Privacy Policy

  1. Within this Notice
    1. ‘Company’ means Theorytwenty7 Marketing Limited,
      1. The Kiln, Copenhagen Street, Worcester, WR1 2HB, United Kingdom
    2. The visitor/user of the Website is referred to as ‘you’ or ‘Your’.
    3. ‘Personal Information’ means any information from which you can be personally identified, including online identifiers like email address and I.P address (a digital address which identifies the device you access the internet with).
    4. ‘Website’ means any subdomain on theorytwenty7.io
  2. The Company is a Data Controller under the General Data Protection Regulations and is committed to safeguarding the privacy of website visitors and provides.
  3. This Notice is to ensure that you have all the information regarding how the Company may collect and process your Personal Information when using our Website and to comply with our obligations and your rights created by applicable law.
  4. Using our Website will be accepted as an affirmative action by you to confirm that you are over 13 years of age and agree to this Privacy Notice. If you are under 13 years of age or do not agree with anything within in this Privacy Notice, you should not use our Website.
  5. The Company takes pride in keeping up to date with advances in technology and legal developments, this can result in changes to this privacy notice so you should refer to them on a regular basis to ensure that you are aware of our policies that are current at the time of your visit to our Website.
  6. You can be assured your Personal Information will only be collected, processed and stored in accordance with this notice.
    • Your Personal Information
  7. When visiting the Website the Company may collect the following information –
    1. IP address
    2. Country
    3. Browser
    4. Operating system
    5. Screen resolution
    6. Web pages visited
    7. Forms submitted
    8. Click and mouse movements
    9. Searches conducted
    10. Videos viewed
  8. This information is collected by third-party processors who generate reports and statistics about the, which helps us to
    1. monitor usage and performance of the Website;
    2. maintain a Website that is user-friendly and compatible with popular equipment and software;
    3. Analyse and maintain the security of the Website and trace inappropriate or malicious use.
  9. Where a third party is used to process your Personal Information who is based outside the EU the Company shall ensure that the third party meets standards in relation to the security of your Personal Data which are consistent with the General Data Protection Regulations, for example a third party based in the U.S.A must subscribe to the U.S. Privacy Shield.
  10. The Company shall not use automated processing of your Personal Information to form or make decisions.
  11. The Company will take reasonable technical and organizational precautions to prevent the loss, misuse or alteration of Personal Information, including storing of data on a secure, password and firewall protected servers.
  12. In the event of a breach of the security measures taken to protect your personal information the Company will inform you as soon as is reasonably practical.
  13. In order that the Company can provide you with an optimum service and to ensure that all obligations under UK Data Protection legislation are complied with, you must let the Company know if any Personal Information which you have provided changes or becomes inaccurate or out of date.
    • Advertisements
  14. The Company may permit third parties to advertise on the Website. These third parties may use tracking features to enable them to record the number of views, clicks and the referral source.
  15. If you visit an advertiser’s website they will have their own Privacy Notice which you should read and accept.
    • Enquiries
  16. If you make an enquiry about any services or request information using the Website, you are required to provide us with your name, business name (where appropriate) and an email address.
  17. This Personal Information is processed
    1. For a legitimate interest in order that the Company can respond to your enquiry or provide the requested information;
    2. By consent to send commercial communications including the availability of new products, services, events, special offers and discounts, newsletters and notifications, where you request or permit such communications
    • Providing Services
  18. If we agree to enter a contract to provide Services, we will use your Personal Data
    1. For the administration and performance of the contract.
    2. Deliver any services to you.
    3. For the recording of financial transactions.
    4. For internal records that we are legally obliged to keep.
    5. To deal with complaints, disputes and legal actions.
    6. Where necessary to protect the vital interest of you or another person;
    7. To send commercial communications from us (including the availability of new products or Services, events, special offers and discounts, newsletters, notifications), where you give your consent to receiving such communications.
    8. To send commercial communications from selected partners, associates or affiliates, but only where you expressly request or consent to such communications.
  19. We use third party processors, such as computer software, when processing your Personal Data.
  20. If any of our processors are based outside of the E.U. we shall ensure that the country provides adequate security measures for the storage of your Personal Data, for example if the processor is based in the U.S.A. they will need to subscribe to the U.S. Privacy Shield which provides similar provisions to the European standards and requirements; in addition the processor will need to provide, or be subjected to suitable and appropriate contractual obligations and guarantees.
    • Processing payments
  21. When making any payments of invoices for providing Services, all payments are processed by your bank or payment processing merchant. The Company does collect, retain or store any payment card details.
