Privacy Policy.

1. CONTACT

For privacy questions or requests, contact the20companies@yahoo.com.

2. DATA WE PROCESS

When you create an account, we process information such as your name, email address, account identifiers and email-verification status. When you use the membership service, we process subscription and account information needed to provide access and manage your membership.

Payment card details are handled by Stripe in the payment flow and are not intended to be stored as full card numbers by THE 20. THE 20 may receive payment-related identifiers such as a Stripe customer ID, subscription ID, status and billing-period information.

Technical and security information may also be processed by the hosting, authentication, database, email, payment and security services used to operate the website, including IP address, request metadata, timestamps and diagnostic information where generated.

3. PURPOSES

We use personal data to create and authenticate accounts, verify email addresses, provide member-only access, administer subscriptions, process and reconcile payments, respond to support requests, prevent abuse and fraud, maintain security, comply with legal obligations and operate the website.

4. LEGAL BASES

Depending on the processing, the legal basis may be performance of a contract, steps taken at your request before entering a contract, compliance with a legal obligation, legitimate interests in operating and securing the service, or consent where consent is required.

Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect processing carried out before withdrawal.

5. SERVICE PROVIDERS

THE 20 uses technical providers to operate the service, including Netlify for hosting and serverless functions, Neon for database and authentication infrastructure, Resend for transactional email and Stripe for payment processing and subscription management. Providers may process personal data on THE 20's behalf or independently where their own legal role requires it.

6. RETENTION

Account and membership information is retained for as long as necessary to provide the service and manage the customer relationship. Some records may be retained longer where required for accounting, tax, legal, security, fraud-prevention or dispute-resolution purposes.

7. INTERNATIONAL TRANSFERS

Some service providers may process data outside the European Economic Area. Where applicable, transfers will rely on an adequacy decision or another lawful transfer mechanism and appropriate safeguards required by applicable data-protection law.

8. YOUR RIGHTS

Subject to applicable law, you may have rights to access your personal data, request correction or deletion, request restriction of processing, object to certain processing, request portability, and withdraw consent where consent is the legal basis.

You can contact the20companies@yahoo.com to exercise your rights. You may also lodge a complaint with the competent data-protection supervisory authority.

9. SECURITY

Reasonable technical and organisational measures are used to protect personal data. No online service can guarantee absolute security, and you should protect your account credentials and use a strong, unique password.

10. CHILDREN

THE 20 is not intended for children. If you believe personal data relating to a child has been provided without appropriate authorisation, contact us so the matter can be assessed.

11. CHANGES

This policy may be updated when the service, providers or applicable privacy requirements change. The latest revision date is shown above.