Privacy Policy
Last updated: 27 March 2026
At 20 Degrees (“we”, “us”, “our”), we are committed to protecting and respecting your privacy. This policy explains how we use any personal data collected through our website: www.20degrees.co.uk
1. Who we are
20 Degrees is a research and evaluation business.
Data Controller:
20 Degrees Consulting Ltd
Lambourne House, Lambourne Crescent, CARDIFF CF14 5GL
Email: DPO@20degrees.co.uk
We are responsible for your personal data.
2. What personal data we collect
We keep data collection to a minimum.
Information you provide
If you contact us via our website, we may collect:
- Your name
- Email address
- Telephone number (if provided)
- Any information you include in your message
Technical information
When you visit our website, limited technical data may be processed automatically, such as:
- IP address
- Browser type and device information
- Essential cookies required for the website to function
We do not use analytics tools to track visitors.
3. How we use your data
We use your personal data only to:
- Respond to your enquiry
- Communicate with you about our services
- Protect our website from spam or misuse.
We do not use your data for marketing unless you have explicitly requested this.
4. Lawful basis for processing
Under the UK GDPR, we rely on:
- Legitimate interests – to respond to enquiries and provide information about our services
- Legal obligations – where applicable
5. Cookies and third-party services
Our website uses a limited number of cookies and third-party services to ensure it functions securely.
Cookies used on our website:
- Strictly necessary cookies – required for core functionality
- Functional cookies – such as remembering language preferences
- Security cookies set by Stripe to help prevent fraud or misuse
We do not use cookies for advertising or analytics.
Google reCAPTCHA
We use Google reCAPTCHA on our contact form to prevent spam.
This service:
- Analyses user behaviour to distinguish humans from automated bots
- May collect personal data such as IP address and device information
- Is provided by Google
Use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.
Because these technologies are used for security purposes, we rely on legitimate interests and do not require consent under the Privacy and Electronic Communications Regulations.
6. Data sharing
We do not sell your personal data.
We may share data with trusted service providers (such as hosting providers, Stripe, and Google) where necessary to operate and secure our website.
7. International transfers
Some service providers (including Google and Stripe) may process data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses
- Adequacy decisions where applicable
8. Data retention
We retain personal data only for as long as necessary.
Typically:
- Contact enquiries are retained for up to 24 months after our last communication, unless a longer period is required for legitimate business or legal purposes
9. Data security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse or disclosure.
10. Your rights
Under UK data protection law, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request transfer of your data (where applicable)
To exercise your rights, please contact us at:
DPO@20degrees.co.uk
11. Complaints
If you are not satisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office:
Website: https://www.ico.org.uk
12. Links to other websites
Our website may contain links to other websites. This policy does not apply to those sites.
13. Changes to this policy
We keep this policy under review and may update it from time to time. The latest version will always be available on our website.