Privacy Notice

Last Updated: May 2026

At Sprig & Spark, we are committed to protecting the privacy of our customers.  This notice explains how we look after your personal information and tells you about your privacy rights.
 

1. Contact Details

If you have any questions about your data, please reach out to us:
Email:  hello@sprigandspark.co.uk
Data Controller: Priya Solanki, trading as Sprig & Spark.
 

2. What Information We Collect

We only collect the information necessary to fulfill your order:
  • Your Details: Name, email, and billing address to manage your account and fulfill your order.
  • Transaction Data: Details about your orders and payment history
  • Delivery Data: Your full shipping address.
  • Child Personalisation: We invite you to provide your Child’s Name. We use this solely for the shipping label and gift tag to make the arrival of their box an exciting personal experience. We do not use this for marketing or digital profiling.
  • Technical Data: Your IP address, login data, and browser type (collected via essential cookies).

3. How We Use Your Information

We use your data to make Sprig & Spark run smoothly:
  • To fulfill your orders: Managing your order, processing payments through Stripe, and delivering boxes via our couriers.
  • To manage your account: Providing you with a secure login to change your details.
  • To keep you updated: Sending essential service emails about your orders or “Welcome” journey via MailerLite.
  • Marketing: If you opt in, we may send emails about offers or new products. Unsubscribe at any time by clicking the link at the bottom of our emails. 
  • Fraud Prevention: We may use your data to detect and prevent fraudulent transactions to keep our community safe.

4. Our Lawful Bases

We process your data under the following UK GDPR bases:
  • Contract: We need your address and payment to send your boxes.
  • Consent: For the child’s name on the label and any marketing emails.
  • Legitimate Interests: To improve our website and protect against fraud.

5. Data Security

Your trust is vital to us. We protect your data using:
  • SSL Encryption: Our entire website is encrypted (look for the padlock icon).
  • Secure Servers: We use high-quality hosting with 24/7 monitoring.
  • Secure Payments: We are PCI-DSS compliant. We never see or store your full credit card details; these are handled entirely by Stripe.

6. Cookies & Tracking

We currently use essential cookies only. These are necessary for the website to function and cannot be switched off. They do not track you or store personal information beyond what is needed to run your session. We do not currently use analytics or marketing cookies.
Essential cookies allow you to stay logged into your account and keep your items in your basket while you browse.
 

7. Who We Share Your Data With

We do not sell your data.  We only share data with the partners who make our service possible:
  • SureCart & Stripe: To manage your payments.
  • Royal Mail (or our chosen courier): To deliver your boxes.
  • MailerLite: To send emails.

A note on International Transfers: Our partners (Stripe/SureCart) may process data outside of the UK.  They do so under strict legal safeguards (Standard Contractual Clauses) to ensure it remains safe. 

8. How Long We Keep Your Info

  • Legal Requirements: We retain order records for 6 years to comply with UK tax and accounting laws.
  • Active accounts: We keep your data while your account remains active.
  • Marketing: We keep your email until you unsubscribe.

9. Your Rights

You have the right to access, correct, or delete your personal data. You can manage your information at any time via your Customer Dashboard.  You also have the right to object to processing, restrict how we use your data, and request a copy of your data. To exercise any of these rights, email us at hello@sprigandspark.co.uk and we will respond within 30 days.
 

10. How to Complain

We would like to help first:  If you have concerns about how we use your data, please email us at hello@sprigandspark.co.uk so we can make it right. 
However, you also have the right to complain to the Information Commissioner’s Office (ICO) if you remain unhappy. 
You can find them at www.ico.org.uk