Privacy Policy

Last updated: June 10, 2026

1. Who we are

This website is operated by Third Culture Capital ("we", "us", "our"). We are the data controller responsible for the personal data collected through this website.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at info@3cc.io.

2. What data we collect and why

2.1 Contact form

When you use the contact form, we collect your name, email address, and the content of your message. We use this information solely to respond to your enquiry. The legal basis for this processing is our legitimate interest in responding to incoming communications (Art. 6(1)(f) GDPR). We do not store form submissions in a database; they are sent directly to our inbox.

2.2 Newsletter

If you subscribe to our newsletter, we collect your email address and forward it to Mailchimp (Intuit Inc., USA) for email delivery. Mailchimp acts as a data processor on our behalf. Subscription is entirely voluntary and you may unsubscribe at any time via the link included in every newsletter. The legal basis is your consent (Art. 6(1)(a) GDPR).

2.3 Analytics

With your consent, we use Matomo Analytics to collect anonymised data about how visitors use this website (pages viewed, time spent, approximate location at country level, browser type). This helps us improve the site. No data is shared with third parties. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the panel.

2.4 Server logs

Our web server automatically records standard access logs (IP address, browser, pages requested, timestamps). These are kept for up to 30 days for security and operational purposes and are not used for marketing. The legal basis is our legitimate interest in maintaining secure, functional infrastructure (Art. 6(1)(f) GDPR).

3. Cookies

A cookie is a small text file stored on your device. We use the following categories:

Category	Cookie(s)	Purpose	Duration
Essential	`tcc_cookie_consent`	Stores your cookie preferences so you are not asked again on every visit.	1 year
Functional	`_GRECAPTCHA`	Google reCAPTCHA — detects bots on the contact form. Set only with your consent.	6 months
Analytics	`_pk_id.`, `_pk_ses.`	Matomo Analytics — tracks pages visited and session duration. Set only with your consent.	13 months / 30 min

You can review and change your cookie choices at any time: .

4. Third-party services

4.1 Fonts

This website uses the Montserrat typeface, which is served directly from our own server. No font files are loaded from Google or any other third party, so no data is transferred to external servers for this purpose.

4.2 Google reCAPTCHA v3

With your consent (Functional cookies), the contact form uses Google reCAPTCHA v3 to distinguish human users from automated bots. When active, Google collects hardware and software information (device and application data) and sends it to Google for analysis. This data is governed by Google's Privacy Policy. If you do not consent, reCAPTCHA will not load — the contact form remains available without bot protection.

4.3 Matomo Analytics

With your consent (Analytics cookies), we use Matomo to collect anonymised usage statistics. IP addresses are anonymised before storage. We do not share this data with any third party and it is used solely to improve this website.

4.4 Mailchimp

If you subscribe to our newsletter, your email address is transferred to Mailchimp (operated by Intuit Inc., USA). Mailchimp is certified under the EU–US Data Privacy Framework. You can unsubscribe at any time using the link in any newsletter. See Intuit's Privacy Statement for details.

5. Data retention

We retain personal data only for as long as necessary for the purposes described above, or as required by law. Contact enquiries received by email are managed in line with our standard email retention practices. Newsletter subscribers' data is held until unsubscription. Analytics data is retained for a maximum of 13 months.

6. Your rights under GDPR

Under the General Data Protection Regulation you have the right to:

Access the personal data we hold about you.
Rectify inaccurate data.
Erase your data ("right to be forgotten").
Restrict or object to certain processing.
Data portability — receive your data in a structured, machine-readable format.
Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@3cc.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects when the most recent changes were made. We encourage you to review this page periodically.