Twenty Seven Solutions Limited (trading as Excel Off The Grid) privacy notice.
This privacy notice tells you what to expect us to do with your personal information.
Contact details
Full name of legal entity: Twenty Seven Solutions Limited
Email address: [email protected]
Postal address: PO Box 1477, Peterborough, Cambridgeshire, PE2 2WY (UK)
What information we collect, use, and why
We collect or use information to:
- provide services and goods
- for the operation of customer accounts and guarantees
- for service updates or marketing purposes
- to comply with legal requirements
- and for dealing with queries and complaints
The information we collect includes:
- Communication data – Includes communication you send to us whether through contact forms, emails, text messages, social media messages and posting, or any other communication method. We process this data for the purposes of communicating with you, for record keeping and for the establishment, pursuance or defence of legal claims. Our lawful ground for this processing is our legitimate interests which in this case are to reply to communications sent to us, to keep records and to establish, pursue or defend legal claims.
- Customer data – Includes names, titles, contact details, addresses, phone numbers, purchase details, account history, and payment details. We process this data to supply the goods and/or services you have purchased and to keep records of such transactions. Our lawful ground for this processing is the performance of a contract between you and us and for compliance with legal obligations.
- User data – Includes data about how you use the website and online services, along with any data you post for publication on our website or other online services. We process this data to operate our website and ensure relevant content is provided to you, to ensure the security of our website, to maintain backups of our website and/or databases and to enable publication and administration of our website, other online services and business. Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our website and our business.
- Technical data – Includes data about your use of the website, such as IP addresses, login details, length of visit, pages visited, number of visits, time-zones, devices and software used to access the website. The source of this data is from our analytics tracking and advertising systems. We process this data to analyse your use of our website and other online services, to administer and protect our business and website, to deliver relevant website content and advertisements to you and to understand the effectiveness of our advertising. Our lawful ground for this processing is our legitimate interests which in this case are to enable us to properly administer our website and our business and to grow our business.
- Marketing data – Includes data about your marketing and communications preferences from us and related third parties. We process this data to enable you to partake in our promotions, to deliver relevant website content and advertisements to you and measure or understand the effectiveness of this advertising. Our lawful grounds for this processing is our legitimate interests which in this case are to study how customers use our products/services, and consent provided for direct marketing communications, which you may withdraw from at any time.
Our services and content are not intended for children, and we do not knowingly collect or process personal data relating to individuals under the age of 16.
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
- Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
- Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
- Your right to erasure – You have the right to ask us to delete your personal information.
- Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information.
- Your right to object to processing – You have the right to object to the processing of your personal data.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Automated decision‑making and profiling
We do not use your personal data to carry out automated decision‑making, including profiling, that produces legal effects or similarly significant effects on you.
Some of our systems may use automated processes for routine business purposes, such as sending emails, delivering course access, or displaying content or advertisements. These processes are used to operate our services and improve relevance, and they do not involve decisions that would significantly affect your rights or freedoms.
Where we get personal information from
We collect information from you when:
- You sign up to our newsletter or mailing list
- You download an opt-in
- You join a course, membership or programme
- You contact us for information via our website or social media channels, by phone or email
- You post on our social media channels, website or blog
- You work with us in a commercial capacity
- You use our website
We may also receive information from third parties, such as analytics providers or advertising networks, which may be outside of the UK.
How long we keep information
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including providing our services, meeting legal and regulatory requirements, resolving disputes, and enforcing our agreements.
The retention periods below reflect the time we would normally keep each category of data.
- Customer and account information – Information relating to customer accounts, course enrolments, memberships, and registrations is retained for at least 7 years after the end of the customer relationship. This allows us to manage our business records, respond to queries or disputes, and meet legal and accounting obligations.
- Financial and transactional data – Financial records, including invoices, payment records, refunds, and transaction history, are retained for at least 7 years to comply with UK tax, accounting, and audit requirements. Payment card details are processed securely by our payment providers and are not retained by us beyond what is necessary to process the transaction.
- Marketing data – Marketing data, including newsletter subscriptions, email preferences, and communication history, is retained until:
- you withdraw your consent, or
- you unsubscribe or opt out of marketing communications, or
- the data is no longer required for marketing purposes.
- Website and analytics data – Website usage data, including IP addresses, cookie identifiers, and analytics information, is retained based on the requirements and configuration of the relevant service provider, typically for up to 26 months.
- Support, enquiries, and complaints – Information relating to support requests, enquiries, and complaints is retained for up to 7 years from the date the matter is closed, to allow us to manage follow‑up, demonstrate how issues were handled, and protect our legal position.
- Legal and regulatory records – Where personal data is required to meet legal or regulatory obligations (for example, tax, accounting, or regulatory reporting), we retain it for as long as required by applicable law.
Who we share information with
We may have to share your personal data with the parties set out below:
- Professional advisers including lawyers, bankers, auditors and insurers
- Relevant regulatory authorities
- Service providers who provide IT and system administration services
- Third-party software providers, such as email marketing services
Any personal information shared on our website via Comments or Forums are publicly available, and is shared at your discretion.
Sharing information outside the UK
Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.
The transfers comply with the UK data protection law. The countries or sectors are assessed as providing adequate protection to data subjects (also known as Adequacy Regulations or UK data bridge)
Additional provisions
The following additional disclosures are provided as the basis for working with various the Mediavine advertising network.
Mediavine Programmatic Advertising (Ver 1.1)
The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website.
First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The “help” feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.
Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.
The Website collects the following data using a cookie when serving personalized ads:
- IP Address
- Operating System type
- Operating System version
- Device Type
- Language of the website
- Web browser type
- Email (in hashed form)
Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor’s referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.
If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance’s AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.
External links
Our site contains links to and from other websites which are operated by individuals and companies over which we have no direct control. If you follow a link to any of these websites, please note that these websites have their own privacy and terms of use policies.
These sites are not in anyway included within the scope of this privacy policy.
We do not accept any responsibility or liability for these policies. We advise you to check the policies for third party sites before you submit any personal data to the website.
Changes to the policy
We do not intend to process your personal information except for the reasons stated within this privacy notice. If this changes, this privacy notice will be amended and placed on our website at exceloffthegrid.com.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113