GDPR Compliance

Last updated: October 21, 2026

Our Commitment to Data Protection

sprout-zone is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

Data Controller Information

sprout-zone acts as the data controller for personal information collected through this website.

Contact: [email protected]

Legal Basis for Processing

We process your personal data based on:

• Consent: When you submit a contact form, you consent to us processing your information to respond to your inquiry
• Legitimate interests: To operate our business and provide requested services
• Contract performance: When necessary to fulfill service agreements

Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You can ask us to correct inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You can request that we limit how we use your personal data.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used format.

Right to Object

You can object to processing of your personal data based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month.

Data Processing Activities

We collect and process the following types of personal data:

• Contact information (name, email address)
• Service preferences and inquiries
• Communication records
• Website usage data (through cookies)

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Typically, contact inquiries are retained for up to two years.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom. Any international transfers comply with GDPR requirements.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children.

Supervisory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

Updates to This Notice

We may update this GDPR notice periodically. Material changes will be communicated through our website.

Questions and Concerns

For any questions about our GDPR compliance or data protection practices, contact us at [email protected].