Privacy Policy

Last updated: 2 February 2026

TwentyThirty Ai Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Saudi Arabia Personal Data Protection Law (PDPL).

1. Data Controller

TwentyThirty Ai Ltd
Company No. 17004773
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: [email protected]

2. Data We Collect

When you use our contact form, we collect:

Name – to address you personally
Email address – to respond to your enquiry
Company name (optional) – to understand your business context
Message content – to address your enquiry
Language preference – to respond in your preferred language
Submission timestamp – for record-keeping

We do not collect IP addresses, device fingerprints, or use tracking cookies on this website.

3. Legal Basis for Processing

We process your data based on:

Consent – You explicitly consent when submitting the contact form
Legitimate interest – To respond to your business enquiry

4. How We Use Your Data

Your data is used solely to:

Respond to your enquiry
Provide information about our services
Maintain records of our communications

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Storage and Security

Your data is:

Transmitted securely via HTTPS/TLS encryption
Stored on secure servers with access controls
Retained for a maximum of 24 months, then securely deleted

6. International Transfers

We operate in both the United Kingdom and Saudi Arabia. Your data may be processed in either jurisdiction. Both locations maintain appropriate data protection standards. For transfers from the UK, we rely on adequacy decisions or Standard Contractual Clauses where applicable.

7. Your Rights

Under UK GDPR and Saudi PDPL, you have the right to:

Access – Request a copy of your personal data
Rectification – Correct inaccurate data
Erasure – Request deletion of your data
Restriction – Limit how we process your data
Portability – Receive your data in a portable format
Objection – Object to processing based on legitimate interests
Withdraw consent – At any time, without affecting prior processing

To exercise these rights, email [email protected]. We will respond within 30 days.

8. Complaints

If you believe we have not handled your data correctly, you may lodge a complaint with:

UK: Information Commissioner's Office (ICO) – ico.org.uk
Saudi Arabia: Saudi Data and Artificial Intelligence Authority (SDAIA)

9. Changes to This Policy

We may update this policy periodically. The "Last updated" date at the top indicates the most recent revision. Continued use of our website constitutes acceptance of any changes.

10. Contact

For privacy-related questions, contact us at: