Privacy policy

Last updated: 22 June 2026

This policy describes how Summit With Mark (“we”, “us”) handles personal information when you use this website. It is intended to help you understand your privacy rights. It does not constitute legal advice. If you need certainty for your situation, consider taking independent advice.

Who we are

Summit With Mark is a professional coaching and therapy practice based in the United Kingdom. For the purposes of UK data protection law, we are the data controller of personal information processed as described in this policy.

What this website collects

On this website we do not use analytics or advertising trackers. If you use our contact form or client health record form, you may provide:

Your name
Your email address
Your phone number (if you choose to provide it)
Your message and any details you include about your interests or circumstances
Your address, date of birth, occupation, activities and emergency contact details
Health information relevant to safely assessing and providing treatment, including medical conditions, allergies, medication, pregnancy and treatment by other healthcare professionals

How we use your information

We use contact form submissions to read your enquiry and respond to you about our services. The legal bases we rely on under the UK GDPR are typically:

Legitimate interests — to respond to enquiries and manage our business relationship with prospective clients, in a way you would reasonably expect and that does not override your rights.
Where relevant, pre-contractual steps at your request (for example, discussing services you may book).

We use information submitted through the client health record to assess your suitability for treatment, provide treatment safely, maintain an appropriate client record and, where necessary, establish or defend legal claims. Health information is special category data. Where applicable, we rely on your explicit consent to process it for the purposes stated on the form, alongside an appropriate lawful basis under Article 6 of the UK GDPR. You may withdraw consent by contacting us, although withdrawal does not affect processing already carried out and we may still need to retain certain records where another legal basis applies.

We do not sell your personal information and we do not use it for automated decision-making that produces legal or similarly significant effects.

Form delivery (Web3Forms)

Submissions from our contact form and client health record are sent by email using Web3Forms, a third-party form handler. When you submit a form, your data is transmitted to Web3Forms so it can process and forward the message to us.

Web3Forms states that form submissions are not stored, although server logs containing technical or personally identifiable information may be retained temporarily. Its servers are located in the United States. Please review Web3Forms’ privacy information for further details. We use this service so we can operate a simple static website without running our own form server.

Retention

We keep enquiry emails only for as long as needed to respond and manage any follow-up. Client health records are kept only for as long as needed to provide services and for any period required for legal, regulatory, professional or insurance purposes. If you would like us to delete information sooner where the law allows, contact us using the same channels you used to reach us.

Security

We use reasonable measures appropriate to the nature of the data and the way this site is hosted. No transmission over the internet or by email is completely secure. Please include only the health information requested by the client health record and do not add unrelated medical documents or information.

Your rights

Under UK data protection law you may have rights including: access, rectification, erasure, restriction of processing, objection, and data portability, in each case subject to conditions and exceptions in the law.

You may also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom.

International transfers

Our website is hosted and our form provider may process data in or through countries outside the UK. Where such transfers occur, we expect safeguards such as the UK’s adequacy regulations or appropriate contractual terms to apply, depending on the services in use at the time.

Children

This website is aimed at adults seeking coaching or therapy services. We do not knowingly collect personal information from children without appropriate parental authority. If you believe we have received a child’s information in error, please contact us so we can delete it where appropriate.

Changes

We may update this policy when our website, services, or legal requirements change. The “Last updated” date at the top will be revised when we do. Continued use of the site after changes means you accept the updated policy where the law allows.

Contact

For privacy questions, please contact us through the contact form on our holding page, or using any business contact details we publish when the full website is available.