Privacy Policy

Last Updated: 25 August 2026

At Summit Stones ("we", "us", or "our"), we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your personal information when you visit our website, summitstones.co.uk (the "Site"), or purchase our 3D topographic models and products.

Summary for Gift & Proposal Buyers: Because we sell custom proposal boxes and milestone gifts, we understand that discretion is vital. We package all orders in plain, unbranded outer packaging to protect your surprise, and address data is strictly used for order fulfillment.

1. Important Information & Who We Are

Summit Stones is the data controller responsible for your personal data collected through our Site under the UK GDPR and Data Protection Act 2018.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). However, we would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us directly first.

2. The Personal Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:

  • Identity Data: First name, last name, title, or username.
  • Contact Data: Billing address, delivery address, email address, and telephone number.
  • Financial Data: Payment transaction references (note: all payments are processed securely via third-party gateways; we never store full credit/debit card numbers on our servers).
  • Transaction Data: Details about payments to and from you, order history, and details of custom mountain products purchased.
  • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
  • Usage Data: Information about how you use our website, view products, and navigate pages.
  • Marketing & Tracking Data: Your preferences in receiving marketing from us, along with data collected via advertising pixels (e.g., Meta Pixel, TikTok Pixel, Google Analytics).

3. How We Collect Your Personal Data

We use different methods to collect data from and about you, including through:

  • Direct Interactions: You give us your Identity, Contact, and Financial Data by filling in forms on our Site, placing an order, requesting a custom peak design, or subscribing to our newsletter.
  • Automated Technologies & Pixels: As you interact with our Site, we automatically collect Technical Data and browsing behavior using cookies, server logs, and tracking tags (including Google Analytics, Meta Pixel, and TikTok Pixel).
  • Third Parties: We receive data from our website host (Squarespace), payment processors (Stripe, Apple Pay, Klarna), and logistics partners.

4. How We Use Your Personal Data & Legal Basis

We will only use your personal data when the law allows us to under UK GDPR:

  1. Performance of a Contract: To process your order, manage payments, and dispatch your 3D models via our courier partners.
  2. Legitimate Interests: To run our business, improve our site experience, prevent fraud, and run targeted advertising.
  3. Comply with a Legal Obligation: To keep records for UK tax, accounting, and consumer laws.
  4. Consent: Where you explicitly opt in to receive marketing emails or accept marketing cookies on our site.
Purpose / Activity Type of Data Legal Basis for Processing
To process and deliver your order (including custom peaks) Identity, Contact, Financial, Transaction Performance of a Contract
To process payments & pay-in-3 options (Stripe, Apple Pay, Klarna) Identity, Contact, Financial Performance of a Contract
To notify you about order updates or policy changes Identity, Contact Performance of a Contract & Legal Obligation
To optimize advertising (via Meta, TikTok, & Google Pixels) Technical, Usage, Marketing Consent / Legitimate Interests
To ship parcels via Royal Mail or Evri Identity, Contact Performance of a Contract

5. Discreet Shipping & Gift Purchases

Because we offer milestone gift items and custom proposal boxes, we understand discretion is vital. Delivery addresses provided for recipient gifts will strictly be shared with Royal Mail or Evri solely to fulfill the parcel's dispatch. All orders are dispatched in plain, unbranded outer packaging.

6. Disclosures of Your Personal Data

We share your personal data with trusted third parties who assist in operating our store:

  • Website Host: Squarespace
  • Payment Gateways: Stripe, Apple Pay, Klarna
  • Shipping & Courier Partners: Royal Mail, Evri
  • Analytics & Ad Networks: Google Analytics, Meta (Facebook/Instagram), TikTok

We require all third parties to respect the security of your personal data and treat it in accordance with UK data protection laws.

7. Cookies & Tracking Technologies

Our Site uses cookies, web beacons, and tracking pixels (such as the Meta Pixel and TikTok Pixel) to distinguish you from other users, personalize your browsing experience, and serve relevant advertisements. You can set your browser to refuse all or some browser cookies, or use our cookie banner to manage your tracking preferences. Disabling cookies may cause some features (like the shopping cart) to function incorrectly.

8. Data Security & Retention

We maintain appropriate technical and organizational security measures to prevent your personal data from being lost, altered, or accessed without authorization. We retain customer transaction details for up to 6 years following an order to comply with statutory UK tax and accounting requirements.

9. Your Legal Rights Under UK GDPR

Under UK data protection laws, you have rights regarding your data, including the right to:

  • Request access to your personal data.
  • Request correction of inaccurate data we hold about you.
  • Request erasure of your personal data ("right to be forgotten").
  • Object to processing of your personal data based on legitimate interests.
  • Request restriction of processing your personal data.
  • Withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, please email us directly at info@summitstones.co.uk.

10. Third-Party Links

Our site may contain links to external sites (such as our Instagram, TikTok, or Etsy store). We do not control these third-party websites and are not responsible for their independent privacy statements.

11. Contact & Customer Support

For all privacy inquiries, data requests, or policy questions, please contact us: