Privacy Policy

Sprout Society Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how Sprout Society (“we”, “us” or “our”) collects, uses, stores and shares personal information when you use our website, contact us, or use our nutrition-related products and services. Sprout Society acts as the data controller for the personal information described in this policy.

Information we may collect

Depending on how you interact with us, we may collect your name, contact details, delivery and billing information, order history, communications with us, and information about how you use our website. If you choose to provide information about your health, dietary requirements or nutrition, this may be special category personal data under UK data protection law. Please only provide it when necessary. We will process such information only where we have a valid legal condition to do so, such as your explicit consent.

How we use your information

We may use personal information to respond to enquiries, manage orders and payments, provide requested products or services, meet dietary or nutrition-related requests you have made, maintain and improve our website and services, protect against fraud or misuse, and comply with legal obligations. We will send marketing communications only where permitted by law. You can opt out of marketing at any time using the unsubscribe option or by contacting us.

Legal grounds for processing

We process personal information where necessary to perform a contract with you, comply with a legal obligation, pursue our legitimate interests (provided these are not overridden by your rights), or where you have given consent. Where we rely on consent, you may withdraw it at any time. We process special category data only when an applicable condition under UK data protection law is met.

Sharing your information

We may share information with service providers that help us operate our business, such as payment, delivery, website hosting, analytics and customer-support providers. They may use the information only to provide services to us and must protect it appropriately. We may also disclose information where required by law, to protect rights and safety, or in connection with a business transfer. We do not sell your personal information.

International transfers

If personal information is transferred outside the United Kingdom, we will use an appropriate legal safeguard where required by UK data protection law, such as UK adequacy regulations or an approved contractual safeguard.

Cookies and similar technologies

Our website may use cookies and similar technologies. Where required, we will ask for your consent before using non-essential cookies. You can manage cookies through your browser settings and, where available, our cookie preferences tool. Disabling some cookies may affect website functionality.

How long we keep information

We keep personal information only for as long as necessary for the purposes described in this policy, including to provide services, meet legal and accounting requirements, resolve disputes and enforce agreements. Retention periods depend on the type of information and the reason it was collected. We securely delete or anonymise information when it is no longer needed.

Keeping information secure

We use reasonable technical and organisational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

Subject to applicable law, you may have the right to request access to your personal information, have it corrected or erased, restrict or object to its processing, request data portability, or withdraw consent. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. To exercise your rights or ask a question, contact us using the contact details published on our website. We may need to verify your identity before responding.

Children

Our website and services are not intended to collect personal information from children without appropriate authorisation. If you believe a child has provided us with personal information inappropriately, please contact us so we can review and take suitable action.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on our website and update the “Last updated” date above. Please review it periodically.