Privacy Policy

Information we collect

The personal information we collect depends on how you interact with us.

It may include:

• →your name;
• →your email address;
• →your telephone number;
• →your company name and job title;
• →information you provide when contacting or enquiring with us;
• →information you provide during a project or client relationship;
• →correspondence and communications between you and Sprynt;
• →billing, payment and transaction information;
• →marketing preferences;
• →information about how you use our website;
• →technical information such as your IP address, browser, device type and operating system;
• →information collected through cookies and similar technologies; and
• →other information you choose to provide to us.

We do not intentionally collect special category personal information through our website and ask that you do not provide this information unless it is necessary.

How we collect your information

We may collect personal information when you:

• →contact us through our website;
• →contact us by email, telephone or another communication channel;
• →request information or a proposal from us;
• →become a client;
• →work with us on a project;
• →subscribe to marketing communications or other content;
• →interact with us through social media;
• →provide feedback or respond to a survey; or
• →otherwise provide information directly to us.

We may also collect certain technical and usage information automatically when you use our website.

In some circumstances, we may receive business contact information from third parties, referrals, professional networks or publicly available sources such as company websites and professional networking platforms.

Where we obtain personal information from another source, we will handle it in accordance with applicable data protection law.

How we use your information

We may use personal information to:

Respond to enquiries

We use your information to respond when you contact us, discuss potential projects and provide information, estimates or proposals.

Provide our services

If you become a client, we use your information to manage our relationship with you and to design, develop and deliver the website and related services you have asked us to provide.

Manage projects

We may process contact details, communications, project information and other information necessary to manage projects, obtain feedback and communicate with clients and their teams.

Manage our business

We use information where necessary for administration, accounting, invoicing, record keeping, managing suppliers and operating Sprynt.

Improve our website and services

We may use website usage and analytics information to understand how our website is used, identify problems and improve our website, content and services.

Our use of cookies and similar technologies is explained separately in our Cookie Policy.

Marketing

We may use your contact information to send information about Sprynt, our services, insights or other content that we believe may be relevant to you.

Where consent is required for electronic marketing, we will obtain it before sending the communication.

In some circumstances, UK electronic marketing rules allow us to contact existing or prospective business customers without prior consent. We will only do this where permitted by law.

You can unsubscribe from marketing communications at any time using the unsubscribe option included in our communications or by contacting us at hello@sprynt.co.uk.

Website forms

When you request our guide or send us an enquiry, we store your details in our customer relationship management system (HubSpot) and keep a secure backup copy, together with a record of the consent wording you agreed to, the time, and an anonymised version of your IP address.

If you opt in to marketing, we will only add you to our "Sprynt insights" emails after you confirm by email (double opt-in).

Our lawful bases for processing

UK data protection law requires us to have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract

We process information where it is necessary to enter into or perform a contract with you.

For example, we may need your contact and project information to provide services you have commissioned.

Legitimate interests

We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.

These interests may include:

• →operating and improving our business;
• →responding to business enquiries;
• →managing client relationships;
• →improving our website and services;
• →maintaining the security of our systems;
• →maintaining business records; and
• →promoting our services where permitted by law.

Consent

Where required, we may ask for your consent before processing your information.

This may include certain marketing activities and the use of certain cookies or similar technologies.

Where we rely on consent, you may withdraw it at any time.

Legal obligation

We may process information where necessary to comply with a legal or regulatory obligation, including accounting, taxation and other statutory requirements.

Cookies and website analytics

Our website uses cookies and similar technologies.

Some are necessary for the website to operate. Others may help us understand how visitors use our website, improve its performance or measure our marketing.

Where consent is required, these technologies will not be activated until you have made the appropriate choice.

For more information about the technologies we use and how you can manage your preferences, please see our Cookie Policy or use the Cookie Settings option on our website.

Website analytics and advertising

If you allow analytics cookies, we use Google Analytics 4 (Google Ireland Limited) to understand how our website is used.

If you allow marketing cookies, we use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) to measure our LinkedIn marketing.

We rely on your consent for these, and you can withdraw it at any time using the Cookie Settings option on our website.

Google and LinkedIn may process this information in the United States. Where they do, the transfer is covered by the UK Extension to the EU–US Data Privacy Framework or other approved safeguards.

For details of the cookies involved, please see our Cookie Policy.

Marketing communications

We may send marketing communications to business contacts where we have a lawful basis and are permitted to do so under applicable electronic marketing rules.

