top of page

Privacy Policy

Last updated: 6 October 2026
​

At Sprig. Shop Ltd, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit or shop through www.sprigshop.co.uk, contact us, place an order, book a workshop or otherwise interact with us.

We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

1. Who we are

Sprig. Shop Ltd is the company responsible for your personal information.

If you have any questions about this Privacy Policy or how we use your information, please contact us using the contact details provided on our Website.

2. Information we collect

Depending on how you interact with us, we may collect:

Information you provide to us

This may include:

  • Your name

  • Billing and delivery address

  • Email address

  • Telephone number

  • Payment and transaction information

  • Details of the products you purchase

  • Personalised messages or information you provide with an order

  • Workshop or class booking information

  • Information you provide when contacting us

  • Information you provide when signing up to marketing communications

  • Any other information you choose to provide to us

Information collected automatically

When you visit our Website, certain information may be collected automatically, including:

  • IP address

  • Browser and device information

  • Pages visited and how you interact with our Website

  • Referring websites

  • Approximate location information

  • Information collected through cookies and similar technologies

3. How we use your information

We may use your personal information to:

  • Process and fulfil orders

  • Process payments

  • Arrange delivery or collection

  • Contact you about an order or booking

  • Manage workshop and class bookings

  • Respond to enquiries

  • Process refunds, returns and complaints

  • Maintain accurate business and financial records

  • Improve our Website, products and services

  • Understand how visitors use our Website

  • Detect and prevent fraud or misuse

  • Comply with our legal and accounting obligations

  • Send marketing communications where you have consented to receive them or where we are otherwise legally permitted to do so

We will only use your information for purposes that are compatible with those described in this Privacy Policy.

4. Our lawful basis for processing your information

We rely on different lawful bases depending on how we use your information.

Contract

We use your information where it is necessary to process and fulfil an order or provide a service you have requested.

Legal obligation

We may need to retain and use certain information to comply with legal, tax, accounting and regulatory requirements.

Legitimate interests

We may use your information where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.

This may include managing and improving our Website, maintaining business records, responding to enquiries and preventing fraud.

Consent

Where required, we will ask for your consent before using your information for certain purposes, such as some marketing activities or non-essential cookies.

You can withdraw your consent at any time.

5. Payments

Payments made through our Website are processed by our third-party payment providers.

We do not store your full payment card details ourselves.

Payment information is handled by the relevant payment provider in accordance with its own privacy policy and security requirements.

6. Google Analytics

We use Google Analytics to understand how visitors use our Website and to help us improve our products, services and online shopping experience.

Google Analytics may collect information such as your device information, approximate location, pages visited, interactions with the Website and other online identifiers.

Where required, we will obtain your consent before using non-essential analytics cookies.

Google Analytics user-level and event-level data is retained in accordance with our Google Analytics settings. We currently use a 14-month retention period for this data.

Google Analytics data is subject to Google's own privacy and data protection practices.

7. Cookies

Our Website uses cookies and similar technologies.

Some cookies are necessary for the Website to function, including features such as shopping baskets, checkout, security and remembering certain preferences.

We may also use analytics and other non-essential cookies to understand how visitors use our Website and improve our services.

Where required, we will ask for your consent before using non-essential cookies.

You can manage your cookie preferences through our cookie settings and through your browser settings.

8. Who we share your information with

We may share your personal information with trusted third parties where this is necessary to operate our business, fulfil your order, provide a service or comply with our legal obligations.

This may include:

  • Our Website and e-commerce platform providers

  • Payment providers

  • Delivery and courier providers

  • Workshop or venue partners where necessary to administer a booking

  • Accountants and professional advisers

  • IT and hosting providers

  • Email marketing providers

  • Google Analytics and other analytics providers

  • Government, regulatory or law enforcement authorities where legally required

We do not sell your personal information to third parties.

Where we use third parties to process personal information on our behalf, we expect them to handle your information securely and in accordance with applicable data protection law.

9. How long we keep your information

We only retain personal information for as long as we reasonably need it for the purpose for which it was collected.

Our usual retention periods are:

Order, transaction and financial records:
We generally retain these records for six years after the end of the relevant financial year where necessary for accounting, tax, legal and business purposes.

Customer enquiries:
We generally retain information relating to enquiries for up to 12 months after the enquiry has been resolved, unless we have a legitimate reason to retain it for longer.

Workshop and class bookings:
We retain booking information for as long as reasonably necessary to administer the booking and for our business, accounting and legal records.

Marketing information:
If you subscribe to marketing communications, we retain your information until you unsubscribe or we determine that we no longer have a reason to retain it.

Google Analytics:
User-level and event-level analytics data is retained for 14 months in accordance with our Google Analytics settings.

Cookies:
Cookie retention periods vary depending on the type and purpose of the cookie. You can manage or delete cookies through your browser or our cookie settings where available.

We regularly review the information we hold and securely delete or anonymise information when it is no longer required.

10. Marketing

If you choose to receive marketing communications from Sprig, we may send you information about:

  • New products

  • Seasonal collections

  • Christmas and other seasonal launches

  • Flowers and gifts

  • Workshops and classes

  • Special offers

  • Sprig news and updates

You can unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us directly.

Unsubscribing from marketing communications will not affect essential communications relating to orders or bookings you have made.

11. Keeping your information secure

We take reasonable technical and organisational measures to protect your personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

12. Your rights

Under UK data protection law, you may have the right to:

  • Request access to the personal information we hold about you

  • Ask us to correct inaccurate or incomplete information

  • Ask us to delete your information in certain circumstances

  • Ask us to restrict how we use your information in certain circumstances

  • Object to certain types of processing, including direct marketing

  • Request the transfer of certain information to another organisation

  • Withdraw consent where we rely on consent to process your information

These rights are subject to certain legal conditions and exemptions.

If you wish to exercise any of these rights, please contact us.

We may need to ask you to provide information to confirm your identity before processing your request.

13. Children

Our Website is not intended to knowingly collect personal information from children.

If you believe that a child has provided us with personal information without appropriate consent, please contact us.

14. Links to other websites

Our Website may contain links to third-party websites, including social media platforms and other websites.

We are not responsible for the privacy practices of those websites.

We recommend reading the privacy policy of any third-party website you visit.

15. International transfers

Some of the third-party services we use may process personal information outside the UK.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that it receives an appropriate level of protection in accordance with applicable data protection law.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, Website, services or legal requirements.

The latest version will always be published on this page, with the date of the latest update shown at the top.

17. Complaints

If you have a concern about how we have handled your personal information, please contact us first so that we have the opportunity to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal information has been handled unlawfully.

Further information about making a complaint can be found on the ICO's website.

18. Contact us

If you have any questions about this Privacy Policy or how we use your personal information, or if you wish to exercise your data protection rights, please contact:

Sprig. Shop Ltd - info@sprigshop.co.uk

bottom of page