PeakRipe Privacy · trust and transparency

PeakRipe privacy policy

Your data deserves clear, disciplined handling.

PeakRipe is committed to handling personal data with clarity, restraint, and respect. This page explains what we collect, why we use it, how long we keep it, who may receive it, and the rights available to you under applicable privacy law, including the GDPR.

Last updated 13 April 2026 Applies to peakripe.com For visitors, customers, partners, and enquirers
Written for trust, clarity, and accountability.

Overview

PeakRipe is a live premium quality standard and buying surface for exceptional goods. In privacy terms, that means we collect the personal data needed to serve visitors, respond to enquiries, protect the service, and improve the customer experience responsibly.

This policy applies to peakripe.com, including our public site, contact route, analytics, and the service providers used to support customer communication, site delivery, and legitimate business operations.

If PeakRipe introduces new features that materially change how personal data is processed, this policy will be updated so that visitors and customers can understand those changes clearly.

Who controls your data

The data controller for personal data collected through the PeakRipe website is PeakRipe.

Contact email
support@peakripe.com
Primary purpose
Operating PeakRipe, serving visitors and customers, responding to enquiries, protecting the service, and supporting legitimate business operations.

If you contact PeakRipe through the site, by email, or in relation to producer, venue, partnership, or press enquiries, your message may be reviewed by the PeakRipe team and the trusted service providers described below.

What we collect

PeakRipe collects personal data in three main ways: when you provide it directly, when the site receives technical request data as part of operating normally, and when analytics tools are used to understand performance and customer experience.

Data you provide directly

  • Contact details and message content, such as your name, email address, role, how you heard about PeakRipe, and the contents of your enquiry when you use the contact form.
  • Email correspondence if you contact PeakRipe directly by email.
  • Business context you choose to include, for example whether you are a buyer, producer, maker, venue, partner, press contact, or another type of enquirer.

Technical and operational data

  • IP address and request headers used to detect abuse, diagnose issues, and protect the service.
  • User agent and referrer information to understand how the site is being accessed and from where a request originated.
  • Submission status data such as whether a contact message was received, stored, or forwarded for customer response and service handling.

Analytics and measurement data

  • Pageview and usage data may be collected on pages where analytics is enabled in order to understand traffic, engagement, site performance, and customer experience.
  • Cookie or similar identifier data may be processed by analytics technologies, depending on the page and the active configuration at the time of your visit.

PeakRipe does not require a public account to browse the site, and PeakRipe does not operate a public review system, forum, or community profile layer on peakripe.com.

How we use data

PeakRipe uses personal data for clear customer, service, security, and business purposes.

Responding to enquiries
To review your message, reply to you, route the enquiry internally, and keep a record of the exchange if needed for follow-up.
Operating the website
To deliver the site, store submissions, monitor uptime and errors, and keep core site functions working as intended.
Security and abuse prevention
To detect spam, misuse, malicious activity, and suspicious traffic patterns, including through request metadata and submission signals.
Measurement and improvement
To understand traffic, page usage, discovery patterns, performance, and opportunities to improve the customer experience.
Business continuity and record keeping
To retain a limited operational history of important contact and support interactions where needed to manage the service responsibly.
Legal and compliance purposes
To meet legal obligations, establish or defend claims, and maintain suppression or objection records where necessary.

Legal bases under the GDPR

Where the GDPR applies, PeakRipe relies on one or more of the following legal bases depending on the context:

Legitimate interests
For running and securing the website, handling ordinary business enquiries, maintaining operational records, and understanding high-level site performance where that processing is proportionate and does not override your rights and interests.
Steps prior to entering a contract or performing a contract
Where you contact PeakRipe about a potential commercial relationship, partnership, producer participation, sourcing request, or another matter that may lead to a service relationship or transaction.
Consent
Where consent is required by law, including for certain analytics or similar technologies, PeakRipe will rely on consent and you may withdraw it at any time going forward.
Legal obligation
Where processing is required to comply with applicable law, lawful requests, or regulatory obligations.

Cookies and analytics

PeakRipe may use cookies or similar technologies for site operation, measurement, and customer experience. The exact technologies used may vary by page and service configuration.

