Privacy Policy

Last updated: 15 October 2026 · UK GDPR and Data Protection Act 2018

1. Data controller

Summit Workflow Ltd
Company No: 14671029
9 George Street, EH2 2JB Edinburgh, United Kingdom
+44 131 556 9022
info@summitworkflow.autos

2. Purpose and lawful basis

We process personal data to respond to enquiries, deliver services, operate the website and meet legal duties. Lawful bases include consent, contract, legal obligation and legitimate interests (UK GDPR Article 6).

3. Data we collect

• Name and email
• Organisation and message content
• Service selection
• Technical logs and cookie consent status

4. Sources

Data is collected directly from you via the form, email or phone.

5. Retention

Enquiry records are kept for up to 24 months. Accounting records are retained for 6 years as required by UK law.

6. Sharing

We do not sell personal data. Trusted IT processors may process data under a written DPA.

7. International transfers

We prefer UK/EEA processing. Where transfers occur, we use appropriate safeguards such as UK IDTA or SCCs.

8. Your rights

• Access and rectification
• Erasure and restriction
• Objection and withdrawal of consent
• Data portability

9. Supervisory authority

Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF · ico.org.uk

10. Cookies

See our Cookie Policy and Google Consent Mode v2 settings.

11. Security

We use TLS/HTTPS, access controls and least-privilege staff access.

12. Contact

Privacy requests: info@summitworkflow.autos