Privacy Policy

Last updated: May 2026

SummitFlow ("we", "us", "our") is committed to protecting the personal data of everyone who interacts with our website and services. This policy explains what data we collect, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

1. Who we are

SummitFlow is a trading name operated by Finn [Surname], based in England. We are the data controller for personal data collected through this website.

Contact: finn@summitflow.co.uk | 07949 845 919

2. What data we collect

When you submit the application form on our website, we collect:

Full name and business name
Email address and phone number
Primary postcode area
Business information (monthly install volume, MCS certification status, marketing spend, main challenges)

We also collect standard technical data automatically when you visit our site (IP address, browser type, pages visited) via server logs and any analytics tools we use.

3. Why we collect it (lawful basis)

We process your personal data on the following bases:

Legitimate interests — to respond to your enquiry, assess whether we can help your business, and contact you about SummitFlow services you have expressed interest in.
Contract — where you become a client, to fulfil our service obligations.
Legal obligation — where we are required to retain records under applicable law.

4. How we use your data

To respond to your application or enquiry
To assess your suitability for our service
To contact you about our services (by phone, email, or message)
To onboard and manage you as a client
To comply with legal obligations

We will not sell your data to third parties. We will not use it for unrelated marketing without your explicit consent.

5. Who we share data with

We may share your data with:

Formspree — our form submission processor (processes data on our behalf)
Go High Level — our CRM platform
Meta (Facebook/Instagram) — where you become a client and we run campaigns on your behalf
AppointWise — our AI appointment-setting platform

All third-party processors are bound by data processing agreements and handle data in accordance with UK GDPR.

6. How long we keep your data

Enquiry / application data: up to 12 months if no contract is formed
Client data: for the duration of the contract and up to 6 years after for legal and accounting purposes

7. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request erasure of your data (subject to legal obligations)
Object to processing based on legitimate interests
Request restriction of processing
Data portability (where applicable)

To exercise any of these rights, email finn@summitflow.co.uk. We will respond within 30 days.

8. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Cookies

This website may use essential cookies to ensure the site functions correctly. We do not currently use tracking or advertising cookies. If this changes, this policy will be updated.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site constitutes acceptance of the updated policy.