Privacy policy

1. Who We Are

TwelvePeaks
Registered Address: 36A Broughton Street, Cheetham Hill, Manchester, M8 8NN, United Kingdom
Email: support@twelvepeaks.co.uk

Phone: +44 7414686122

We are the data controller responsible for your personal data under UK data protection law.

 

2. Information We Collect

We may collect and process the following types of personal information:

a) Information You Provide Directly

  • Name
  • Email address
  • Phone number
  • Billing and shipping address
  • Payment details (processed securely by third parties — we do not store full card details)
  • Account login details (if you register an account)
  • Any communication you send to us (e.g. via contact form or email)

b) Information We Collect Automatically

  • IP address
  • Browser type and device information
  • Cookies and similar tracking technologies (see our Cookie Policy)
  • Usage data (pages visited, time spent, clicks, etc.)

c) Information from Third Parties

  • Payment processors (e.g. Stripe, Klarna, PayPal)
  • Delivery and courier services
  • Marketing partners (if you have consented to receive communications)

 

3. How We Use Your Information

We use your personal data for the following purposes:

Purpose

Lawful Basis under UK GDPR

To process and deliver your orders

Performance of a contract

To create and manage your account

Performance of a contract

To communicate with you (order updates, queries)

Legitimate interests

To send marketing emails or offers

Consent (you can withdraw anytime)

To prevent fraud and ensure website security

Legitimate interests

To comply with legal or tax obligations

Legal obligation

 

4. Marketing and Communications

4.1. If you opt-in to receive marketing, we may send you information about promotions, new products, or special offers.
4.2. You can unsubscribe at any time by clicking the “unsubscribe” link in our emails or by contacting us directly.
4.3. We will never sell or rent your personal information to third parties for marketing purposes.

 

5. Sharing Your Information

We only share your data when necessary, including:

  • Payment providers (e.g. Stripe, Klarna, PayPal, Clearpay, Amazon Pay)
  • Delivery couriers (e.g. Royal Mail, DPD, Evri, etc.)
  • Email service providers (e.g. Mailchimp, Klaviyo, etc.)
  • Website hosting and IT support
  • Legal or regulatory authorities, if required by law

All third parties are required to respect the security of your data and use it only in accordance with data protection law.

 

6. Data Retention

We keep your personal information only for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

For example:

  • Order records: 6 years (for tax purposes)
  • Customer accounts: until you request deletion
  • Marketing data: until you withdraw consent

 

7. Security of Your Information

We use appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

This includes:

  • SSL encryption (HTTPS)
  • Secure payment processing via third parties
  • Access controls and data minimisation

 

8. Your Data Protection Rights

Under the UK GDPR, you have the following rights:

  • Right to access – Request a copy of the personal data we hold about you.
  • Right to rectification – Request correction of inaccurate or incomplete data.
  • Right to erasure – Request deletion of your personal data (in certain cases).
  • Right to restrict processing – Limit how we use your data.
  • Right to data portability – Receive your data in a structured, machine-readable format.
  • Right to object – Object to processing for direct marketing or legitimate interests.

To exercise any of these rights, please contact us at:
📧 support@twelvepeaks.co.uk

We may need to verify your identity before fulfilling your request.

 

9. Cookies

Our website uses cookies to enhance your browsing experience and analyse site usage.
You can manage or disable cookies in your browser settings.

For more information, see our separate Cookie Policy.

 

10. International Transfers

We primarily store your data within the UK or European Economic Area (EEA).
If we transfer data outside of these regions (for example, to service providers in the US), we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or standard contractual clauses.

 

11. Children’s Privacy

Our website is not intended for use by anyone under 16 years old.
We do not knowingly collect personal information from children.

 

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated “Last Updated” date.
Please check back periodically to stay informed.

 

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

📧 Email: support@twelvepeaks.co.uk

📞 Phone: +44 7414686122
🏢 Address: 36A Broughton Street, Cheetham Hill, Manchester, M8 8NN, United Kingdom