Privacy Policy

Summit Supplies is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have in relation to your personal data.

Summit Supplies (“Summit Supplies”, “we”, “us”, “our”) is the data controller for personal data collected through or in connection with our website summitsupplies.co.uk (the “Site”).

What personal data do we collect?

We collect personal data you provide to us directly and data collected automatically when you use the Site. This may include:

• Information you provide when using the Site (for example, your name, email address, phone number, delivery address, product reviews, and any information you add to your account profile);
• Order, transaction, and billing details when you make a purchase (for example, items ordered, delivery information, and payment confirmation information from our payment providers);
• Records of communications and interactions with us (for example, when you contact customer support or interact with us on social media);
• Information you provide when entering a competition, promotion, or completing a survey;
• Information collected automatically via cookies and similar technologies (for example, pages you view, actions you take on the Site, and links you click in our emails), and information about the device you use to access the Site; and
• Other information needed to provide and improve the Site (for example, approximate location data if you choose to allow it).

How do we use your personal data?

Depending on how you use the Site and the choices you make, we may use your personal data to:

• Process and fulfil your orders, provide customer service, and manage your account;
• Respond to enquiries, requests, and complaints;
• Personalise your experience (for example, showing products or content we think will be relevant to you based on browsing and purchase history);
• Operate, maintain, improve, and monitor the performance and security of the Site;
• Send you a reminder email if you start checkout and leave your basket (typically within a few hours);
• Carry out research and analytics to improve our products, services, and customer experience;
• Send marketing messages and show targeted advertising where permitted (see “Marketing” below);
• Prevent, detect, and investigate fraud or misuse of the Site; and
• Comply with legal and regulatory obligations (including tax and accounting obligations).

Legal bases for processing

We rely on one or more of the following legal bases under UK data protection law:

• Contract: processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (for example, taking payment and delivering your order);
• Consent: where you have given consent (for example, to receive marketing communications or to allow optional features);
• Legitimate interests: where it is in our legitimate interests to operate and improve our business and the Site (for example, improving user experience, preventing fraud, and understanding how customers use the Site), provided those interests are not overridden by your rights; and
• Legal obligation: where we must process data to comply with a legal obligation.

Marketing

Subject to your preferences, we may send you marketing communications by email, SMS, phone, or post. Some marketing may be personalised based on your browsing activity, purchase history, and the way you interact with our communications.

You can opt out of marketing at any time by clicking the unsubscribe link in our emails, adjusting your account settings (where available), or by contacting us. If you opt out, we may still send you important service messages such as order confirmations, delivery updates, or information about changes to our policies.

You may also see Summit Supplies advertisements on third-party platforms (including social media). These ads may be personalised using cookies and similar technologies. You can control personalised advertising through your cookie preferences and your browser and platform settings.

Who do we share personal data with?

We may share your personal data with trusted third parties when necessary, including:

• Service providers who support our operations (for example, payment processors, delivery and courier companies, hosting providers, IT and analytics services, marketing platforms);
• Professional advisers (including legal, financial, and insurance advisers);
• Fraud prevention and security partners;
• Law enforcement, regulators, or other authorities where required by law or to protect our rights;
• Potential buyers or partners in connection with a business transfer (where customer data forms part of the transaction), subject to appropriate safeguards; and
• Other parties where you give consent or where we are legally permitted to do so.

International transfers & retention

Some of our service providers may process personal data outside the UK or the European Economic Area (EEA). Where this happens, we use appropriate safeguards designed to protect your data (such as standard contractual clauses approved for use in the UK, where applicable).

We keep personal data only as long as necessary for the purposes described in this policy. Retention periods vary depending on the type of data and how you interact with us. For example, we may retain order records for accounting, tax, and warranty purposes, and keep correspondence records to help resolve disputes or respond to legal claims. If you opt out of marketing, we may keep a record of your email address to ensure we respect your preference going forward.

Security

We use appropriate technical and organisational security measures to protect personal data. Where possible, data is encrypted in transit using secure protocols (such as SSL/TLS), and payments are handled using secure payment processing methods.

While we take reasonable steps to protect your information, no website or data transmission can be guaranteed to be 100% secure.

Children

The Site is not intended for individuals under 18 years of age, and we do not knowingly collect personal data from children.

Cookies

We use cookies and similar technologies to make the Site work properly, understand how it is used, improve performance, and (where permitted) personalise content and advertising.

Cookies are small text files stored on your device when you visit a website. You can control cookies through your browser settings and (where available) our cookie settings. Our cookies do not store your card details or account passwords.

Your rights

You have rights in relation to your personal data, including the right to access, correct, erase, restrict, object to certain processing, and (in some cases) data portability. You also have the right to withdraw consent where we rely on consent.

To exercise your rights or ask questions about how we handle your personal data, please Contact Us. You also have the right to lodge a complaint with the UK data protection authority, the Information Commissioner’s Office (ICO).

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and may notify you by email or via the Site if the changes are significant. Please review this page regularly to stay informed.

If you have any questions about this Privacy Policy, please Contact Us.