Privacy Policy | Twenty Six Insights

Last updated June 2026

1. Who We Are

Twenty Six Insights is a commercial finance consultancy providing advisory services to sports and creative businesses across the UK.

For the purposes of UK data protection law, Twenty Six Insights is the data controller in respect of any personal data we collect and process.

If you have any questions about this policy or how we handle your personal data, please contact us at hello@twentysixinsights.com.

2. What Data We Collect

We may collect and process the following personal data:

From website visitors:

IP address and device information, collected automatically via cookies and analytics tools
Pages visited, time spent on the site and how you arrived at the site, collected via Google Analytics

From enquiries and contact forms:

Your name, email address, business name and any other information you choose to include in your message

From clients:

Contact details including name, job title, email address and telephone number
Business information including financial data, trading information and other commercially sensitive information provided in the course of the engagement
Invoice and payment records
Correspondence and communications relating to the engagement

3. How We Use Your Data

We use personal data for the following purposes:

Website visitors:

To understand how our website is used and improve its content and performance
To monitor traffic and analyse visitor behaviour using Google Analytics

Enquiries:

To respond to your message and answer any questions you have raised
To follow up where relevant if you have expressed an interest in our services

Clients:

To deliver the agreed commercial finance services
To issue invoices and manage payment
To communicate with you about the engagement
To meet our legal and regulatory obligations

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing personal data:

Contract — where processing is necessary to perform our services or take steps prior to entering into an agreement with you
Legitimate interests — for website analytics and improving our services, where our interests are not overridden by your rights
Legal obligation — where we are required to retain records for tax or regulatory purposes

5. Cookies and Google Analytics

Our website uses cookies — small text files placed on your device — to help us understand how visitors use the site.

We use Google Analytics, a web analytics service provided by Google LLC. Google Analytics collects information about your use of our website, including pages visited, time spent and how you arrived at the site. This information is processed by Google and used to generate reports for us about website activity.

Google Analytics data is anonymised and does not identify you personally. For more information about how Google uses data, visit google.com/policies/privacy/partners.

You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

When you first visit our website you will be asked to consent to the use of non-essential cookies. You can withdraw your consent at any time by adjusting your browser settings or using our cookie preferences tool.

6. Who We Share Your Data With

We do not sell, rent or trade your personal data with any third party.

We may share your data with the following third parties only where necessary:

Google LLC — for website analytics via Google Analytics
DocuSign — for electronic document signing
Our accountant or legal advisers — where required to meet our legal or financial obligations
HMRC or other regulatory authorities — where required by law

All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.

7. How Long We Keep Your Data

We retain personal data for the following periods:

Website visitor data — Google Analytics data is retained for 26 months by default, in accordance with Google's standard settings
Enquiry data — we retain contact and enquiry data for 12 months from the date of last contact, unless you become a client
Client data — we retain all client records, including financial data, invoices and correspondence, for a minimum of 6 years following the end of the engagement, in accordance with HMRC requirements and the Limitation Act 1980
After retention periods expire — personal data is securely deleted or anonymised

8. Your Rights

Under UK GDPR you have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate or incomplete data
Right to erasure — to request deletion of your data, subject to our legal obligations to retain certain records
Right to restrict processing — to ask us to limit how we use your data in certain circumstances
Right to data portability — to receive your data in a structured, commonly used format where technically feasible
Right to object — to object to processing based on legitimate interests

To exercise any of these rights, please contact us at hello@twentysixinsights.com. We will respond to all valid requests within 30 days.

9. Data Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or disclosure.

Where we use third party tools to process data on our behalf — such as Google Analytics and DocuSign — we ensure those providers maintain appropriate security standards.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO without undue delay in accordance with our legal obligations.

10. Changes To This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page will always show when it was last updated. We encourage you to check this page periodically.

If we make any significant changes that affect how we handle your personal data, we will notify active clients directly by email.

11. Contacts and Complaints

If you have any questions or concerns about how we handle your personal data, please contact us at:

Email: hello@twentysixinsights.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113