PRIVACY POLICY

At Three Twenty Group, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we handle your information when you visit ThreeTwentyGroup.com, participate in our market research, or engage with our Web3 advisory services.

1. Data We Collect

We collect information that identifies, relates to, or could reasonably be linked to you (“Personal Data”).

• A. Information You Provide Voluntarily Contact Data: Name, email address, and professional title provided via contact forms or during consultations. Research Data: Information shared during customer interviews, surveys, or Customer Advisory Boards (CABs). Project Data: Details regarding your Web3 project, including funding status and technical requirements.
• B. Automatically Collected Data Device/Usage Data: IP addresses, browser type, and interaction with our website (collected via cookies). Neural Data (2026 Update): We do not collect neural data or biometric identifiers.

2. Legal Basis for Processing (EU/EEA Users)

Under the GDPR, we process your data only when we have a legal basis:

• Consent: For marketing communications or participation in surveys.
• Contract: To fulfill our advisory services to you.
• Legitimate Interests: To improve our Web3 strategies and ensure website security.

3. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights regarding your “Personal Information” (PI):

Your Rights

1. Right to Know: You can request a disclosure of the PI we have collected about you since January 1, 2022.
2. Right to Delete: You may request that we delete your PI, subject to legal exceptions.
3. Right to Correct: You have the right to request correction of inaccurate PI.
4. Right to Opt-Out: We do not sell your personal information. However, we honor Global Privacy Control (GPC) signals sent by your browser.

Notice at Collection

4. Global Privacy Control (GPC) & “Opt-Out”

In compliance with the California Opt Me Out Act, our website is configured to detect and automatically honor GPC signals. If your browser sends an “Opt-Out Preference Signal,” we will treat it as a valid request to stop any “sharing” of data for cross-contextual advertising.

5. Data Retention

We retain your data only as long as necessary to provide our advisory services or comply with legal obligations. Research data from surveys is typically anonymized within 12 months of project completion.

6. International Data Transfers

As a global Web3 advisory, your data may be transferred to and processed in countries outside the EEA. We use Standard Contractual Clauses (SCCs) to ensure your data remains protected to EU standards.

7. Contact Us & Exercise Your Rights

To exercise your right to access, delete, or correct your data, please contact us:

• Email: privacy@threetwentygroup.com
• Subject Line: Privacy Rights Request

We will respond to all verified requests within 45 days (California) or 30 days (EU).