Privacy & cookies policy
This policy explains what personal information we collect when you visit wearesprig.com or join our waitlist, how and why we use it, who we share it with, and the rights you have over it. Sprig is a pre-launch brand, so right now the main thing we do with your data is keep you posted about our launch.
1. Who we are
Sprig (“we”, “us”, “our”) operates this website. For the purposes of UK data protection law, we are the “controller” of the personal information described here. Sprig is operated by [registered business name and address]. If you have any questions about this policy or your data, contact us at [email protected].
2. The information we collect
Information you give us. When you join the waitlist, you give us your email address.
Information we collect automatically. When you use the site we may collect technical and usage information such as your IP address, browser and device type, and the pages you view. We also record how you arrived, including the referring website and any marketing parameters in the link you clicked, such as UTM tags and the Meta (Facebook) click identifier (“fbclid”). Some of this is collected using cookies and similar technologies (see section 5).
3. How and why we use your information
We use your information for the following purposes, each with a lawful basis under UK GDPR:
- To run the waitlist and email you about our launch, early access and your founding-member offer. Lawful basis: your consent, which you give by submitting the form. You can withdraw it at any time by unsubscribing.
- To measure and improve our advertising and understand which campaigns bring people to the site (this is why we store the UTM and fbclid parameters alongside your signup). Lawful basis: your consent for advertising cookies, and our legitimate interests in understanding and growing our business.
- To operate, secure and troubleshoot the website. Lawful basis: our legitimate interests in keeping the site working and protected against misuse.
We only send marketing emails to people who have asked to hear from us, and every email includes an unsubscribe link.
4. Who we share it with
We do not sell your personal information. We share it only with the service providers who help us run the waitlist and our ads:
- Klaviyo is our email marketing platform, which stores your email and sends our emails on our behalf (Klaviyo privacy notice).
- Meta Platforms (Facebook and Instagram) receives information through the Meta Pixel so we can measure and optimise our ads (Meta privacy policy).
- Our website hosting provider serves the site and keeps standard technical logs.
5. Cookies and similar technologies
We use a small number of cookies and similar technologies:
- Strictly necessary. We store your cookie-notice choice in your browser’s local storage so we don’t show the notice on every visit. This is essential and isn’t used for tracking.
- Advertising (Meta Pixel). The Meta Pixel sets cookies
(such as
_fbp) and sends Meta information about your visit and whether you joined the waitlist, so we can measure and target our ads. When you first visit, we show a notice that we use these cookies.
You can control or delete cookies through your browser settings, and you can opt out of personalised advertising in your Meta ad preferences. Blocking advertising cookies won’t stop you from joining the waitlist.
6. International transfers
Klaviyo and Meta are based in the United States, so your information may be transferred and processed outside the UK. Where that happens, we rely on appropriate safeguards recognised under UK law, such as the UK extension to the EU-US Data Privacy Framework and/or the UK International Data Transfer Agreement (or Standard Contractual Clauses), to keep your information protected.
7. How long we keep it
We keep your waitlist details until we launch and for a reasonable period afterwards, or until you ask us to remove you or you unsubscribe, whichever is sooner. Technical logs are kept only for as long as we need them for security and troubleshooting.
8. Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information;
- object to, or ask us to restrict, how we use it;
- ask for a copy of your information in a portable format;
- withdraw your consent at any time (for example, by unsubscribing).
To exercise any of these, email [email protected]. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk, though we’d appreciate the chance to put things right first.
9. Security
We use reasonable technical and organisational measures to protect your information, and we work with established providers (such as Klaviyo) who maintain their own security standards. No method of transmission over the internet is completely secure, but we take care to safeguard the limited data we hold.
10. Children
Our website and product are intended for adults. We don’t knowingly collect personal information from children. If you believe a child has given us their information, please contact us and we’ll remove it.
11. Changes to this policy
We may update this policy from time to time. When we do, we’ll change the “last updated” date at the top, and for significant changes we’ll let waitlist subscribers know by email.
12. Contact us
Questions, requests or concerns? Email [email protected] and we’ll be happy to help.