Privacy Notice

Imperium Group Holdings LLC is the controller of personal information collected through this website. We are a Wyoming limited liability company with our registered address at 30 N Gould St Ste N, Sheridan, WY 82801, United States. Imperium builds and runs the AI Operating System for established businesses in the United Kingdom, Southeast Asia and elsewhere.

You can reach us about anything in this notice at alex@imperium-growth.com.

We collect information in four ways.

• Information you give us. When you email us, book a walkthrough, request an AI audit at audit.imperiumos.ai, or sign in to ARX at app.imperiumos.ai, you provide details such as your name, work email, company, role and what you tell us about your business. The walkthrough page on this website itself stores nothing. It hands you to the audit. The newsletter field sends the address you type to beehiiv, which sends the newsletter, and nothing else on the site stores what you type.
• Information collected automatically. Our hosting provider records standard server logs for every request: IP address, browser and device type, the page requested, the referring page and the time. We use these to keep the site running and secure. We never copy the IP address out of those logs into anything else.
• How the site is used. Three tools measure how pages, films and buttons are used: Plausible, Microsoft Clarity and our own event log. What each records, and where each runs, is set out in the next two sections.
• Video playback. Films on this site are streamed through Mux. When you press play, Mux receives playback events (start, pause, seek, buffering, completion), your browser and device type, an approximate location derived from your IP address on Mux’s side, and the random viewer identifier described below, so that we can tell one viewer from another when we look at how films perform. Mux keeps that viewing data for 100 days. In the countries in the third group below the viewer identifier is left out and nothing about playback is sent to Mux’s analytics. Where a film is not yet on Mux, it plays from YouTube’s privacy-enhanced embed (youtube-nocookie.com), and Google’s own privacy policy applies to that playback.

Everything the site or its providers place in your browser, and what each tool records.

• Plausible (plausible.io) counts page views, referrers, country, device type and the buttons people press, in aggregate. It sets no cookies and stores nothing in your browser, and it cannot single you out. It runs for every visitor.
• Microsoft Clarity records how pages are used: scrolling, clicks, taps and cursor movement, which it turns into heatmaps and into recordings of individual visits that we can replay. It sets two cookies on this site, _clck (a random Clarity user id, kept for a year) and _clsk (links the pages of one visit, kept for a day). Microsoft also sets cookies on its own domains (CLID, MUID, ANONCHK, MR and SM) that are listed in its cookie list. Anything you type into a field is masked before it leaves your browser, as are numbers and email addresses on the page. Recordings are kept on Microsoft’s side for 30 days. Clarity runs only in the countries in the first two groups in the next section, and in the second group only after you have seen a one-line notice.
• Our own event log records which pages you open, how far and how fast you scroll, which sections stay on screen, which links, buttons and panels you press, when you switch tabs and whether you come back, whether the page you asked for exists, whether a script failed, how quickly the page loaded, and for films which one you play and where you pause, seek and stop. Each event carries the page, the time, a random session id (imp_sid, session storage, gone when the tab closes), the random viewer id (imp_vid, local storage), your country as a two-letter code, and whether you are on a phone, a tablet or a desktop. It never records what you type, your IP address, your name, or anything from any account you are signed in to. Events are kept for 13 months and then deleted. The log runs only in the countries in the first two groups.
• Two more values in local storage: imp_seen, the date of your last visit, which tells a returning visitor from a new one, and imp_notice, that you have seen the notice. Both stay until you clear site data.
• The tier cookie holds one word: which of the three groups below the site put you in, so the page knows what it may run. It is set on every visit, lasts a day, and contains nothing about you. It is the only cookie this site sets itself.
• Mux, and YouTube where used, may set their own storage in the course of streaming video. They are governed by those providers’ policies.

Our host passes us the country your connection comes from as a two-letter code. We never see or keep the address itself. The code puts you in one of three groups.

