Privacy Policy
This website is operated by To The Summit Limited, trading as Summit. We are a creative design and marketing studio registered in England and Wales.
Registered company name: To The Summit Limited
Company number: 15672446
Registered address: Suite 12 The Conference Centre, Old Langho, Blackburn, England, BB6 8AY
Email: marketing@tothesummit.co.uk
For the purposes of UK data protection law, To The Summit Limited is the data controller. This means we decide how and why your personal data is processed.
We are committed to protecting your privacy and maintaining the security of any personal information we receive from you. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
2. What this policy covers
This policy explains what personal data we collect when you visit our website, why we collect it, how we use it, and what rights you have over that data.
It applies to all visitors of the Summit website. By using our website, you agree to the practices described in this policy.
3. What data we collect
3.1 Data you give us directly
When you fill in our contact form or get in touch with us by email, we may collect the following:
- Your name
- Your email address
- Your phone number (if provided)
- Your company name (if provided)
- Your job title (if provided)
- The content of your message
We only collect this data when you actively submit the form or send us a message. We do not collect this information passively.
3.2 Data collected automatically
When you visit our website, certain technical data may be collected automatically. This can include:
- Your IP address
- Browser type and version
- Operating system
- Device type
- Pages you visit and the time spent on each page
- The website that referred you to ours
- Date and time of your visit
This data is collected through cookies and similar technologies. See section 8 for more detail on cookies.
3.3 Social media and embedded content
Our website may include embedded content or links to third-party platforms such as LinkedIn, Instagram, Behance, and Dribbble. These platforms may collect data about you when you interact with their content on our site, including through their own cookies and tracking technologies.
We do not control the data these platforms collect. We recommend reviewing the privacy policies of any third-party platform you interact with.
4. Why we collect your data
We use the data collected through our contact form and direct communications to:
- Respond to your enquiry
- Discuss how we might work together
- Provide you with information you have requested
- Send you marketing communications, but only where you have given your explicit consent
We use automatically collected data to understand how visitors use our website, so we can improve the experience and performance of the site.
We will never sell your personal data to any third party. We will never use your data for purposes other than those described in this policy without your consent.
5. Legal basis for processing
Under UK GDPR, we process your data on the following legal grounds:
- Legitimate interest. We have a genuine business reason to process your data, such as responding to enquiries and improving our website. This does not override your rights.
- Consent. Where you have given clear consent for us to process your data for a specific purpose, such as opting in to marketing communications.
- Contractual necessity. Where processing is necessary for us to perform a contract with you, or to take steps at your request before entering into a contract.
6. Marketing communications
We may send you updates about our work, services, or events from time to time. We will only do this where you have given us your explicit consent to receive such communications.
You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email, or by contacting us at marketing@tothesummit.co.uk.
Withdrawing your consent will not affect any communications we are required to send as part of a contract or ongoing service relationship.
7. How we store and protect your data
We take the security of your personal data seriously. Your data is stored securely and access is limited to authorised personnel within our team.
We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or damage. All computer systems used to store personal data are password protected and, where appropriate, encrypted.
We retain contact form and enquiry data for a maximum of 24 months from the date of your last communication with us, unless we enter into a working relationship with you. If we do, your data will be held for the duration of that relationship and for a reasonable period afterwards in line with our legal and contractual obligations.
When your data is no longer needed, it will be securely deleted.
8. Cookies
Our website uses cookies. Cookies are small text files placed on your device when you visit a website. They help us understand how visitors use our site and improve its performance.
8.1 Types of cookies we use
- Essential cookies. These are required for the website to function properly. They cannot be switched off.
- Analytics cookies. These help us understand how visitors interact with our website by collecting anonymous usage data. We use Google Analytics for this purpose. Google Analytics uses cookies to collect information about how visitors use our site. This data is processed in a way that does not identify individuals.
- Functional cookies. These remember choices you make on the site, such as your cookie preferences.
When you first visit our website, you will be asked to accept or reject non-essential cookies. You can change your preferences at any time through your browser settings or through the cookie consent tool on our website.
For more information about cookies and how to manage them, visit aboutcookies.org or allaboutcookies.org.
9. Third parties
We do not sell or share your personal data with third parties for their own marketing purposes.
We may share your data with the following types of service providers, who act on our behalf and under our instruction:
- Website hosting providers
- Email service providers
- Analytics services (such as Google Analytics)
- CRM or project management tools
All third-party providers we work with are required to process your data securely and in accordance with UK data protection law.
10. International data transfers
Some of the third-party services we use may process data outside of the United Kingdom. Where this is the case, we ensure that appropriate safeguards are in place to protect your data in accordance with UK data protection law. This may include the use of standard contractual clauses approved by the UK Government, or transfer to countries deemed to provide an adequate level of data protection.
11. Children’s data
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that data as soon as possible.
12. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
- The right to access. You can request a copy of the personal data we hold about you.
- The right to rectification. You can ask us to correct any inaccurate or incomplete data.
- The right to erasure. You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
- The right to restrict processing. You can ask us to limit how we use your data.
- The right to data portability. You can request your data in a structured, commonly used format.
- The right to object. You can object to us processing your data based on legitimate interest.
- The right to withdraw consent. Where we are processing your data based on your consent, you can withdraw that consent at any time.
To exercise any of these rights, please contact us at marketing@tothesummit.co.uk. We will respond to your request within one calendar month. If your request is complex or we receive a large number of requests, we may extend this by a further two months. We will let you know if this is the case.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). You can contact them at ico.org.uk or by writing to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
13. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated revision date. Where changes are significant, we will make this clear on our website or contact you directly where appropriate.
14. Contact us
If you have any questions about this privacy policy or the way we handle your personal data, you can contact us at:
Email: marketing@tothesummit.co.uk
Address: Suite 12 The Conference Centre, Old Langho, Blackburn, England, BB6 8AY
