PRIVACY POLICY
Last updated: 16 March 2026
1. Who we are
Peak & Vale Co. Ltd (“Peak & Vale”, “we”, “us”, “our”) is a company registered in England and Wales (company number 16950966) with registered office at 86–90 Paul Street, London, EC2A 4NE.
We are the controller of the personal data we collect through www.peakandvale.co (the “Website”). This Privacy Policy explains how we collect, use and share personal data when you visit the Website, join our email lists, or otherwise interact with us.
If you have questions, contact us at:
Email: nate@peakandvale.co
Postal: Peak & Vale Co. Ltd, 86–90 Paul Street, London, EC2A 4NE.
2. What data we collect
Depending on how you interact with us, we may collect: freeprivacypolicy
Identity data: name, email address, social handle (if you provide it).
Contact and marketing data: newsletter sign‑ups, preferences, waitlist entries, survey responses.
Technical data: IP address, device identifiers, browser type, operating system, time zone, referring URLs, pages viewed, session duration (via cookies and similar technologies). cookieinformation
Usage data: how you navigate and interact with the Website, links clicked, scroll depth.
Communication data: messages you send via forms or email, feedback and support requests.
We do not intentionally collect special category data (e.g. health, ethnicity) via our lead capture flows.
3. How we use your data and legal bases
We process personal data under UK data protection law (UK GDPR and the Data Protection Act 2018). Where other laws apply to you (e.g. EU GDPR or some non‑UK regimes), we aim to respect equivalent principles. commission.europa
We use your data for:
3.1 Email marketing, newsletters and waitlists
To send you the emails you sign up for (newsletters, launch updates, lookbooks, waitlists, lead magnets).
Legal basis (UK/EU): your consent. You grant this by actively ticking a box or confirming via a double opt‑in email. You can withdraw consent at any time.
3.2 Operating the Website
To provide and maintain the Website, keep it secure, troubleshoot issues and improve user experience.
Legal basis: our legitimate interests in operating and improving the Website, and your consent where required for non‑essential cookies (analytics/marketing).
3.3 Analytics and performance
To understand how visitors use the Website (what content is popular, where visitors come from, device breakdown) so we can refine our products and marketing.
Legal basis: your consent for analytics cookies and similar technologies, where required by law.
3.4 Responding to you
To respond to enquiries, feedback, collaboration requests or customer service issues.
Legal basis: legitimate interests (running our business and responding to queries) and/or contractual necessity where relevant.
3.5 Compliance, security, and enforcement
To comply with legal obligations, enforce our Terms of Use, prevent fraud or misuse, and protect our rights, property and users.
Legal basis: legal obligation and legitimate interests in protecting Peak & Vale and our community.
We do not use your personal data for automated decision‑making that produces legal or similarly significant effects.
4. Cookies and similar technologies
We use cookies and similar technologies on the Website.
Strictly necessary cookies – required for core functionality (e.g. security, load balancing, basic navigation). These are set without consent.
Analytics cookies – help us understand website usage (page views, session length, user flows). Set only with your consent via our cookie banner.
Marketing / preference cookies – may be used in connection with email tools or ad platforms to measure campaigns or remember preferences. Also only set with your consent.
You can:
Manage non‑essential cookies via our cookie banner or settings link.
Use your browser settings to block or delete cookies (some features may not work properly if you do). cookieinformation
If we maintain a separate Cookie Notice with a cookie table, that document explains each cookie in more detail.
5. Who we share your data with
We may share personal data with: harperjames.co
Service providers / processors
Email marketing platforms and CRMs (for newsletters and campaigns).
Website hosting, security and maintenance providers.
Analytics providers (for aggregate usage stats).
Professional advisers
Lawyers, accountants, insurers and similar advisers where necessary.
Authorities and regulators
Law enforcement, regulators or courts where we are legally required to do so or where it is necessary to protect our rights or those of others.
We require service providers who process personal data on our behalf to protect it, use it only as instructed, and comply with applicable data protection laws.
We do not sell your personal data.
6. International transfers
Our service providers and partners may be located outside the UK and the European Economic Area (EEA).
Where personal data is transferred internationally, we will ensure appropriate safeguards are in place, such as:
A UK adequacy regulation for the destination country; or
Standard contractual clauses / International Data Transfer Agreements approved by the UK or EU authorities; or
Other safeguards permitted by applicable law.
You can contact us for details of specific safeguards used for a given transfer.
7. How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this Policy, and to comply with legal, tax and accounting obligations.
By way of example:
Marketing and waitlist data: retained while you remain subscribed or engaged, plus a short period afterwards for suppression/record‑keeping, then deleted or anonymised.
Technical and analytics data: retained for a limited period consistent with our analytics tools’ settings.
We may retain aggregated or anonymised data (that no longer identifies you) for longer.
8. Your privacy rights
Your privacy rights depend on where you live, but broadly you may have the following rights over your personal data:
Access – to request a copy of personal data we hold about you.
Rectification – to ask us to correct inaccurate or incomplete data.
Erasure – to ask us to delete your data in certain circumstances (“right to be forgotten”).
Restriction – to ask us to limit the processing of your data in certain cases.
Portability – to receive your data in a structured, commonly used format where legally applicable.
Object – to object to certain processing, including direct marketing.
Withdraw consent – where we rely on consent (e.g. newsletters, non‑essential cookies), you can withdraw it at any time.
To exercise any rights, email us at nate@peakandvale.co. We may ask for information to verify your identity and, in some cases, to clarify your request.
You also have the right to lodge a complaint with your local data protection authority. In the UK, that is the Information Commissioner’s Office (ICO): www.ico.org.uk.
9. Direct marketing and global compliance
We will only send you marketing emails where we are allowed to do so by law (e.g. with your prior consent, or under limited “soft opt‑in” rules where applicable).
Every marketing email we send will include:
The identity of Peak & Vale Co. Ltd.
Our postal address.
A clear and easy way to unsubscribe or manage preferences.
This approach is designed to comply with UK GDPR and PECR, and to align with comparable international regimes such as EU GDPR and the US CAN‑SPAM Act.
You can opt‑out of marketing at any time by using the unsubscribe link in our emails or by contacting us.
10. International users and local laws
The Website can be accessed globally. While Peak & Vale is established in the UK and primarily subject to UK data protection law, we aim to handle personal data in a way that is broadly consistent with major international privacy principles.
If you are located in the EU/EEA, we will treat your personal data in line with EU GDPR standards, including cross‑border transfer safeguards.
If you are located in the United States, we do not currently “sell” or “share” personal information for cross‑context behavioural advertising in the sense used in US state privacy laws (such as the California Consumer Privacy Act as amended by the CPRA). If this changes, we will update this Policy and provide any required rights and opt‑outs.
If your local law gives you additional rights beyond those described here, we will honour those rights where we are required to do so, and where it is reasonably practical.
Regardless of where you are, you can always contact us to exercise the rights described in section 8.
11. Third‑party links
The Website may contain links to third‑party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to read their privacy notices.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on the Website with a new “Last updated” date. If changes are significant, we may notify you by email or with a notice on the Website.