Privacy notice
Version 0.1.0-draft, in force from 2026-09-30.
Who we are
Summit Rock publishes research on listed mining companies. This notice says what we hold about you when you use the site, why, for how long, and what you can ask of us.
What we collect
Your email address and name when you sign in with Google, LinkedIn or an email link. The plan you hold and when it was granted. Your watchlist. Whether you opted in to The Morning Wire, and when. The category you attest to if you take a Professional seat. A record of the valuation pages you open, kept for audit. Your IP address in the network logs of our hosting and edge providers.
What we do not collect
We do not hold card numbers. Payments are made on a page hosted by Stripe, which sends us the confirmation and the receipt. We set no advertising or analytics cookies; the only cookie is the one that keeps you signed in.
Why we use it
To run your account and the plan you chose. To keep the site secure and meter fair use. To send you The Morning Wire while you have opted in. To keep the financial and attestation records the law requires.
Who else sees it
The providers listed on this page process data for us under their own terms: payments, email, the network edge, hosting and the sign-in providers you choose. We do not sell personal data and we do not share it with anyone else.
How long we keep it
For as long as your account exists, and then as the retention table on this page says. When you delete your account, what identifies you is removed at once and the records we must keep are kept without your name or address.
Where it is held
Summit Rock is established in Singapore. The site is hosted with Amazon Web Services and reached through Cloudflare. Some providers hold data in the United States under their own safeguards.
Your rights
The rights listed on this page apply to you wherever you live. Most of them you can exercise from your account page without writing to us. We answer any request within one month.
Contact
Write to the data protection contact at the address on this page for anything about your data.
Why we may use your data
- To provide the account and the plan you chose.
- Legal basis: contract.
- To keep the service secure, meter fair use and keep the record of who saw valuation content.
- Legal basis: legitimate interest.
- To send you The Morning Wire, only while you have opted in.
- Legal basis: consent.
- To keep the record of what was bought and for how long, as tax and company law require.
- Legal basis: legal obligation.
- To keep the record of the category under which a Professional seat was opened.
- Legal basis: legal obligation.
Who processes it for us
| Provider | For | Data | Where |
|---|---|---|---|
| Stripe | Card payments and subscriptions | Name, email address and the payment itself; card details are held by Stripe, never by us | Singapore entity, with Stripe's infrastructure in the United States |
| Resend | Sign-in links, service email and The Morning Wire | Email address, name, the email sent | United States |
| Cloudflare | The network edge in front of the site | IP address, request logs | Global edge network |
| Amazon Web Services | Hosting of the site and its data | Everything the site holds | Region to confirm |
| Sign-in with a Google account | Email address and name, from Google, when you choose it | United States | |
| Sign-in with a LinkedIn account | Email address and name, from LinkedIn, when you choose it | United States |
How long we keep it
| Your account | Until you delete it, or until it has been inactive for the period below and we have written to you |
| Inactive account, before we write to you | 24 months |
| The record of valuation pages you opened | 365 days |
| The fair-use meter | 90 days |
| Records of what you bought, after an account is deleted, without your name | 7 years |
| The consent log, after an account is deleted, without your name | 3 years |
| A request you make, answered within | 30 days |
| The pause before a deletion runs, which you can cancel | 14 days |
What you can ask
- See the data we hold about you
- Download it from your account page at any time, or write to us.
- Take your data with you
- The download is a plain JSON file you can keep or move.
- Correct your details
- Change your name on your account page, or write to us for anything else.
- Delete your account
- Ask from your account page. Deletion runs after a short pause you can cancel; records the law requires us to keep are kept in a form that no longer identifies you.
- Pause how we use your data
- Write to us and we stop everything but what the law requires while we look at your request.
- Object to marketing
- Turn The Morning Wire off on your account page, or use the unsubscribe link in any edition.
- Complain to a supervisory authority
- You can complain to the authority where you live. We would rather hear from you first.
Most of these are on your account page. For the rest, write to the data protection contact at [email protected].
The laws this notice answers to
- General Data Protection Regulation (EU) 2016/679 and the UK GDPR, for readers in the EU and the UK
- Personal Data Protection Act 2012 (Singapore), where Summit Rock is established
- Privacy Act 1988 (Cth) and the Australian Privacy Principles, for readers in Australia
The controller is Summit Rock Pte Ltd, Singapore. Read also the disclaimer and terms.