PRIVACY POLICY

Last Updated: 22 October 2026

 

INTRODUCTION

 23 Insights Ltd, trading as TWENTY3 ("we", "us", or "our"), is committed to protecting your privacy and handling personal information responsibly.

This Privacy Policy explains what information may be collected when you visit our website and how that information is used. This policy applies only to information collected through this website

WHO WE ARE

23 Insights Ltd (Company Number: 15657803), trading as TWENTY3, is a UK-based cultural insights and strategy consultancy.

For the purposes of UK data protection legislation (UK GDPR and Data Protection Act 2018), 23 Insights Ltd is the data controller of personal information collected through this website.

If you have any questions about this Privacy Policy, please contact: Email: hello@23insights.co.uk

INFORMATION WE COLLECT

Information Collected Automatically When you visit this website, certain technical information may be collected automatically by our website hosting provider and analytics services. This may include:

  • IP address

  • Browser type and version

  • Device type

  • Pages visited

  • Date and time of visits

  • Referring website information

This information helps us understand how the website is used, improve its performance, and maintain website security.

Information You Provide If you contact us using the website contact form, subscribe to our newsletter, or communicate with us directly, we may collect:

  • Your name

  • Your email address

  • Any additional information you choose to include in your message or subscription request

We only collect personal information that you voluntarily provide.

HOW WE USE YOUR INFORMATION

We use information collected through this website to:

  • Respond to enquiries submitted through the contact form

  • Communicate with individuals who have contacted us

  • Deliver newsletter or insight updates where you have subscribed

  • Monitor and improve website performance

  • Maintain website security and functionality

  • Comply with legal obligations where required

 We do not sell personal information to third parties.

LAWFUL BASIS FOR PROCESSING

Under UK GDPR, our lawful bases for processing personal information are:

  • Legitimate Interests: Responding to enquiries submitted through the contact form and managing our routine business communications.

  • Consent: Deploying non-essential analytics cookies (via our cookie banner) and sending newsletter updates where you explicitly choose to subscribe. You may withdraw your consent at any time.

 

GOOGLE ANALYTICS

We use Google Analytics to understand how visitors use our website. Google Analytics collects aggregated information such as pages viewed, time spent on pages, device information, and general geographic location derived from IP addresses.

Google Analytics cookies are only set if you grant explicit opt-in consent via our website cookie banner. For more information about how Google processes information, please review Google's privacy policy.

SUBSTACK & NEWSLETTERS

Newsletter subscriptions and publication updates are managed through Substack.

 While 23 Insights Ltd remains the data controller for our subscriber details, Substack acts as a data processor handling technical delivery on our behalf. If you choose to subscribe, your email address is processed by Substack in accordance with its privacy policy. You can withdraw consent and unsubscribe at any time using the link provided at the bottom of every email update.

RETENTION OF INFORMATION

  • Contact Form Submissions: Retained only as long as reasonably necessary to manage and respond to your enquiry. Where no ongoing business relationship results, form submissions are typically deleted within 24 months.

  • Newsletter Subscriptions: Retained until you unsubscribe or request erasure of your details.

  • Analytics & Technical Information: Retained in accordance with the settings and retention policies of our service providers.

 

SHARING OF INFORMATION

We do not sell, rent, or trade personal information.

We share information with trusted third-party service providers solely where necessary to operate the website and services, including website hosting, analytics providers (Google Analytics), and newsletter distribution platforms (Substack). We may also disclose information where required by law or to protect our legal rights.

 

INTERNATIONAL TRANSFERS

Some of our third-party service providers (including Google and Substack) process information outside the United Kingdom, primarily in the United States. Where international transfers occur, appropriate legal safeguards are implemented (such as the UK International Data Transfer Agreement, Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework) in accordance with UK data protection laws

COOKIES

This website uses cookies and similar tracking technologies to support functionality and analyse site usage.

  • Non-essential cookies (such as performance and analytics cookies) are disabled by default and are only activated if you click "Accept" or opt-in via our cookie banner.

  • You can manage, update, or withdraw your cookie preferences at any time using our website cookie settings link or through your browser settings.

For further details, please see our Cookie Policy.

 

DATA SECURITY

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or disclosure. However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

 

YOUR RIGHTS

Under UK data protection law, you have the following rights:

  • Right of Access: Request access to your personal information.

  • Right to Rectification: Request correction of inaccurate or incomplete information.

  • Right to Erasure: Request deletion of your personal information.

  • Right to Restrict or Object: Restrict or object to certain processing activities (including direct marketing).

  • Right to Withdraw Consent: Withdraw consent at any time where processing relies on consent.

We respond to legitimate rights requests free of charge within one calendar month. To exercise any of these rights, please contact us at hello@23insights.co.uk.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at https://ico.org.uk or by calling 0303 123 1113.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be published on this page together with an updated revision date.

 

CONTACT

If you have any questions about this Privacy Policy or how information is handled through this website, please contact:

TWENTY3 Trading name of 23 Insights Ltd Company Number: 15657803 Email: hello@23insights.co.uk