We know tech, so you can focus on your field.

Surmount Digital ("we", "us") is an AI-first digital agency building high-performance websites, AI automation and marketing for premium dental, healthcare and retail brands. For anything relating to your data, or any of the rights below, contact us at enquiries@surmountdigital.co.uk.

Privacy isn't a checkbox we add at the end — it's an engineering decision we make at the start. We choose lawful bases before we build, collect the minimum we need, secure it properly and make consent meaningful. The same discipline we bring to performance and accessibility, we bring to your data.

• Enquiry details you send us — your name, email address and the message you write in our contact form.
• Technical and usage data — anonymous information about how the site is used, where you allow it (see Cookies & analytics).
• We don't ask for special-category data through this site. Please don't include sensitive personal or clinical information in an enquiry.

We use your data only for clear, limited purposes, each with a lawful basis under the UK GDPR:

• To reply to your enquiry and discuss working together — on the basis of taking steps at your request and our legitimate interest in responding to genuine business enquiries.
• To operate, secure and improve this website — on the basis of our legitimate interest in a fast, reliable, safe service.
• Where the law requires it (such as optional analytics or marketing cookies) — on the basis of your consent, which you can withdraw at any time.

Strictly necessary cookies keep the site working and are always on. Analytics and marketing cookies are off by default — they run only if you choose to allow them. You can change your choice at any time through the cookie banner, with Accept, Reject and Manage given equal weight and no dark patterns.

We never sell your data. We share it only with the trusted service providers that help us run the business — for example hosting and, where you've allowed it, analytics — and only under contracts that hold them to the same standards. Where data is processed outside the UK, we make sure appropriate safeguards are in place.

We keep enquiry data only as long as we need it to respond to you and to manage any resulting work or our legitimate business records. When it's no longer needed, we delete it securely.

Under the UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected, or incomplete data completed.
• Have your data erased, where that applies.
• Restrict or object to how we process your data.
• Receive your data in a portable format.
• Withdraw consent at any time, where we rely on it.

To exercise any of these, email enquiries@surmountdigital.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to put things right first.

We protect your data with practical, modern measures: encryption in transit, least-privilege access and secure, reputable infrastructure. No system is ever perfectly secure, but we build and operate to reduce risk and respond quickly if something goes wrong.

We may update this policy as our services or the law evolve. When we do, we'll change the date at the top. Significant changes will be made clear.

Questions about your privacy, or a request about your data? We read every message and reply from a person, not a bot. Email enquiries@surmountdigital.co.uk.