Last updated: 11/07/2025
At Mindful Sprouts CIC, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit our website, www.mindfulsprouts.co.uk, or interact with our services.
š Who We Are
Mindful Sprouts CIC is a registered Community Interest Company in England and Wales (Company No. 15235021). Our mission is to create engaging, educational, and socially impactful content for children and families.
For any data-related queries, please contact:
Email: [email protected]
š What Personal Data We Collect
We may collect and process the following personal data:
- Contact details: name, email address, postal address (when placing an order or filling in forms)
- Purchase information: products ordered, billing/shipping details (via WooCommerce)
- Marketing preferences: newsletter sign-ups, email open rates (via FluentCRM)
- Website usage data: IP address, browser type, referring pages, time spent (via Google Analytics or similar)
- Cookie data: preferences, session data (managed via CookieYes)
āļø Legal Basis for Processing
We process your data under the following legal bases:
- Consent: for marketing communications or the use of non-essential cookies
- Contract: to fulfil your book orders and process transactions
- Legal obligation: to comply with tax or accounting laws
- Legitimate interest: to improve our services, prevent fraud, or support our social impact mission
šÆ How We Use Your Information
We use your data to:
- Process and deliver your orders
- Send order confirmations and updates
- Respond to your enquiries or feedback
- Manage your newsletter preferences
- Improve website functionality and customer experience
- Meet our reporting obligations as a CIC
- Distribute free/donated books in line with our social mission
š Sharing Your Information
We do not sell or rent your personal information. We may share data with:
- Service providers (e.g. WooCommerce, FluentCRM, PayPal/Stripe, Royal Mail)
- Website hosting and security providers
- Regulators or authorities, if legally required
UK GDPR and only process data on our instructions bind all third parties.
š International Transfers
We may transfer data to service providers outside the UK (e.g. email or cloud providers). Where we do, we ensure appropriate safeguards are in place, such as standard contractual clauses or UK adequacy decisions.
š How We Keep Your Data Safe
We take data protection seriously and have implemented measures, including:
- SSL encryption on our website
- Secure server environments and access controls
- Routine backups and firewall protection
- Regular plugin and platform updates
š§¼ Data Retention
We keep personal data only as long as necessary for the purposes described:
- Order data: retained for 6 years (for accounting and tax compliance)
- Newsletter data: kept until you unsubscribe
- Contact forms: retained for 12 months unless required for legal or safeguarding purposes
š¶ Childrenās Privacy
Our products are for children, but this website is intended for adult purchasers (parents, carers, educators). We do not knowingly collect personal data from children under 13. If you believe a child has submitted data, please get in touch with us so we can delete it.
šŖ Cookies and Tracking
We use cookies to enhance your experience and measure performance.
See our Cookie Policy for full details and your rights to opt out.
We use CookieYes to manage consent in line with UK law.
š¬ Your Rights
You have the right to:
- Access your data
- Request correction or deletion
- Object to or restrict processing
- Withdraw consent at any time (e.g. unsubscribe from emails)
- Lodge a complaint with the Information Commissionerās Office (ICO)
To exercise your rights, please email: [email protected]
š Updates to This Policy
We may update this Privacy Policy from time to time. Changes will be posted here and dated. Please check this page occasionally to stay informed.