Privacy Policy
Privacy Policy
Last updated: 19 June 2026
Introduction
twotwentyseven ("we", "our", "us") is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, engage our services, subscribe to our marketing communications, or otherwise interact with us.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy legislation.
Who We Are
twotwentyseven Ltd is the data controller responsible for your personal information.
Data Controller: twotwentyseven Ltd
Website: https://twotwentyseven.com
Email: hello@twotwentyseven.com
If you have any questions about this Privacy Policy or how we process your data, please contact us using the details above.
Information We Collect
Information You Provide
We may collect and process:
-
Name
-
Email address
-
Telephone number
-
Company name
-
Job title
-
Project requirements
-
Any information you submit through contact forms
-
Information provided when applying for employment opportunities
Information Collected Automatically
When you visit our website, we may automatically collect:
-
IP address
-
Browser type and version
-
Device information
-
Operating system
-
Referring website
-
Pages viewed
-
Time spent on pages
-
Website interactions
-
Cookie and analytics data
This information helps us improve our website, services and user experience.
How We Use Your Information
We may use your personal information to:
-
Respond to enquiries
-
Provide proposals and quotations
-
Deliver our services
-
Manage client relationships
-
Process job applications
-
Send marketing communications where permitted
-
Improve website performance and user experience
-
Monitor website usage and analytics
-
Maintain website security
-
Comply with legal obligations
Legal Basis for Processing
We process personal data under one or more of the following legal bases:
Legitimate Interests
To operate and improve our business, website and services.
Contractual Necessity
To provide services you request or enter into a contract with us.
Consent
Where you have explicitly consented to receive marketing communications or accept optional cookies.
Legal Obligations
Where we are required to retain or disclose information by law.
Marketing Communications
If you subscribe to our newsletter or request information from us, we may send you marketing communications about our services, insights, events and updates.
You may unsubscribe at any time by:
-
Clicking the unsubscribe link in any email
-
Contacting us directly
We will never sell your personal information to third parties.
Cookies and Analytics
Our website uses cookies and similar technologies to improve functionality, understand visitor behaviour and measure performance.
These may include:
Essential Cookies
Required for the website to function properly.
Analytics Cookies
Used to understand how visitors interact with our website.
Marketing Cookies
Used to measure campaign effectiveness and deliver relevant advertising.
You can manage cookie preferences through your browser settings or our cookie consent banner.
Third-Party Services
We may use trusted third-party providers to operate our website and business, including:
-
Google Analytics
-
Google Workspace
-
Microsoft 365
-
HubSpot
-
Klaviyo
-
Shopify
-
LinkedIn
-
Meta
-
Cloudflare
-
AWS
-
Other software and hosting providers required to deliver our services
These providers may process personal information on our behalf and are required to maintain appropriate security measures.
Sharing Your Information
We may share personal information:
-
With service providers acting on our behalf
-
Where required by law or regulation
-
To protect our legal rights
-
During business restructuring, acquisition or sale
We do not sell personal data.
International Transfers
Some of our service providers may process information outside the United Kingdom.
Where this occurs, we ensure appropriate safeguards are in place, including:
-
UK International Data Transfer Agreements
-
Adequacy decisions
-
Standard contractual clauses
Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting and regulatory requirements.
Retention periods may vary depending on the type of information and our relationship with you.
Your Rights
Under UK GDPR, you may have the right to:
-
Access your personal information
-
Correct inaccurate information
-
Request deletion of your information
-
Restrict processing
-
Object to processing
-
Request transfer of your information
-
Withdraw consent at any time
To exercise any of these rights, please contact us at hello@twotwentyseven.com.
Security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
Third-Party Links
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies before providing personal information.
Changes to This Policy
We may update this Privacy Policy from time to time.
Any changes will be published on this page and the "Last Updated" date will be amended accordingly.
Complaints
If you are unhappy with how we process your personal information, please contact us first so we can attempt to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Contact Us
twotwentyseven Ltd
Email: hello@twotwentyseven.com
Website: https://twotwentyseven.com