Privacy policy

Sprogi Privacy Policy 

 This privacy notice tells you what to expect us to do with your personal information. 

  • Changes to This Privacy Policy 

  • Contact details 

  • What information we collect, use, and why 

  • Children’s data 

  • Lawful bases and data protection rights 

  • Where we get personal information from 

  • How long we keep information 

  • Information we collect about your usage 

  • Who we share information with 

  • Cookies 

  • Third Party Website and Links 

  • Sharing information outside the UK 

  • How to complain 

 

1. Changes to This Privacy Policy 

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law. 

 

2. Contact details 

Email: hello@sprogi.com 

3. What information we collect, use, and why 

We collect or use the following information to provide services and goods, including delivery: 

  • Names and contact details (including phone number and email) 

  • Addresses 

  • Order information including your name, billing address, shipping address, payment confirmation, email address, first name and birth month of child receiving an order 

  • Purchase or account history 

  • Payment details (including card or bank information for transfers and direct debits) 

  • Account information 

  • Website user information (including user journeys and cookie tracking) 

We collect or use the following information for the operation of customer accounts and guarantees: 

  • Names and contact details (including phone number and email) 

  • Addresses 

  • Payment details (including card or bank information for transfers and direct debits) 

  • Purchase history 

  • Account information, including registration details 

  • Information used for security purposes 

  • Marketing preferences 

We collect or use the following information to prevent, detect, investigate or prosecute crimes: 

  • Names and contact information (including phone number and email) 

  • Customer or client accounts and records 

  • Financial transaction information 

We collect or use the following information for service updates or marketing purposes: 

  • Names and contact details (including phone number and email) 

  • Addresses 

  • Marketing preferences 

  • Location data 

  • Purchase or viewing history 

  • IP addresses 

  • Website and app user journey information 

  • Records of consent, where appropriate 

We collect or use the following personal information for dealing with queries, complaints or claims: 

  • Names and contact details (including phone number and email) 

  • Addresses 

  • Account information 

  • Purchase or service history 

  • Customer or client accounts and records 

  • Financial transaction information 

  • Correspondence 

  • Location data 

 

4. Children's Data 

The Services are not intended to be used by children. We may collect limited personal information about children, such as first names and month and year of birth for gifts or personalised items, where an adult orders a product for a child. We rely on the adult purchaser to provide consent on behalf of the child. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. 

 

5. Lawful bases and data protection rights 

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. 

 

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website: 

 

  • Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access. 

 

If you make a request, we must respond to you without undue delay and in any event within one month. 

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice. 

 

Our lawful bases for the collection and use of your data 

Our lawful bases for collecting or using personal information to provide services and goods are: 

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability. 

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: 

  • Used for: fraud prevention, security, customer service improvement, analytics (non-intrusive), preventing abuse of the platform. 

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

 

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are: 

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability. 

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: 

  • Applies to:improving account management, preventing abuse or fraud on accounts, ensuring reliable operation of guarantees without harming the customer. 

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

 

Our lawful bases for collecting or using personal information to prevent, detect, investigate or prosecute crimes are: 

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability. 

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: 

  • Used to:prevent fraud or misuse of your store, protect your business and customers, investigate suspicious transactions or account activity. 

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

Our lawful bases for collecting or using personal information for service updates or marketing purposes are: 

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: 

  • simple service announcements or updates that are not marketing, reminders about product support, minor service improvements. 

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

 

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are: 

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: 

  • investigate complaints to improve service, prevent fraud or misuse, ensure fair handling of claims. 

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

 

6. Where we get personal information from 

  • Directly from you 

 

7. How long we keep information 

We do not currently have a formal retention schedule, but we retain personal data only as long as necessary to fulfil orders, comply with legal obligations, or for legitimate business purposes, and we are working to implement a formal schedule. 

 

8. Information We Collect about Your Usage 

We may also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services. 

 

9. Who we share information with 

  1. Joint data controllers 

We have a joint controller relationship with Shopify. We process your personal information with that joint controller for the following reason: Shopify acts as a joint controller with us in limited circumstances, particularly for platform security, fraud prevention, and service improvement. In most cases, Shopify acts as our data processor. 

 

  1. Data processors 

Shopify and other payment providers and apps that handle personal data on your behalf 

This data processor does the following activities for us: They process data according to your instructions 

Others we share personal information with 

  • Organisations we’re legally obliged to share personal information with 

  • Suppliers and service providers 

 

10. Sharing information outside the UK 

Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place. 

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above. 

Organisation name: Shopify Inc. 

Category of recipient: E-commerce / cloud platform 

Country the personal information is sent to: Canada / US 

How the transfer complies with UK data protection law: The International Data Transfer Agreement (IDTA) 

Where necessary, our data processors may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place. 

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above. 

Organisation name: Shopify Inc. 

Category of recipient: E-commerce / cloud platform 

Country the personal information is sent to: Canada / US 

How the transfer complies with UK data protection law: The International Data Transfer Agreement (IDTA) 

 

In certain circumstances, we may disclose your personal information to third parties for contract fulfillment purposes, legitimate purposes and other reasons subject to this Privacy Policy. Such circumstances may include: 

With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping). 

With business and marketing partners to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices. 

When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations, with your consent. 

With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business. 

In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

11. Cookies 

Like many websites, we use Cookies on our Site. For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services). We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites. 

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners.

12. Third Party Websites and Links 

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services

13. How to complain 

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice. 

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO. 

The ICO’s address:            

Information Commissioner’s Office 
Wycliffe House 
Water Lane 
Wilmslow 
Cheshire 
SK9 5AF 

Helpline number: 0303 123 1113 

Website: https://www.ico.org.uk/make-a-complaint 

Last updated: 1 January 2026