Privacy Policy
Creative Sprout respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, work with us, or use our services.
Last updated: 6 July 2026
1. Who we are
Creative Sprout is a UK-based web design, SEO and digital consultancy.
For the purposes of UK data protection law, Creative Sprout is the data controller for the personal data we collect and use.
Business name: Creative Sprout
Website: https://www.creativesprout.co.uk
Contact: hello@creativesprout.co.uk
Location: 25, Windor Place, Crowborough, East Sussex, United Kingdom TN6 2HU
2. The personal data we collect
We may collect and use the following types of personal data:
Information you provide directly
This may include:
- your name
- your email address
- your phone number
- your business name
- your website address
- information you submit through our contact forms
- details about your business, project, website, goals, budget or requirements
- emails, messages and other correspondence you send to us
Information submitted through our website forms may be stored securely in WordPress via Fluent Forms and may also be sent to us by email.
Information collected automatically
When you visit our website, we may collect limited technical information, such as:
- your IP address
- browser type and version
- device type
- pages visited
- time spent on the website
- how you found our website
- general usage and performance data
This may be collected through cookies, analytics tools, server logs and similar technologies.
Client and project information
If you become a client, we may also collect and process information needed to provide our services, such as:
- project briefs
- website logins or access details
- content, images and brand assets
- business information
- billing details
- project communication
- feedback, approvals and support requests
We ask clients not to send unnecessary sensitive personal data unless it is specifically required for the project.
Information submitted through our website forms may be stored securely in WordPress via Fluent Forms and may also be sent to us by email.
3. How we use your personal data
We use personal data for the following purposes:
| Purpose | Type of data | Lawful basis |
|---|---|---|
| To respond to enquiries | Name, contact details, enquiry details | Legitimate interests |
| To discuss potential projects | Contact details, business details, project information | Legitimate interests |
| To provide web design, SEO, marketing, consultancy, hosting or support services | Client details, project information, access details, communication records | Contract |
| To manage quotes, proposals, invoices and payments | Contact details, billing details, payment records | Contract and legal obligation |
| To maintain records for accounting, tax and business administration | Contact details, invoices, payment records, correspondence | Legal obligation and legitimate interests |
| To improve our website and services | Website usage data, analytics data, feedback | Legitimate interests or consent, depending on the technology used |
| To protect our website, systems and business | Technical data, security logs, access records | Legitimate interests |
| To send relevant updates or marketing communications where appropriate | Name, email address, business details | Consent or legitimate interests, depending on the context |
We only use your personal data where we have a valid lawful basis under UK data protection law.
4. Marketing communications
We may occasionally contact business contacts with relevant information about our services, insights or updates where we believe there is a legitimate business interest.
We use Google Site Kit to connect our website with Google services, including Google Analytics and Google Search Console. Google Analytics helps us understand how visitors use the website. Google Search Console helps us monitor search visibility and technical performance.
You can ask us to stop sending marketing communications at any time by contacting us at [insert email address].
We do not sell your personal data to third parties.
If we use an email marketing platform in future, we will update this Privacy Policy where needed.
5. Cookies and analytics
Our website may use cookies and similar technologies to make the website work properly, understand how people use it, improve performance, and support marketing or measurement activity.
Some cookies are essential. Others, such as analytics or marketing cookies, are only used where consent is required.
Our website uses Google Site Kit to connect with Google services, including Google Analytics and Google Search Console. Google Analytics helps us understand how visitors use the website, such as which pages are visited and how people find us. Google Search Console helps us monitor search visibility and technical performance.
Analytics cookies are only used where consent is required and has been given.
For more information, please see our Cookie Policy.
6. Who we share your data with
We may share personal data with trusted third-party service providers who help us run our business and deliver our services.
These may include:
- website hosting providers
- email and communication providers
- Google services, including Google Analytics, Google Search Console and Google Site Kit
- form and website plugin providers, including Fluent Forms
- project management or CRM tools
- accounting and invoicing software
- payment providers
- IT, security and backup providers
- professional advisers, such as accountants or legal advisers
- contractors or specialist partners involved in delivering client work
We only share the information needed for the relevant purpose.
We may also share personal data where required by law, regulation, court order, tax authority, law enforcement body or other lawful request.
7. International transfers
Some of the tools and service providers we use may process personal data outside the United Kingdom.
Where this happens, we take reasonable steps to ensure appropriate safeguards are in place, such as recognised contractual protections or adequacy arrangements.
8. How long we keep personal data
We only keep personal data for as long as necessary.
As a guide:
- enquiry data is usually kept for up to 24 months
- client project records are usually kept for up to 7 years for legal, tax and business record purposes
- accounting and invoice records are usually kept for at least 6 years
- website analytics data is kept according to the settings of the analytics platform used
- email correspondence may be kept where needed for business, legal, contractual or support reasons
We may keep some information for longer if required to resolve disputes, enforce agreements, meet legal obligations, or protect our business.
9. How we protect your data
We take reasonable technical and organisational steps to protect personal data.
These may include:
- password-protected systems
- secure hosting
- limited access to client information
- software updates and security monitoring
- backups
- encrypted connections where appropriate
- careful selection of third-party providers
No website, email system or online service can be guaranteed to be completely secure. However, we take data protection and security seriously.
10. Your rights
Under UK data protection law, you have rights over your personal data.
These may include the right to:
- access the personal data we hold about you
- ask us to correct inaccurate or incomplete data
- ask us to delete your data in certain circumstances
- ask us to restrict how we use your data
- object to certain types of processing
- ask for your data to be transferred to another
- withdraw consent where we rely on consent
To make a request, please contact us at hello@creativesprout.co.uk.
We may need to verify your identity before responding.
11. complaints
If you have concerns about how we use your personal data, please contact us first so we can try to resolve the issue.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.
Website: https://ico.org.uk
Telephone: 0303 123 1113
12. Links to other websites
Our website may include links to third-party websites.
We are not responsible for the privacy practices, content or security of those websites. You should read their privacy policies before providing any personal data to them.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
The latest version will always be published on this page. The “Last updated” date at the top of the page will show when it was last changed.
14. Contact us
For questions about this Privacy Policy or how we use personal data, please contact:
Creative Sprout
Email: hello@creativesprout.co.uk
Website: https://www.creativesprout.co.uk