interests |
| Recording community calls and sharing them with members | Legitimate interests (giving members who could not attend access to the conversation). You will always be told before a call is recorded |
| Using event photos and videos in our communications | Legitimate interests; consent where we feature you prominently or by name |
| Sending you our newsletter and updates about IMAGINE | Consent, or legitimate interests where you are an existing member or contact, with an easy way to opt out in every email |
| Analysing how our websites are used to improve them | Consent (through our cookie banner) |
| Running and securing our websites and systems | Legitimate interests |
| Responding to enquiries and requests | Legitimate interests |
| Complying with legal and regulatory requirements | Legal obligation |
Where we rely on legitimate interests, we have weighed our interests against your rights and you can object at any time. Where we rely on consent, you can withdraw it at any time by emailing leaders@imagine.one or using the unsubscribe link in our emails.
We do not sell your personal data, and we do not share it with third parties for their own marketing. We do not use your data to make decisions about you that are based solely on automated processing.
Who we share your data with
We use trusted service providers to run IMAGINE. They only process your data on our instructions and under contracts that require them to keep it secure.
| Provider | What they do for us |
|---|---|
| HubSpot | Our CRM, contact forms, newsletter and website analytics |
| Lovable and Supabase | Hosting our websites and the database behind community.imagine.one |
| Stripe | Processing membership payments |
| Luma | Event invitations and registrations |
| Zoom | Video calls and call recordings on our community platform |
| Microsoft 365 | Email, documents and file storage |
| Notion | Internal records of our community of leaders |
| Nexa Cognition | Our technology partner, who helps us configure and maintain these systems |
Other members. Information you add to your profile on community.imagine.one is visible to other members. Recordings of group calls are visible to members of that group. Recordings of one to one calls are visible only to the participants and our administrators.
Event partners. For events we co-host, such as with the Financial Times, we may share your name, title and organisation with the co-host so they can manage the guest list. We will tell you who the co-host is when you register.
Professional advisers and authorities. We may share data with our lawyers, accountants and insurers, or where the law requires us to, for example with HMRC or the police.
Business changes. If IMAGINE is restructured or sold, your data may transfer to the new owner, who will be bound by this policy.
International transfers
Some of our providers are based in, or store data in, the United States and other countries outside the UK. Where we transfer data outside the UK, we make sure it is protected by one of the safeguards recognised by UK law: an adequacy decision, including the UK Extension to the EU US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. You can ask us for more information about these safeguards.
How long we keep your data
We keep personal data only for as long as we need it for the purposes above.
| Data | How long we keep it |
|---|---|
| Member records and profiles | For the length of your membership, then 2 years so we can stay in touch as alumni, unless you ask us to delete them sooner |
| Payment and billing records | 6 years after the end of the financial year they relate to, as required by UK tax law |
| Nominations and applications that do not proceed | 2 years |
| Newsletter subscribers | Until you unsubscribe |
| Call recordings | For the life of the community platform, unless a participant asks for a recording to be removed |
| Website analytics | Up to 13 months |
We may keep data longer if we need it to deal with a complaint or legal claim. We may also anonymise data so it can no longer identify you and use it for statistics.
Keeping your data secure
We use appropriate technical and organisational measures to protect your data, including access controls, encryption in transit and limiting access to staff and partners who need it for their work. If a data breach is likely to put you at risk, we will tell you and the ICO as the law requires.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct data that is wrong or incomplete
- ask us to delete your data
- ask us to restrict how we use your data
- object to us using your data, including for direct marketing
- ask us to transfer your data to you or another organisation
- withdraw your consent at any time, where we rely on consent
To use any of these rights, email leaders@imagine.one. There is usually no fee. We will respond within one month, and may ask you to confirm your identity first.
Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we will let members know by email.
Last updated: 4 November 2026