Privacy Policy

Last updated: 01.09.2025

1. Introduction

This Privacy Policy explains how 8 Summits Ltd. (“we”, “our”, “us”) collects, uses, and protects your personal data when you visit our website www.the8summits.com or interact with our services.

We comply with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) (where applicable), and the UK Data Protection Act 2018.

2. Data Controller

8 Summits Ltd.
20 Wenlock Road
London, N1 7GU
United Kingdom
Company No.: 16245174
Email: iam@the8summits.com

3. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Contact Information: name, email address, phone number, postal address.

  • Website Usage Data: IP address, browser type, operating system, referring URLs, pages visited, date/time of access.

  • Communication Data: when you contact us by email, contact form, or otherwise.

  • Marketing Data: your preferences for receiving newsletters or promotional content (if you subscribe).

4. How We Use Your Data

We use your personal data for the following purposes:

  • To provide and improve our services.

  • To respond to your inquiries or requests.

  • To send newsletters or marketing communications (only with your consent).

  • To analyze website usage and improve user experience.

  • To comply with legal and regulatory obligations.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent (Article 6(1)(a) UK/EU GDPR) – e.g. newsletter subscription.

  • Contract (Article 6(1)(b)) – when processing is necessary to provide our services.

  • Legal obligation (Article 6(1)(c)) – where we are required by law.

  • Legitimate interests (Article 6(1)(f)) – e.g. to improve our website and services.

6. Cookies & Tracking

Our website may use cookies and similar technologies to improve functionality and analyze usage.
You can manage or disable cookies via your browser settings.

If we use third-party analytics tools (e.g., Google Analytics), these providers may collect usage data in accordance with their own privacy policies.

7. Data Sharing & Transfers

We do not sell your personal data.
We may share data with:

  • Service providers (e.g., IT hosting, email newsletter tools).

  • Legal or regulatory authorities if required by law.

If we transfer data outside the UK/EU, we ensure appropriate safeguards (e.g., Standard Contractual Clauses).

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.

9. Your Rights

You have the following rights under the UK GDPR and EU GDPR:

  • Right of access to your personal data.

  • Right to rectification of inaccurate data.

  • Right to erasure (“right to be forgotten”).

  • Right to restrict processing.

  • Right to data portability.

  • Right to object to processing.

  • Right to withdraw consent at any time.

To exercise these rights, please contact us at iam@the8summits.com.

10. Security

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

12. Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with your local supervisory authority:

  • UK: Information Commissioner’s Office (ICO) – www.ico.org.uk

  • EU: You may contact your local Data Protection Authority.

13. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website.