    • Sharing your Personal Information
  22. The Company may share your Personal Information with our employees, officers, agents, consultants, suppliers or subcontractors only insofar that it reasonably necessary
    1. In order to deal with an enquiry or to provide requested information;
    2. To consider whether to enter a contract with you;
    3. For the performance of a contractual obligation between you and the Company;
    4. Under a legitimate interest that is stated within this Privacy Notice;
    5. Required by Law or order of a Court;
    6. Necessary for the prevention of fraud or other criminal activity;
    7. For the purposes of establishing, exercising or defending legal rights;
    8. Required to by a purchaser in the event of selling the Company;
    9. Otherwise with your consent, request or instruction.
    • Data retention
  23. Where an enquiry does not progress into a contract to provide services or you do not request or consent to commercial communications the Company shall not retain your Personal Information for more than 2 years.
  24. If we engage in a contract to provide Services to you, the Company shall retain some records for a period not exceeding 2 years after the Services have ended where appropriate or required by law.
    • Your rights
      Withdraw consent
  25. Where processing of your Personal Information is based on your consent you may withdraw your consent at any time by informing the Data Controller or by using a link provided for that purpose in each commercial communication that the Company sends.
  26. Upon receipt of a notice withdrawing your consent to process your Personal Information the Company shall stop processing the Personal Information except:
  27. Where you withdraw consent the Company shall inform all third parties (if any) that your consent to processing has been withdrawn.
    • Restrict processing
  28. The Company shall restrict the processing of your Personal Information if the following circumstances arise
    1. Where you contest the accuracy of the Personal Information, the Company shall restrict the processing until the accuracy of the Personal Information has been verified.
    2. Where you have objected to the processing where it was necessary for the performance of a public interest task or purpose of legitimate interests, and the Company is considering whether the legitimate grounds override your grounds.
    3. When processing is unlawful, you oppose erasure, and you request restriction instead.
    4. If the Company no longer need the Personal Information but you require the information to establish, exercise or defend a legal claim.
  29. Where processing of your Personal Information is restricted, the information shall be stored but no further processing shall occur and the Company shall
    1. inform any third party to whom your Personal Information has been disclosed or shared that the Information is restricted;
    2. inform you when any restricted period comes to an end.
    • Access to Personal Information
  30. You may require the Company to provide you with
    1. Confirmation whether or not your Personal Information is being processed; and
    2. Access to any Personal Information that the Company holds about you.
  31. The Company shall provide the requested information within one month of receipt of the request.
  32. This information will be provided free of charge except where a request is manifestly unfounded or excessive (for example it is a repetitive request, or where the Company needs to process large amounts of data) in which case the Company shall make a charge for reasonable administrative costs in dealing with the request or refuse to respond and provide a justifiable reason for refusing to respond which you may seek judicial remedy or complain to the Information Commissioners Office.
  33. Any Personal Information that you provide for the performance of a contract which is stored electronically shall be held in a portable format (readable in a format that will be commonly used on other computer systems) and the Company shall provide this information to you or directly to another organization (where technically feasible) upon your request.
  34. As the Company takes the issue of protecting your Personal Information seriously, the Company shall follow strict storage and disclosure procedures which mean you may occasionally be required to provide proof of identity prior to disclosing such information.
    • The right to rectify errors
  35. Where any Personal Information processed is inaccurate or incorrect, you have the right to instruct the company to correct it.
  36. The Company may, where the Company believes that the Personal Information is correct ask you for evidence to clarify or confirm that the Personal Data is wrong.
    • Right to erase Personal
  37. You have the right in certain circumstances to instruct the Company to erase your Personal Information where
    1. The Personal Information is no longer necessary in relation to the purpose for which it was originally collected or processed.
    2. The Personal Information was processed with your consent, and you withdraw your consent.
    3. You object to the processing and there is no overriding legitimate interest for continuing the processing.
    4. The Personal Information was unlawfully processed or obtained.
    5. The Personal Information has to be erased in order to comply with a legal obligation.
    6. The Personal Information is processed in relation to the offer of information services to a child.
  38. Where you have the right and you issue an instruction to erase your Personal Information the Company shall use all resorts to
    1. Inform all third parties to whom the Company has disclosed or shared your Personal Information of the requirement to erase your Personal Information which they hold;
    2. In the event that your Personal Information has been published online the Company shall endeavor to ensure that any links or references are also removed;
  39. The Company may refuse to erase your Information only
    1. The processing is necessary for the performance of a contract;
    2. To exercise the right of freedom of expression and information;
    3. To comply with a legal obligation;
    4. The processing is for the performance of a public interest task or exercise of official authority;
    5. For public health purposes in the public interest;
    6. Archiving purposes in the public interest, scientific research, historical research, or statistical purposes; or
    7. The exercise or defense of legal claims.
  40. You can exercise any of your rights by contacting the Data Controller at The Kiln, Copenhagen Street, Worcester, WR1 2HB, United Kingdom or hello@theorytwenty7.io with the subject “Data protection rights”