Analytics in use

PeakRipe uses Google Analytics on public pages to understand traffic, referral sources, engagement patterns, and opportunities to improve clarity, performance, and customer experience.

What analytics is for

  • understanding how visitors discover and use PeakRipe;
  • seeing which public entry points matter most;
  • improving site structure, clarity, and performance; and
  • identifying major technical or navigation issues.

Cookie choices

Where consent is legally required for analytics or similar technologies, PeakRipe will rely on the appropriate consent basis and honor updated preferences going forward.

PeakRipe does not sell personal data to advertisers and does not operate a generic ad-targeting business model.

Who may receive your data

PeakRipe uses a small number of service providers to host the site, store operational data, and route messages. Personal data may be processed by these providers only to the extent needed for the services they perform.

Hosting and site delivery Netlify may process technical request data and site delivery information in order to host and serve the website.
Database and submission storage Supabase may store contact-form submission data and related operational fields used to manage and track those submissions.
Email transmission SMTP-based email tooling may be used to send customer-service and operational notifications when a contact message is submitted.
Analytics and measurement Google Analytics may receive analytics-related data on pages where measurement is enabled.
Professional advisers or authorities Data may be disclosed where reasonably necessary to obtain advice, enforce rights, prevent misuse, or comply with law.

PeakRipe does not share personal data more broadly than necessary for site operation, customer communication, security, compliance, and legitimate business operations.

How long we keep data

PeakRipe aims to keep personal data only for as long as it is reasonably needed for the purpose for which it was collected, unless a longer period is required for legal, security, fraud-prevention, or record-keeping reasons.

Contact enquiries Generally up to 24 months after the last meaningful interaction, unless a longer period is needed for an ongoing business relationship, dispute handling, or compliance.
Security and technical logs Generally up to 90 days, unless kept longer to investigate abuse, security issues, or system failures.
Analytics data According to the active analytics-provider retention settings and only for as long as reasonably needed for measurement and improvement.
Suppression or objection records For as long as needed to respect and document your request not to be contacted or processed in a particular way.
Legal records For as long as reasonably needed to comply with legal obligations, establish rights, or defend claims.

Your rights

Depending on your location and the applicable law, you may have rights relating to your personal data. Under the GDPR, these may include:

Access
You may ask whether PeakRipe processes your personal data and request a copy of the relevant information.
Rectification
You may ask for inaccurate or incomplete personal data to be corrected.
Erasure
You may ask for personal data to be deleted where there is no continuing legal basis to keep it.
Restriction
You may ask for certain processing to be limited while a dispute or verification issue is being resolved.
Objection
You may object to processing based on legitimate interests, including direct-contact contexts where the law gives you that right.
Data portability
Where applicable, you may ask for personal data you provided to be supplied in a portable format.
Withdraw consent
Where processing relies on consent, you may withdraw that consent at any time for future processing.

To exercise your rights, email support@peakripe.com. PeakRipe may ask for enough information to verify your identity before acting on a request.

Security and confidentiality

PeakRipe uses reasonable technical and organizational measures appropriate to the nature of the service, including controlled access, trusted service providers, transport-level protections where available, spam-abuse checks, and limited-data operational handling.

No internet service is perfectly secure, and PeakRipe cannot guarantee absolute security. But the goal is disciplined handling, limited access, and proportionate protection rather than broad or unnecessary data collection.

International transfers

Some service providers that support PeakRipe may process personal data outside the European Economic Area or the United Kingdom. Where that happens, PeakRipe aims to rely on appropriate safeguards, such as contractual protections, provider commitments, or another lawful transfer mechanism.

If you would like more detail about the transfer context relevant to your data, contact PeakRipe using the details below.

Contact and complaints

For privacy questions, data requests, or complaints about how your personal data is handled, contact:

Website contact route
https://peakripe.com/contact/
Subject line suggestion
Privacy request — PeakRipe

If you are in the EEA or UK and believe your rights have been infringed, you may also have the right to complain to your local supervisory authority.

PeakRipe may update this policy when its services, processing activities, or legal obligations change. The version on this page is the current version.