• First group. Singapore, the Philippines, New Zealand, India and the United States outside California. Everything described above runs.
• Second group. Australia, Hong Kong, Thailand, Indonesia, Malaysia, the United Arab Emirates and California. The event log runs. Clarity starts only after a one-line notice has been shown at the foot of the page.
• Third group. Everywhere else, including the United Kingdom, the European Economic Area, Switzerland, China, Vietnam, Saudi Arabia, Qatar, South Africa, Nigeria and Kenya. No Clarity, no event log, no Mux viewing data. Plausible’s page count still runs because it stores nothing on your device and cannot identify you. Films still play.

If your browser sends the Global Privacy Control signal, we treat you as the third group wherever you are.

We use the information described above to:

• respond to your enquiries and arrange walkthroughs and audits
• deliver, operate and secure the website and our services
• see which pages, films and sections hold attention and which do not, so we can improve them
• find broken pages, failed scripts and slow loads
• meet legal and regulatory obligations and enforce our terms

We do not sell personal information, we do not use it for advertising, and we do not use it for automated decisions that have a legal or similarly significant effect on you.

Where the UK GDPR or the EU GDPR applies to you, we rely on the following legal bases:

• Legitimate interests in running, securing and improving the website and in understanding how our pages and films are used
• Contract, or steps taken at your request before a contract, when you ask us for a walkthrough, an audit or a proposal
• Consent, where the law requires it, which you can withdraw at any time. Visitors from the United Kingdom and the European Economic Area are in the third group above, where nothing that needs consent runs.
• Legal obligation, where we must keep or disclose information by law

We share information only with the providers that make the website and our services work, and only to the extent needed for them to do so. At the date of this notice these are Vercel (hosting and server logs), Plausible Insights OÜ (aggregate visit counts, servers in the European Union), Microsoft (Clarity), Mux (video streaming and playback analytics), Supabase (the database that holds our event log, in the United States), beehiiv (the newsletter), Google (YouTube playback where used) and GitHub (the public ARX repository). Each processes information under its own terms and a data processing agreement with us.

We may also disclose information where the law requires it, to protect our rights or the safety of others, or as part of a merger, financing or sale of the business. In that case we will require the recipient to honour this notice.

Imperium is based in the United States and our providers operate globally, so information collected from visitors in the United Kingdom, the European Economic Area or elsewhere is transferred to and processed in the United States. Where such transfers are subject to data protection law, we rely on recognised safeguards, including standard contractual clauses and the UK International Data Transfer Addendum, in our agreements with providers.

• Our event log: 13 months from the event, then deleted by a nightly job.
• Clarity recordings and heatmaps: 30 days on Microsoft’s side.
• Mux viewing data: 100 days on Mux’s side.
• Plausible: aggregate counts, never per person, kept for as long as we run the site.
• Server logs: a short rolling period at our hosting provider, for security and diagnostics.
• Correspondence: for as long as we have a business need for it, then deleted. Information gathered during a client engagement is kept for the term set out in that agreement.

You can ask us to delete correspondence at any time and we will, unless we are required to keep it.

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to have it deleted, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent where we rely on it. To exercise any of these, email alex@imperium-growth.com. We will respond within one month.

You can delete the event log’s copy of your data yourself. The button below sends this browser’s viewer id to us, removes every event recorded under it, and clears the id from your browser. Clarity and Mux hold their copies for the periods above. To have those removed sooner, email us.

If you are in the United Kingdom you may also complain to the Information Commissioner’s Office. If you are in the European Economic Area you may complain to your local supervisory authority. We would ask that you contact us first so that we can try to resolve the matter.

The website is served over HTTPS. Client systems we build are installed inside the client’s own environment, and access to them is governed by the client agreement. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take measures appropriate to the sensitivity of the information we hold. Our security practices are described on the Security page of this website.

This website is for businesses and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We will update this notice when our practices change, and the date at the top will show when. Material changes will be flagged on this page. Continued use of the website after a change means you accept the updated notice.