Privacy policy
Last updated: September 30, 2026.
Twenty Five LLC ("Twenty Five", "we") is a US limited liability company operating in the Bahamas. We respect the privacy of the people we work with. This policy explains what personal information we collect, why, who we share it with, and how to exercise your rights.
We follow the privacy laws that protect the people concerned, including the Bahamas Data Protection (Privacy of Personal Information) Act and, for Québec residents, Québec's Act respecting the protection of personal information in the private sector, as amended by Law 25.
Person in charge of the protection of personal information
Nicolas Serabian
Email: bonjour@twentyfiveconsulting.com
1. This website
This site uses no advertising cookies, no tracking tools and no forms. Fonts are hosted on our own server.
- If you email us, we receive your name, email address and message. We use them only to reply and, if you become a client, for the business relationship.
- Technical logs. Our host, Cloudflare, processes IP addresses and technical browsing data to deliver the site and protect it from attacks. This data may be processed in other countries.
Purchases of digital kits
Our kits are sold and delivered by Gumroad, which acts as the merchant of record and processes your payment and billing details under its own privacy policy. We receive your name, email address and order details so we can deliver updates and support. We do not receive your card details.
2. Our solutions for client businesses
When we answer calls or send texts on behalf of a client business, that business is responsible for its own customers' information. We act as its service provider and process that information only on its instructions and under a written agreement.
| Information | Purpose | Retention |
|---|---|---|
| Phone number, name, customer request | Answer, text, book appointments | Term of the contract, then deleted or returned to the client within 30 days |
| Call recording or transcript (if enabled) | Summary for the business, quality control | 90 days maximum, unless the client asks otherwise in writing |
| Text message history | Conversation follow-up, reports | Term of the contract |
Callers are told at the start of the call that they are speaking with an automated assistant. Anyone can ask to speak with a person and can stop receiving texts by replying "STOP".
3. Disclosure to third parties and across borders
We never sell personal information. We use providers for telephony, text messaging, speech recognition and hosting. Some are located in the United States or elsewhere. Before disclosing information about Québec residents outside Québec, we carry out a privacy impact assessment and require adequate protection by contract. The current list of providers is available on request.
4. Automated decisions
Our assistant makes no decision with legal or significant effects on a person. It answers questions and offers appointments. On request, we explain what information was used and why a given answer was given, and a person can review the situation.
5. Security
Access limited to those who need it, strong authentication, encryption in transit. If a confidentiality incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the people concerned.
6. Your rights
You can ask to access, correct or delete your information, or to stop its dissemination, and you can withdraw your consent. Write to bonjour@twentyfiveconsulting.com. We reply within 30 days. If you are not satisfied with our reply, you can contact the data protection authority where you live, for example, in Québec, the Commission d'accès à l'information du Québec.
7. Changes
We post any change on this page with the update date.