Privacy Policy

Data controller: Sproutskeleton, The Taunton Center, 25 Taunton Pl, London NW1 6HB, United Kingdom. Contact: message@sproutskeleton.world, +442070007900.

Data we collect

We collect name, email, optional phone, message content, cookie preferences, technical logs, and essential security records.

Legal framework

Processing is carried out under UK GDPR and the Data Protection Act 2018. Electronic communications data is handled in line with PECR where applicable.

Purposes and legal bases

Order and support communication (contract and legitimate interests), fraud and security prevention (legitimate interests and legal obligations), analytics and marketing cookies (consent).

Retention periods

Order and communication data: up to 24 months after final interaction. Consent records: up to 36 months. Security logs: up to 12 months unless legal obligations require longer storage.

Your rights

You may request access, rectification, erasure, restriction, portability, and objection. You may also withdraw consent where consent is the legal basis.

Data sharing

Data may be processed by contracted service providers for hosting, email delivery, and analytics under data processing agreements and confidentiality obligations.

Security measures

We apply HTTPS transport security, access controls, minimum privilege practices, and monitoring controls intended to reduce unauthorized access risks.

International transfers

When transfers occur outside the UK or EEA, we use safeguards such as standard contractual clauses or equivalent lawful mechanisms.

Complaints

You may contact us first to resolve concerns. You may also contact the UK Information Commissioner's Office if you believe your data rights have not been addressed.