Privacy Policy
Your privacy matters to us
Last updated: March 2026
Introduction
Twenty Seven Labs LLC ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website twentysevenlabs.com.
Information We Collect
Personal Information
We may collect personal information that you voluntarily provide when you:
- Fill out our contact form
- Subscribe to our newsletter
- Request information about our services
- Participate in our training programs
This information may include your name, email address, phone number, company name, and any other information you choose to provide.
Automatically Collected Information
When you visit our website, we may automatically collect certain information, including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent on pages
- Referring website addresses
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small files stored on your device that help us:
- Remember your preferences
- Understand how you use our website
- Improve our services
- Provide relevant content
You can control cookies through your browser settings. However, disabling cookies may affect some features of our website.
Your Privacy Choices
You have the right to opt out of non-essential cookies and tracking technologies. Use the button below to manage your cookie preferences:
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to opt out of the "sale" of personal information. We do not sell your personal information in the traditional sense, but sharing data with analytics providers may be considered a "sale" under CCPA. Use the button above to opt out.
Exercise Your Privacy Rights
Under GDPR and CCPA, you have the right to access, export, and delete your personal data. Select an option below to get started.
Need Help?
If you have questions about your privacy rights or need assistance, please contact our privacy team at privacy@twentysevenlabs.com
Third-Party Services
We may use third-party services that collect, monitor, and analyze information to improve our website and services:
- Google Analytics: We use Google Analytics to understand website traffic and usage patterns. Google Analytics may collect information about your online activities across websites. You can learn more about Google's practices at Google Privacy Policy.
How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and provide customer service
- Send you information about our services
- Improve our website and services
- Analyze usage trends and preferences
- Comply with legal obligations
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal information based on the following legal grounds:
- Consent: When you provide explicit consent for us to process your personal information for specific purposes (e.g., cookie consent, newsletter subscriptions)
- Contractual Necessity: When processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (e.g., providing consulting services)
- Legitimate Interests: When we have a legitimate business interest in processing your information, such as improving our services, website analytics, and fraud prevention, provided these interests do not override your rights
- Legal Obligation: When we are required to process your information to comply with applicable laws and regulations
CCPA Categories of Personal Information
For California residents, we collect the following categories of personal information as defined by the California Consumer Privacy Act (CCPA):
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email address, IP address | YES |
| Commercial Information | Service inquiries, training enrollment | YES |
| Internet Activity | Browsing history, pages visited | YES |
| Geolocation Data | Approximate location from IP address | YES |
| Professional Information | Company name, job title, industry | YES |
We do not sell personal information. We may share information with service providers (Google Analytics, email service providers, hosting providers) for business purposes as described in this policy.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:
- Contact Form Inquiries: 3 years from last contact
- Newsletter Subscriptions: Until you unsubscribe or request deletion
- Training Program Data: 5 years for record-keeping and certification purposes
- Website Analytics: 26 months (Google Analytics default retention)
- Cookie Consent Records: 12 months from last interaction
After the retention period expires, we will securely delete or anonymize your personal information. We may retain certain information for longer periods if required by law or to establish, exercise, or defend legal claims.
International Data Transfers
Your personal information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from the laws of your country.
When we transfer personal information from the EEA to other countries, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Data Processing Agreements with service providers
- Adequacy decisions by the European Commission
Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
- With service providers who assist us in operating our website and conducting our business
- To comply with legal requirements or respond to lawful requests
- To protect our rights, privacy, safety, or property
- In connection with a business transaction such as a merger or acquisition
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.
Your Rights
GDPR Rights (EEA Residents)
If you are located in the European Economic Area, you have the following rights:
- Right of Access: Request a copy of the personal information we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete information
- Right to Erasure: Request deletion of your personal information ("right to be forgotten")
- Right to Restriction: Request that we limit how we use your information
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
- Right to Lodge a Complaint: File a complaint with your local data protection authority
CCPA Rights (California Residents)
If you are a California resident, you have the following rights under CCPA:
- Right to Know: Request disclosure of categories and specific pieces of personal information collected
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt out of the "sale" of your personal information (use the cookie settings button above)
- Right to Non-Discrimination: Not be discriminated against for exercising your CCPA rights
How to Exercise Your Rights
To exercise any of these rights, please contact us at hello@twentysevenlabs.com with the subject line "Privacy Rights Request". We will respond to your request within 30 days (45 days for CCPA requests).
We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.
Data Breach Notification
In the event of a data breach that affects your personal information, we will:
- Notify affected individuals without undue delay and within 72 hours of discovery (as required by GDPR and California law)
- Notify relevant supervisory authorities as required by law
- Provide information about the nature of the breach, categories of data affected, and measures taken to mitigate harm
- Offer recommendations for steps you can take to protect yourself
Children's Privacy
Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Email: hello@twentysevenlabs.com
Address: 25801 Industrial Blvd., Suite 100, Hayward, CA 94545
