Privacy Policy
Last updated: 24 October 2026
This policy explains how Summit and Shadow collects, uses and protects your personal information when you visit www.summitandshadow.co.uk, buy a print, make an enquiry or join our mailing list.
Who we are
Summit and Shadow is run by Venothan Thayaparan, a sole trader based in Banstead, Surrey, UK. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the controller of your personal information. You can contact us at info@summitandshadow.co.uk.
Information we collect
When you buy a print: your name, email address, delivery and billing address, phone number (if provided) and order details. Card payments are processed securely by Squarespace Payments (powered by Stripe); we never see or store your full card details.
When you contact us: your name, email address and anything you include in your message, for example a commercial or commission enquiry.
When you join our mailing list: your email address and, if provided, your name.
When you browse the site: technical information such as your IP address, browser type and the pages you visit. Analytics information is only collected if you consent to analytics cookies. See our Cookie Policy for details.
How and why we use your information
To fulfil your order - processing payment, producing and delivering your print, and providing customer service. Lawful basis: performance of a contract.
To respond to your enquiries. Lawful basis: our legitimate interest in replying to people who contact us, or steps taken at your request before entering into a contract.
To send our newsletter with new prints, stories and offers. Lawful basis: your consent. You can unsubscribe at any time using the link in every email.
To keep business and tax records as required by HMRC. Lawful basis: legal obligation.
To understand how the site is used and improve it. Lawful basis: your consent to analytics cookies.
Who we share your information with
We do not sell your personal information. We share it only with trusted providers who help us run the business:
Squarespace - website hosting, online shop, analytics and email campaigns.
Stripe - secure payment processing via Squarespace Payments.
Point 101 - our London fine art print studio, which produces and dispatches your order and receives your name and delivery address for that purpose.
Delivery companies such as Royal Mail and couriers, to deliver your order.
Our email provider, for correspondence with you.
We may also disclose information where required by law.
International transfers
Some of our providers, including Squarespace and Stripe, may process data outside the UK, for example in the United States. Where this happens, they use safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.
How long we keep your information
Order and transaction records: six years after the end of the tax year, as required for tax purposes.
Enquiries: up to two years after our last contact, unless they lead to an order.
Mailing list: until you unsubscribe.
Your rights
You have the right to ask for a copy of your personal information, to have it corrected or deleted, to restrict or object to how we use it, to ask for it to be transferred, and to withdraw consent at any time (for example by unsubscribing). To exercise any of these rights, email info@summitandshadow.co.uk. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.
Security
We use reputable providers with appropriate security measures, and limit access to your information to what is needed to run the business.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.