Privacy Policy

1. Who We Are

SummCore Boost is a business health assessment tool operated by SummCore. If you have any questions about this policy, contact us at info@summcore.com.

2. What Data We Collect

When you use SummCore Boost, we may collect the following personal data:

• Your email address (required to receive your results)
• Your name, company name, and website URL (optional, provided voluntarily)
• Your assessment responses and business health scores
• Your industry type
• Payment details — handled securely by Stripe; we do not store card numbers
• Your IP address and basic browser information (for security and fraud prevention)

3. Why We Collect It

We use your data for the following purposes:

• To deliver your assessment results and AI-generated business report
• To send you your premium report by email after purchase
• To send you occasional growth tips and business insights, if you gave consent
• To process your payment securely via Stripe
• To improve the assessment tool and detect misuse

4. How We Use AI

Your assessment responses are processed by Anthropic Claude AI to generate personalised insights and reports. We pass your business-related answers (such as pillar scores and industry) to the AI. We do not pass your name, email, or other personally identifiable information to the AI model.

5. Who Sees Your Data

• SummCore — to operate the service and respond to your enquiries
• Stripe — to securely process payments. Stripe is PCI-DSS compliant. View their privacy policy at stripe.com/gb/privacy
• Anthropic — to generate AI insights from your assessment data (no PII is shared)
• We do not sell your data to third parties

6. How Long We Keep Your Data

• Assessment data and results: retained for up to 12 months
• Payment records: retained for 7 years to meet legal and accounting requirements
• Marketing consent preferences: retained until you withdraw consent

7. Cookies

SummCore Boost uses a session cookie to maintain your assessment state as you move through the tool. This is essential to the service and does not track you across other websites. We also use Google Analytics to measure how users navigate the site (page views and key actions). You can opt out of Google Analytics tracking via your browser settings or by using a browser extension such as the Google Analytics Opt-out Add-on.

8. Your Rights (UK GDPR)

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your personal data (subject to legal retention requirements)
• Withdraw consent — opt out of marketing emails at any time by contacting us or clicking unsubscribe
• Complain — lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email us at info@summcore.com.

9. Data Security

We take reasonable steps to protect your personal data from unauthorised access, loss, or misuse. All data is transmitted over HTTPS. Payment data is handled exclusively by Stripe and is never stored on our servers.

10. Changes to This Policy

We may update this policy from time to time. We will update the "Last updated" date at the top of this page when we do. Continued use of SummCore Boost after a change constitutes acceptance of the updated policy.