From Shed To Summit Subscribe

Privacy policy

Last updated: 1 November 2026

This policy explains what personal information is collected when you visit fromshedtosummit.com, how it is used and the choices you have. I have kept it short and in plain English.

Who I am

This website is run by Paul Howell, trading as From Shed To Summit, based in the United Kingdom. I am the "data controller" for the personal information described here. You can contact me about anything in this policy at shedtosummit@gmail.com.

What I collect

Information you give me. If you use the contact form on this site, I receive your first and last name, your email address, the topic you choose and your message. Please don't include anything sensitive in a message.

Information collected automatically. The site is hosted by Netlify, which records basic technical information about each visit, such as your IP address, browser and the page requested, in its server logs to deliver the site and keep it secure. I don't use any analytics or tracking tools on the site.

Embedded content. Video pages show a YouTube video. Nothing is loaded from YouTube until you press play; the player then uses YouTube's privacy-enhanced mode, and Google (YouTube) may set cookies and record your viewing as if you visited YouTube directly. Thumbnail images are loaded from YouTube's image servers. The Instagram photos on the home page are stored on this site and only link to Instagram. Their own privacy policies apply.

Affiliate links. Some links on the site and in video descriptions are affiliate links, including Amazon (often via geni.us short links), Temu and Flextail. If you click one, the retailer or affiliate network may set cookies to record that you came from my link, and I may earn a small commission at no extra cost to you. As an Amazon Associate I earn from qualifying purchases. I don't receive any personal details about you from these programmes, only anonymous sales totals.

How I use it and why

  • To reply to your message, including brand and partnership enquiries. The legal basis is my legitimate interest in answering people who contact me, or taking steps towards a contract if you are a business.
  • To keep the site secure and working properly, which Netlify does on my behalf.

I don't sell your information, I don't send marketing emails unless you have asked for them, and I don't use your information for automated decision-making.

Who it's shared with

  • Netlify, which hosts the site and processes contact form messages for me.
  • Google, because messages from the contact form are delivered to a Gmail inbox, and because YouTube is part of Google.
  • Affiliate retailers and networks, only when you choose to click an affiliate link.

Some of these companies are based in, or store data in, the United States. Where that happens, the transfer is covered by the UK's approved safeguards, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement.

Cookies

Cookies are small files stored in your browser. This site doesn't set any cookies of its own. Third-party cookies may be set by YouTube once you play a video, and by affiliate partners if you click an affiliate link. You can block or delete cookies in your browser settings. Blocking them will not stop the site working, although embedded videos may not play.

How long I keep it

I keep contact form messages and the emails that follow for up to 24 months after our last conversation, unless we are working together and need a longer record (for example, for tax purposes). Netlify keeps its server logs according to its own retention settings.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal information I hold about you
  • ask me to correct it if it is wrong
  • ask me to delete it
  • object to, or ask me to limit, how I use it
  • withdraw your consent at any time, where I rely on consent

To use any of these rights, email shedtosummit@gmail.com. I will reply within one month. If you are unhappy with how I have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. I would appreciate the chance to put things right first.

Children

This website is aimed at adults. I don't knowingly collect personal information from children under 13. If you believe a child has sent me their details, please get in touch and I will delete them.

Links to other websites

This site links to other websites, including retailers, YouTube, Instagram and Facebook. I am not responsible for their privacy practices, so please read their policies.

Changes to this policy

I will update this page if the site changes, for example if I open the shop or start a newsletter. The date at the top shows when it was last updated.