Privacy Policy

This document details the data protection frameworks and processing methodologies operated by Social Sprout Consulting Ltd ("we", "our", or "us"). As a corporate entity registered in the United Kingdom, our procedures are governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where individuals interacting with this site fall under the jurisdiction of the European Union, the EU GDPR provisions apply symmetrically.

Data Collection and Lawful Basis

Information collection on this platform is restricted to data provided voluntarily via direct correspondence mechanisms, such as contact forms or electronic mail. The data parameters collected typically include nomenclature, electronic contact addresses, and the textual content of any enquiry. Processing is conducted under the lawful basis of legitimate interest, specifically the necessity of evaluating and responding to commercial or analytical enquiries.

We do not operate automated data scraping, nor do we purchase contact registries from third-party aggregators. Information is generated entirely through inbound interaction initiated by the user.

Data Processors and Infrastructure

To maintain secure and resilient operations, specific technical infrastructure is delegated to established third-party processors. These include secure hosting environments and encrypted electronic mail routing services. All such processors act strictly upon documented instruction and are contractually bound to maintain security protocols commensurate with UK GDPR requirements. Data is retained predominantly on servers located within the UK or the European Economic Area (EEA). If data routing necessitates transfer outside these zones, it is protected by Standard Contractual Clauses or equivalent safeguard mechanisms.

Retention Parameters

Data retention is governed by utility and statutory obligations. General correspondence that does not manifest into a formal commercial engagement is retained for a maximum of twenty-four months, allowing for the continuity of delayed conversations. Where an enquiry results in an active client relationship, data is transferred to our secure client management infrastructure and retained in accordance with financial auditing and legal limitation periods, typically extending to six years following the conclusion of the engagement.

Individual Rights

Under the prevailing data protection regime, individuals maintain specific rights regarding their personal data. These encompass the right to request access to the data held, the right to demand rectification of inaccurate data, and the right to request erasure, subject to overarching legal retention requirements. Furthermore, individuals may object to processing based on legitimate interests or request a restriction of processing while a dispute is evaluated.

Privacy Contact

To exercise any of the aforementioned rights, or to address concerns regarding data allocation, communication should be directed to our designated privacy point of contact via electronic mail at [email protected], or in writing to our registered office: Social Sprout Consulting Ltd, 3rd Floor, The Exchange, 12 Broad Street, Birmingham, B1 2AE, United Kingdom. If a resolution cannot be reached internally, individuals retain the right to lodge a complaint with the Information Commissioner's Office (ICO).