Privacy, stated plainly.

Who is responsible

twntysx is a trading name of 2613 VENTURES LTD (company number 14960965), which is the controller for personal information collected through this website. Its registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. For privacy questions or to exercise your rights, contact hi@twntysx.com.

Information we collect

If you use the contact form, we receive the name, email address, company name (if supplied) and message you submit. If you email us directly, we receive your address, message and any information you choose to include. Please do not send sensitive personal information, credentials or confidential client material.

When you visit the site, Vercel, our hosting provider, processes technical request data needed to deliver and protect it. This can include your IP address, requested URL, date and time, browser or device information, approximate location, and security and diagnostic logs.

When you use the contact form, Cloudflare Turnstile processes a security-verification token and signals including your IP address, TLS fingerprint, user-agent header, and the widget's site key and associated origin. It uses those signals to distinguish people from automated abuse. Cloudflare does not receive the name, email, company or message you enter in the form.

We store your analytics choice and its timestamp in local storage on your device. If you opt in to Vercel Web Analytics, it records page-view information such as the page path, timestamp, referrer, filtered query parameters, approximate location, browser, operating system and device type. Vercel states that these analytics records are anonymised and are not associated with an individual or stored IP address. We do not send custom events, form content or contact details to analytics.

How and why we use it

We use enquiry information to respond, manage the conversation and decide whether we can help. Our lawful basis is our legitimate interest in responding to business enquiries and developing prospective client relationships. Where you personally ask us to take steps before entering into a contract with you, the processing may also be necessary for those steps.

We use technical request data to deliver, troubleshoot and secure the site and prevent misuse, based on our legitimate interests in operating a reliable service. Optional analytics runs only with your consent. You can withdraw that consent at any time through Cookie preferences in the footer. We do not use website data for automated decision-making or profiling.

We use Turnstile to protect the contact route and prevent automated misuse, based on our legitimate interests in operating a secure, reliable website and responding to genuine enquiries.

Providing information through the form is not a statutory or contractual requirement. The form cannot send without a name, email address and message; you can instead contact us directly by email.

Service providers and transfers

Vercel hosts the site, runs the contact endpoint and provides opt-in Web Analytics. Resend receives the validated form fields and sends them as a plain-text email to our business inbox. Google Workspace hosts that inbox and processes the enquiry when we receive and reply to it. The website does not create a separate enquiry database. These providers may use approved subprocessors.

Cloudflare processes Turnstile signals on our behalf when it protects this form. It also acts as a controller when it uses those signals to improve Turnstile's bot-detection capabilities. See the Cloudflare Turnstile Privacy Addendum (opens in a new tab) for details.

These services may process information outside the United Kingdom, including in the United States. Where a restricted transfer occurs, we use the safeguards in our provider agreements, which may include the UK Extension to the EU–US Data Privacy Framework, the UK Addendum to standard contractual clauses, or another mechanism recognised under UK law. Contact us for a copy of, or more information about, the applicable safeguards. We do not sell personal information collected through this website.

Retention and security

Resend retains sent-email data for 30 days on its standard plans. We keep the delivered enquiry in our business inbox only as long as needed to respond and manage a prospective or active client relationship. Enquiries that do not lead to work are deleted within 24 months of our last substantive contact, unless a limited record is needed to establish, exercise or defend legal claims. If an enquiry leads to a client relationship, relevant correspondence may be kept for up to six years after that relationship ends where needed for legal, tax, accounting or dispute-resolution purposes.

The local-storage preference expires after 12 months. Vercel's request-derived Analytics visitor hash resets every 24 hours. Vercel retains runtime logs and analytics records within the limits and reporting window of our active plan.

We limit access to people and providers who need it and use technical and organisational measures appropriate to the risk. No method of internet transmission or electronic storage is completely secure.

Your rights

Subject to applicable law, you may ask for access to, correction of or deletion of your personal information; object to or restrict our use of it; request portability; or withdraw analytics consent. Contact us at hi@twntysx.com. You may also complain to the UK Information Commissioner's Office at ico.org.uk (opens in a new tab).

Your right to object: where we rely on legitimate interests, you can object to that processing based on your particular situation. We will stop unless we have compelling legitimate grounds to continue or need the information for legal claims.

Changes to this notice

We may update this notice when our website, service providers or data practices change. The updated date at the top shows when it was last revised. We review this notice against the live deployment configuration before it takes effect.