Privacy Policy

Last updated: 29 April 2026

1. Who We Are

Summone Consulting is a trading name of Summone Limited, a company registered in Scotland. We are the data controller for personal data collected via this website.

ICO Registration Number: ZC123116
Data Controller: Summone Limited
Address: Flat 0/1, 16 Springfield Gardens, Glasgow, G31 4JD
Contact: steven@summone.co.uk

2. What Data We Collect

We collect personal data only when you choose to contact us. This includes:

• Your email address
• Your name if provided
• The content of your message

We do not use cookies for tracking, advertising, or analytics at this time. If this changes, this policy will be updated and a consent notice will be displayed.

3. How We Use Your Data

We use your contact information solely to respond to your enquiry and follow up on any consulting engagement you request. We do not sell, share, rent, or transfer your personal data to third parties for marketing purposes. We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

We process your data on the basis of legitimate interests under UK GDPR Article 6(1)(f). Where you book a consultation or enter a service agreement, processing is necessary for contract performance under Article 6(1)(b).

5. How Long We Keep Your Data

Contact enquiries are retained for up to 12 months, after which they are securely deleted unless an active client relationship exists. Client engagement records are retained for 6 years for legal and accounting purposes in accordance with UK law.

6. AI Tools and Data Handling

Summone Consulting uses artificial intelligence tools as development and productivity aids during client engagements. The tools we use include:

• Claude by Anthropic. Used for content development, code assistance, and strategic analysis.
• ChatGPT by OpenAI. Used for research, content development, and code assistance.
• Microsoft Copilot by Microsoft. Used for productivity, document creation, and code assistance.
• Gemini by Google. Used for research and content development.
• n8n. Used for workflow automation builds.
• Antigravity. Used for agentic workflow development.
• VAPI. Used for voice AI application development.
• ElevenLabs. Used for voice synthesis in AI applications.

Our policy is to minimise client data input into AI tools. Where AI tools are used during client engagements, we advise clients on appropriate data handling, the distinction between consumer and enterprise tool versions, and the risks of inputting personally identifiable or commercially sensitive data. Where consumer versions of AI tools are used at client direction, clients are advised in writing of the associated risks and data minimisation requirements. Final decisions on tool usage remain with the client.

Each of the above tools operates under its own terms of service and privacy policy. Enterprise and API versions are used where available, as these do not use inputs for model training by default.

7. Third Party Services and Subprocessors

The following third party services may process personal data on our behalf:

• Calendly. Used for meeting bookings. Privacy policy at calendly.com/privacy.
• Microsoft. Email and productivity tools.
• Anthropic. AI development assistance.
• OpenAI. AI development assistance.
• Google. AI development assistance and productivity tools.

8. Your Rights Under UK GDPR

You have the right to:

• Access a copy of the personal data we hold about you
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Object to processing based on legitimate interests

Contact steven@summone.co.uk to exercise any of these rights. We will respond within 30 days. You have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data. Our website is served over HTTPS. Contact data is handled via encrypted email. We maintain professional indemnity insurance covering our consulting activities.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be noted with an updated date at the top of this page.

11. Contact