Customer Privacy Notice

Last updated 20 June 2025

This privacy notice contains important information on how we collect, store and use your personal information. It also explains your rights in relation to your personal data and how to contact us.

Introduction

Key Terms

We, us, our - Summit Adventures Ltd (trading as The Summit Club) (a private limited company registered in the UK with the registration number 16464815) and our associated companies.

Personal data - any information relating to an identified or identifiable individual.

Contact details

Email: info@summitclubadventures.com

Changes

We keep our privacy policy under regular review. This version was last updated on 22 June 2025.

Third-party links

Our website may include links to third-party websites, plug-ins and applications. Following those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

The data we collect

Types of data we collect

• Identity Data: such as first name, last name and title
• Contact Data: such email address or phone number
• Enquiry or Booking Data: such as messages you send to us, preferences you indicate, or details needed to deliver our services
• Technical or Usage Data: such as information about how you interact with our website or communications
• Other Information: as necessary to operate and improve our services

We collect this data directly from you — for example, via email or website enquiries.

Lawful Bases

We may process your personal data based on one or more of the following legal grounds:

• Your consent
• To perform a contract or take steps prior to entering into one
• Ourlegitimate interests
• Legal obligations

Cookies

Our website uses cookies. See our Cookies Policy for more information.

How we use your personal data

We will only use your personal data to:

• Respond to enquiries
• Manage bookings or deliver ourservices
• Communicate with you
• Improve our services
• Comply with legal orr regulatory obligations

Your data may be accessed by those helping to set up and operate the business, even if they are not formal employees.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed.

We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

Normally, we keep your information for 2 year unless we are required by law to retain your data for longer or we receive a request from you to erase your data.

Your rights under the data protection law

You have rights under data protection laws in relation to your personal data.

If you wish to exercise any of the rights set out below, please contact us.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

We try to respond to all legitimate requests within one month.

• Your right of access - You have the right to ask us for copies of your personal data.
• Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.
• Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
• Your right to withdraw consent - When we use consent as our lawful basis you have the right to withdraw your consent.

You do not usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we have used your data after raising a complaint with us, you can also contact the Information Commissioner who may be contacted at https://www.ico.org.uk/make-a-complaint or telephone 0303 123 1113.