Privacy Policy

1. Who we are

TwentyOne Group operates this website as a network hub that links to our independent brands. If you have any questions about this policy, you can contact us at mail@twentyonegroup.com.

2. What this site does (and doesn’t do)

This site is primarily an informational hub. It does not provide personalised advice, and it does not normally require you to create an account.

Some links on this site go to third-party websites (including our brand websites and partner sites). Those sites have their own privacy policies.

3. Personal data we may collect

We aim to minimise data collection. Depending on how you use the site, we may collect:

• Contact details you provide (for example, if you email us).
• Basic technical data (such as IP address, browser type, device information) in server logs for security and troubleshooting.
• Usage data (if analytics are enabled) to understand how the site is used (e.g., page views and navigation patterns).

4. How we use personal data

We use personal data only when we have a valid reason to do so, for example:

• To respond to enquiries and messages you send us.
• To keep the site secure and prevent fraud/abuse.
• To maintain and improve the website (for example, by fixing errors and improving content structure).

5. Our legal bases (UK GDPR)

Where UK data protection law applies, we typically rely on:

• Legitimate interests — running and securing our website, improving performance and usability.
• Consent — where required for certain cookies/analytics (if enabled).
• Contract / pre-contract steps — if you contact us to discuss partnerships or services.
• Legal obligations — if we must keep certain records.

6. Cookies and similar technologies

Cookies are small text files stored on your device. This site may use cookies for basic functionality and, if enabled, to measure site usage.

If you enable analytics or advertising cookies later, you should also implement a cookie banner / consent tool appropriate for UK visitors.

7. Links to other websites

Our website links to our brands and to third-party services. Once you leave this site, we do not control how those websites collect or use data.

Examples of our brand websites include:

• TwentyOneTravel
• Secure Insurance

8. Affiliate links (funding transparency)

Some of our brands may use affiliate links. That means we may receive a commission if you click a link and take an action. Please see our Affiliate Disclosure page for more detail.

9. Sharing your data

We do not sell personal data. We may share information with service providers who help run the website (for example, hosting providers) where needed for security and operations.

If analytics tools are enabled, some usage data may be processed by analytics providers. Where applicable, we recommend using privacy-protective settings (such as IP anonymisation) and obtaining consent where required.

10. International data transfers

Some service providers may process data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place (for example, contracts and recognised transfer mechanisms).

11. How long we keep data

We keep personal data only as long as needed for the purpose it was collected, including for legal, accounting or security needs. Emails you send us may be retained for a reasonable period to manage correspondence and records.

12. Your rights

Depending on your circumstances, you may have rights including:

• Access to your personal data
• Correction of inaccurate data
• Deletion (in certain situations)
• Restriction or objection to processing (in certain situations)
• Data portability (in certain situations)
• Withdrawal of consent (where processing is based on consent)

To exercis