Where consent is required, we will obtain it before sending marketing communications.

You can ask us to stop sending marketing communications at any time by:

• →using the unsubscribe link contained in an email; or
• →emailing hello@sprynt.co.uk.

If you unsubscribe, we may retain limited information about your preference so that we can ensure we do not contact you again for marketing purposes.

Sharing your information

We do not sell your personal information.

We use the following service providers, who process personal information on our behalf:

• →Netlify, Inc.: website hosting.
• →Sanity AS: website content management and a secure backup of website enquiries.
• →HubSpot, Inc. (data stored in the EU): customer relationship management, where your enquiry and contact details are kept.
• →Resend (Plus Five Five, Inc.): sends internal email notifications when you submit an enquiry.
• →Cloudflare, Inc.: spam and abuse protection on our forms.
• →Google Ireland Limited: website analytics (only with your consent).
• →LinkedIn Ireland Unlimited Company: marketing measurement (only with your consent).
• →our accountants, legal advisers and insurers, where necessary; and
• →contractors or specialist partners involved in delivering client projects.

Where a supplier processes personal information on our behalf, we require it to handle that information appropriately and in accordance with applicable data protection requirements.

We may also disclose information where required by law, regulation, court order or another lawful authority.

If Sprynt or part of our business is sold, reorganised or transferred, relevant personal information may be transferred as part of that transaction, subject to appropriate safeguards.

International transfers

Some of the technology and service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps to ensure that the transfer complies with UK data protection law.

Depending on the destination and provider, this may include relying on UK adequacy regulations or implementing appropriate contractual safeguards or other recognised transfer mechanisms.

You can contact us if you would like further information about the safeguards applying to your personal information.

How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting and regulatory requirements and resolving potential disputes.

The appropriate retention period depends on the nature of the information and why we hold it.

For example, we may retain:

• →client and project records for as long as necessary to manage the client relationship and maintain appropriate business records;
• →financial and transaction records for the periods required by tax and accounting law;
• →enquiry information for a reasonable period following the enquiry;
• →backup copies of website form submissions (including the record of your consent) for 24 months, after which they are deleted automatically;
• →marketing information until you unsubscribe or we determine that it is no longer appropriate to retain it; and
• →technical and analytics information according to the relevant technology's retention settings.

When personal information is no longer required, we will delete, anonymise or securely dispose of it where appropriate.

Security

We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Your data protection rights

Depending on the circumstances, UK data protection law gives you rights over your personal information.

These may include the right to:

• →access personal information we hold about you;
• →correct inaccurate or incomplete information;
• →request deletion of your information in certain circumstances;
• →restrict how your information is processed in certain circumstances;
• →object to certain processing, including direct marketing;
• →receive or transfer certain information in a portable format; and
• →withdraw consent where we rely on consent to process your information.

These rights do not apply in every circumstance and some are subject to legal exemptions.

You will not normally have to pay a fee to exercise your data protection rights.

To exercise your rights, contact us at hello@sprynt.co.uk.

We may need to ask for information to verify your identity before responding to a request.

Automated decision-making and AI

We may use software, automation and artificial intelligence tools to support aspects of our internal operations and delivery of our services.

Where personal information is processed using these tools, we remain responsible for handling that information in accordance with applicable data protection law and take appropriate steps to protect it.

We do not use solely automated decision-making that produces legal or similarly significant effects on individuals unless permitted by applicable law and appropriate safeguards are in place.

Third-party websites and services

Our website may contain links to websites, platforms or services operated by third parties.

Those organisations are responsible for their own privacy practices, and we recommend reviewing their privacy policies before providing personal information to them.

Children's information

Our website and services are primarily intended for businesses and are not directed at children.

We do not knowingly collect personal information from children through our website for marketing purposes.

If you believe a child has provided personal information to us inappropriately, please contact us.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, technology or legal requirements.

The Last updated date at the top of this policy indicates when it was most recently revised.

Where appropriate, we may provide additional notice of significant changes.

Contact us

If you have questions about this Privacy Policy, how we use your personal information or would like to exercise your data protection rights, contact:

Sprynt Limited, 3 Tuscan Road, London, SE18 1SY, United Kingdom

Email: hello@sprynt.co.uk

Complaints

If you have concerns about how Sprynt has handled your personal information, please contact us so that we can investigate your concern.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.

Further information about making a complaint is available from the ICO.