Privacy Policy

Peak Platform ("we", "us", "our") is a UK digital agency providing subscription websites, bespoke websites and digital platforms, lead generation, paid advertising and social media management.

Legal entity name: PEAK PLATFORM WEBSITES LTD
Registered office: 4th Floor, 14 Museum Place, City Centre, Cardiff, CF10 3BH, United Kingdom
Company registration number: 16048049
PEAK PLATFORM WEBSITES LTD is not currently VAT registered, so no VAT is charged on our fees.

Where we determine the purposes and means of processing personal information, PEAK PLATFORM WEBSITES LTD acts as the data controller for the purposes of UK data protection law. Contact us at Adam@peakplatform.co.uk or 07487 732571.

• Enquiry details you submit through our website forms — your name, email address, phone number, business name, industry, project goals, budget range and timeline.
• Files you upload or send us, such as logos, brand assets, images, copy documents and other business files.
• Account and client information if you use our client portal — login details, business details, projects, messages and uploaded files.
• Billing information for subscriptions and projects. Card details are handled directly by our payment provider; we do not store full card numbers.
• Technical and usage information such as IP address, browser type, device type, pages visited and referring pages, collected where you have permitted analytics cookies.
• Correspondence, including emails, messages and call notes.
• Campaign data where we run advertising or social media for you, which may include performance metrics and enquiry or lead data generated by those campaigns.

• To respond to your enquiry and prepare a proposal or quote — our legitimate interest in responding to business enquiries, and steps taken at your request before entering a contract.
• To deliver our contracted services, including designing and building websites, running campaigns and managing your account — performance of our contract with you.
• To process payments and manage subscriptions — performance of our contract and compliance with legal obligations.
• To provide support and communicate about your project — performance of our contract.
• To operate and secure the website — legitimate interest in keeping our services running and protected.
• For analytics or advertising, where consent is required and obtained — your consent, given through our cookie banner.
• To keep records and comply with legal, tax and accounting obligations — legal obligation.

We do not sell your personal information, and we do not add you to a marketing list simply because you submitted an enquiry. Any marketing consent is separate and optional, and you can withdraw it at any time.

We share personal information only with service providers who help us run our business, and only as far as needed for the service in question. Not every provider listed below receives every customer's data — the providers involved depend on the services you use. These may include:

• Lovable — for website and application development and hosting infrastructure, where applicable.
• Stripe — for payment processing.
• Google — for analytics, advertising, email or related Google services, where enabled.
• OpenAI — for AI-assisted business processes, where used.
• Professional advisers such as accountants and legal advisers, and authorities where required by law.

Analytics and advertising tools only run where consent is required and has been obtained from you through our cookie banner.

Some of our providers are based outside the UK. Where personal information is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses.

• Enquiries that do not become clients are retained only for as long as reasonably necessary to respond, follow up and maintain appropriate business records, after which they are securely deleted or anonymised.
• Client records, contracts and project files: retained for the duration of the relationship and afterwards where needed for legal, tax or dispute purposes.
• Financial records: retained for the period required by UK tax law.
• Analytics and marketing data: retained for the period set by the relevant provider.

We use appropriate technical and organisational measures to protect personal information, including encrypted connections, access controls on our client portal and restricted access to client files. No online service can be guaranteed completely secure, and you send information to us at your own risk, but we take reasonable steps to protect it and to notify you and the ICO where required if a serious breach occurs.

Under UK data protection law you have the right to:

• Access a copy of the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete information where there is no good reason for us to keep it.
• Object to or ask us to restrict processing based on our legitimate interests.
• Request portability of information you provided to us.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email Adam@peakplatform.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

We use cookies and similar technologies. Non-essential analytics and advertising cookies are only used with your consent. See our Cookie Policy for details and to change your preferences.

Our services are for businesses. We do not knowingly collect personal information from children.

We may update this policy from time to time. The date at the top shows when it was last revised. Significant changes will be highlighted on this page.

Questions about this policy or your information? Email Adam@peakplatform.co.uk or use our contact page.