Privacy Policy
Last Updated: 8 November 2025
This Privacy Policy explains how 23 Insights Ltd (“we”, “us”, or “our”) collects, uses, discloses, and protects your personal data when you visit our website www.23insights.co.uk, engage with our services, or otherwise interact with us. We are committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Controller and Contact Information
23 Insights Ltd is the data controller responsible for your personal data. We are registered in England and Wales under company number 15657803, with our registered office located at 54 Sun Street, Waltham Abbey, EN9 1EJ, United Kingdom.
If you have any questions or concerns about this Privacy Policy or how your personal data is handled, you may contact us by email at optout[at]23insights.co.uk.
We are not required to appoint a Data Protection Officer under UK GDPR. However, we take data protection seriously and have designated internal personnel to oversee compliance and respond to data protection queries.
2. Personal Data We Collect
We collect personal data that you provide directly to us, such as your name, email address, phone number, job title, company name, and any other information you submit through our contact forms, email communications, or service requests.
In addition, we automatically collect certain technical data when you visit our website. This includes your IP address, browser type, device information, operating system, and usage data such as pages visited, time spent on the site, and referral URLs. We may also collect approximate location data derived from your IP address or device settings, where permitted.
We use cookies and similar tracking technologies to enhance your experience, analyse usage patterns, and deliver relevant content. Details about our use of cookies are provided in our separate Cookie Policy.
3. Legal Bases for Processing
We process your personal data under the following lawful bases as defined by UK GDPR:
We rely on your consent when you voluntarily subscribe to newsletters, marketing communications, or provide information through our website. You may withdraw your consent at any time by contacting us or using the unsubscribe options provided.
We process data as necessary to perform a contract with you, such as delivering services you have requested or responding to your enquiries.
We may process data to comply with legal obligations, including tax reporting, fraud prevention, and regulatory requirements.
We may also process data based on our legitimate interests, such as improving our services, maintaining website security, and conducting business analytics, provided that such interests are not overridden by your rights and freedoms.
4. Purposes for Processing Personal Data
We process your personal data for several purposes, including but not limited to:
Providing and managing the services or information you request from us.
Responding to your enquiries, feedback, or support requests.
Sending you updates, newsletters, or promotional materials, where you have opted in to receive such communications.
Analysing website usage and user behaviour to improve our content, functionality, and user experience.
Ensuring the security and integrity of our website and systems.
Complying with applicable laws and regulations, including financial and tax reporting obligations.
5. Sharing of Personal Data
We may share your personal data with trusted third-party service providers who assist us in operating our website, delivering services, managing communications, and analysing data. These providers are contractually obligated to protect your data and use it only for the purposes specified by us.
In the event of a business transfer, such as a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to appropriate safeguards.
We may also disclose your personal data to legal authorities or regulators if required to comply with legal obligations, enforce our rights, or protect the safety of our users and the public.
6. International Data Transfers
At present, we do not transfer personal data outside the United Kingdom or the European Economic Area (EEA). If such transfers become necessary in the future, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO), or transfers to countries with adequacy decisions.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. For example, contact and transactional data may be retained for up to 24 months following your last interaction with us, while anonymised analytics data may be retained for up to 26 months. Financial records may be retained for up to seven years to comply with tax and accounting regulations.
We periodically review our data holdings to ensure that personal data is accurate, relevant, and not retained longer than necessary.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include secure servers, SSL encryption, access controls, staff training, and regular system updates. While no method of transmission or storage is completely secure, we strive to maintain a high level of data protection.
9. Children’s Privacy
Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete such data promptly.
10. Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Should this change in the future, we will notify affected individuals and obtain explicit consent where required.
11. Your Rights Under UK GDPR
You have the following rights under UK data protection law:
You have the right to access your personal data and receive a copy of the information we hold about you.
You have the right to request correction of inaccurate or incomplete data.
You have the right to request erasure of your personal data, subject to legal and contractual obligations.
You have the right to restrict or object to the processing of your data in certain circumstances.
You have the right to withdraw your consent at any time, where processing is based on consent.
You have the right to data portability, allowing you to obtain and reuse your data across different services.
To exercise any of these rights, please contact us at optout[at]23insights.co.uk. We will respond within one calendar month, as required by law.
If you are dissatisfied with our response or believe your data has been processed unlawfully, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). You can contact the ICO via their website at www.ico.org.uk or by phone at 0303 123 1113.
12. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience, analyse website traffic, and deliver personalised content. Our Cookie Policy provides detailed information about the types of cookies we use, their purposes, and how you can manage your preferences.
13. Use of Automated Tools and Artificial Intelligence (AI) to Access Website Content
You may not use automated tools, including bots, crawlers, scrapers, or artificial intelligence (AI) systems, to access, extract, copy, or otherwise interact with the content on this website without our prior written consent.
This includes, but is not limited to:
Using AI models to systematically extract or reproduce content for training, commercial use, or redistribution.
Employing automated systems to monitor, analyze, or replicate website structure, design, or proprietary data.
Accessing the website in a manner that imposes an unreasonable or disproportionately large load on our infrastructure.
We reserve the right to block or restrict access to any automated systems or users found to be in violation of this clause and may pursue legal remedies for unauthorized use of our intellectual property or data.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. Any updates will be posted on this page with a revised “Last Updated” date. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
15. Contacting Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Email: optout[at]23insights.co.uk
Postal Address: 23 Insights Ltd, 54 Sun Street, Waltham Abbey, EN9 1EJ, United Kingdom