Privacy Policy

2. What information we collect

The information we collect depends on how you use the website.

Contact and service enquiries

If you contact us, we may collect:

• your name
• email address
• organisation
• role
• the subject of your enquiry
• information you include in your message
• your preferred next step or contact method

We use this information to understand your enquiry, respond to you and keep an appropriate record of the conversation.

Decision Assistant

If you use the Decision Assistant, we may collect:

• the answers you provide to its questions
• information you enter about the opportunity or situation you are considering
• free-text information you choose to provide
• your name, email address, organisation or role where you choose to submit them
• the preliminary result produced from your answers

You should not include sensitive personal information or personal information about another person unless it is genuinely necessary and you have a lawful reason to provide it.

The Decision Assistant is designed to provide preliminary commercial guidance. It does not make decisions about individuals that have legal or similarly significant effects.

Technical information

Our hosting and security providers may automatically process limited technical information when you use the site, such as:

• IP address
• browser and device information
• pages or resources requested
• timestamps
• security and error logs

This information is used to operate, protect and troubleshoot the website and our tools.

3. Why we use your information

We use personal information for the following purposes:

To respond to enquiries

We use the information you send us to understand what you need and respond to you.

Our lawful basis is legitimate interests, namely operating our business and responding to people who contact us.

Where your enquiry relates to entering into a contract with us, we may also process your information because it is necessary to take steps at your request before entering into a contract.

To provide the Decision Assistant

We use the information you submit to process your request, produce the relevant preliminary result and provide the next step you have requested.

Our lawful basis is legitimate interests, namely providing and operating the Decision Assistant and helping users understand the commercial situation they have chosen to submit.

Where your use relates directly to a potential contract with Prestige Sprout, the basis may also be taking steps before entering into a contract.

To operate and protect our services

We may process technical information to maintain security, diagnose problems, prevent abuse and keep our website and tools functioning properly.

Our lawful basis is our legitimate interest in operating secure and reliable digital services.

Marketing

We will only send electronic marketing where we have an appropriate lawful basis to do so.

Where we ask you specifically to consent to receiving updates, you can withdraw that consent at any time by contacting us or using any unsubscribe option provided.

Submitting an ordinary enquiry does not automatically subscribe you to marketing.

4. Cookies, analytics and tracking

We do not use advertising cookies, behavioural advertising or social-media tracking to build profiles of visitors.

The website or our tools may use technical storage or cookies where these are genuinely necessary for security, session management or operation.

If we introduce non-essential analytics, advertising technology or other cookies that require consent, we will update this policy and provide the appropriate choice before those technologies are used.

5. Who we share information with

We do not sell personal information to advertisers or data brokers.

We may use trusted service providers to operate parts of our website and tools, including providers of:

• website and application hosting (Vercel)
• database and cloud infrastructure (Supabase)
• email and communications (Fasthosts)
• security and monitoring
• AI and software-processing services where required to provide a tool or feature (Anthropic)

Anthropic's Claude API generates the output of the Decision Assistant from the answers you provide. Anthropic's commercial terms state that they do not train models on customer content submitted through their API. Their data retention arrangements are set out in their own published policy.

These providers may process information on our behalf only where needed to provide the relevant service.

We may also disclose information where required by law, regulation, court order or a lawful request from a public authority.

6. International processing

Some of the technology providers we use may process information outside the United Kingdom.

Where personal information is transferred internationally, we take steps to use an appropriate transfer mechanism or other safeguard required by UK data protection law.

You can contact us at hello@prestigesprout.co.uk if you would like further information about the safeguards relevant to your information.

7. How long we keep information

We do not keep personal information indefinitely.

Enquiries and Decision Assistant submissions

Information submitted through our contact routes or the Decision Assistant may be retained for up to 24 months from the last meaningful interaction, unless:

• you ask us to delete it earlier and we have no legal reason to retain it
• it becomes part of an active customer or contractual relationship
• we need to retain it for longer to establish, exercise or defend legal claims
• another legal or regulatory retention requirement applies

If an enquiry becomes a customer engagement, relevant information may form part of the customer record and will be retained under the arrangements that apply to that engagement.

Technical logs

Technical and security logs are kept only for as long as reasonably required for security, troubleshooting and operational purposes, subject to the retention settings of the providers operating those systems.

8. How we protect information

We use reasonable technical and organisational measures appropriate to the nature of the information we process.

These may include controlled access, secure hosting, encrypted connections and restrictions on who within Prestige Sprout or our service providers can access information.

No internet-based system can be guaranteed to be completely secure, but we take reasonable steps to reduce the risk of unauthorised access, loss or misuse.

9. Your rights

Depending on the circumstances, UK data protection law may give you the right to:

• ask for a copy of personal information we hold about you
• ask us to correct inaccurate information
• ask us to delete information
• ask us to restrict how information is used
• object to certain processing
• receive certain information in a portable format
• withdraw consent where processing relies on consent

Some rights depend on the lawful basis and circumstances of the processing.

To exercise a right, email hello@prestigesprout.co.uk.

We may need to verify your identity before completing a request.

Your right to object

Where we process your personal information on the basis of our legitimate interests, you have the right to object to that processing in certain circumstances.

Contact us at hello@prestigesprout.co.uk if you wish to object.

10. Complaints

If you have concerns about how we have handled your personal information, please contact us first so that we can investigate.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection.

11. Links to other websites

Our website may contain links to websites operated by other organisations.

Their privacy practices are outside our control, so you should read the privacy information provided by the relevant organisation when you leave a Prestige Sprout service.

12. Changes to this policy

We may update this policy as our website, tools or data practices change.

Where a change materially affects how we use personal information, we will update this notice before beginning the new processing where required.

The date at the top shows when this policy was last updated.

13. Contact

Questions about this policy or our use of personal information can be sent to:

Prestige Sprout Media Ltd
71-75 Shelton Street
Covent Garden
London
United Kingdom
WC2H 9JQ

hello@prestigesprout.co.uk