Privacy & Cookies Policy

Last updated: May 2026

1. Introduction

Collective Twenty 5 (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This policy explains how we collect, use and protect your personal data when you:

  • Visit our website

  • Contact us

  • Work with us as a client, supplier or partner

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect and process the following information:

Information you provide directly

  • Name, email address and telephone number

  • Company name and business details

  • Details of enquiries, projects and correspondence

  • Billing and payment information (where applicable)

Information collected automatically

  • IP address

  • Browser type and device information

  • Pages visited, time spent on site and navigation paths

  • Referring websites or sources

3. How We Use Your Information

We use your information to:

  • Respond to enquiries and provide quotations

  • Deliver our services and manage client relationships

  • Communicate with you regarding projects or updates

  • Improve our website, services and user experience

  • Comply with legal, regulatory and accounting obligations

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Legitimate interests – to respond to enquiries and improve our services

  • Contractual necessity – to deliver agreed services

  • Legal obligations – for tax, accounting and compliance purposes

  • Consent – for marketing communications where you have opted in

5. Cookies and Analytics

Our website uses cookies to ensure it functions correctly and to help us understand how visitors use it.

Types of cookies we use:

  • Essential cookies – required for core website functionality

  • Analytics cookies – help us understand how visitors interact with our website

We use Google Analytics, which collects information such as:

  • Pages visited

  • Time spent on the site

  • Device, browser and general location data

This information is processed in an anonymised form and used solely to improve our website and services.

Analytics cookies are only set after you have provided your consent via our cookie banner.

Some data collected by Google Analytics may be processed outside the United Kingdom. Where this occurs, appropriate safeguards are in place in accordance with UK data protection law.

You can find out more about how Google uses data from sites that use its services here: https://policies.google.com/privacy

We do not currently use advertising or marketing cookies.

6. Sharing Your Information

We do not sell your personal data.

We may share your information with trusted third-party service providers who help us operate our business, including:

  • Squarespace (website hosting)

  • Google (analytics services)

  • Payment processors and accounting systems

  • Email and project management platforms

All third parties are required to process your data securely and only for authorised purposes.

7. International Data Transfers

Some of our service providers may process data outside the UK.

Where this happens, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses

  • Use of providers with recognised data protection frameworks

Our website is hosted by Squarespace. You can read their privacy policy here: https://www.squarespace.com/privacy

8. Data Retention

We retain personal data only for as long as necessary:

  • Financial records: up to 6 years

  • Client and project data: up to 6 years after completion

  • General enquiries: up to 12 months

9. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, misuse, loss or disclosure.

10. Your Rights

Under UK data protection law, you have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion of your data

  • Restrict or object to processing

  • Withdraw consent at any time

  • Request transfer of your data (where applicable)

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Further information is available at: https://www.ico.org.uk

11. Contact Us

If you have any questions about this policy or your personal data, please contact:

Collective Twenty 5
Unit 6–9 Westerley Crescent
Sydenham
London SE26 5BA
enquiries@collectivetwenty5.com

12. Changes to This Policy

We may update this policy from time to time to reflect legal, operational or regulatory changes. The latest version will always be available on our website.