Privacy Policy

This policy sets out how Sprod Grid ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website or use our services.

We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Sprod Grid is registered in England and Wales. Our registered address is 6 Castle Street, Bristol BS1 3UX. You can contact us about data protection at [email protected].

2. What data we collect

We collect the following categories of personal data:

• Contact information — your name and email address, submitted through our enquiry or consultation forms
• Communications — the content of messages you send us, including details you share about your career situation
• Usage data — IP address, browser type, pages visited, and time spent on the site, collected automatically through analytics tools (only when you have consented)
• Cookies — small data files stored on your device; see our Cookie Policy for full details

We do not collect sensitive categories of personal data (such as health data, ethnicity, or financial account details) unless you choose to share this voluntarily during a session, in which case we handle it with additional care.

3. Legal basis for processing

Under UK GDPR, we process your data on the following legal bases:

• Contract — to deliver coaching services you have engaged us for (Article 6(1)(b))
• Legitimate interests — to respond to enquiries, manage client relationships, and improve our services (Article 6(1)(f))
• Consent — for analytics cookies and any marketing communications (Article 6(1)(a)). You can withdraw consent at any time
• Legal obligation — where required by law, for example to retain financial records (Article 6(1)(c))

4. How we use your data

• To respond to your enquiries and consultation requests
• To provide and manage our coaching services
• To send service-related communications (session confirmations, follow-up notes)
• To analyse how our website is used so we can improve it (analytics, with consent only)
• To comply with legal obligations, including financial record-keeping requirements

We will never sell your personal data to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects.

5. Who we share your data with

We share data with the following categories of third parties where necessary:

• Google Analytics — site usage analytics, with your consent. Google may process data outside the UK under standard contractual clauses. See Google's Privacy Policy.
• Advertising platforms — Google Ads or Microsoft Ads may receive conversion data if you have consented to marketing cookies. These platforms operate under their own data processing agreements.
• IT service providers — hosting, email, and business software providers under data processing agreements that require them to protect your data
• Professional advisers — solicitors or accountants where required, under duties of confidentiality
• Regulatory or law enforcement bodies — where legally required

6. International transfers

Some of our third-party providers operate outside the UK. Where we transfer data internationally, we ensure appropriate safeguards are in place — such as the UK International Data Transfer Agreement (IDTA) or standard contractual clauses approved by the ICO.

7. How long we keep your data

• Enquiry and contact form data — up to 12 months from last contact, unless you become a client
• Client records — up to 6 years after the end of our engagement, in line with standard business record-keeping obligations
• Analytics data — as configured in our analytics account (typically 14 months for Google Analytics session data)
• Financial records — 6 years, as required under UK tax law

8. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data, subject to legal retention requirements
• Restriction — ask us to limit how we process your data in certain circumstances
• Portability — receive your data in a portable format where we process it on the basis of consent or contract
• Objection — object to processing based on legitimate interests
• Withdraw consent — withdraw consent at any time where we rely on it, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within one month. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Security

We take reasonable technical and organisational steps to protect your data against unauthorised access, loss, or disclosure. This includes encrypted storage, access controls, and regular review of our security practices. No method of transmission over the internet is completely secure, but we take our obligations seriously.

10. Cookies

We use cookies on this website. For a full explanation of what cookies we use, why, and how to manage them, see our Cookie Policy.

11. Third-party links

Our website may contain links to other websites. We are not responsible for the privacy practices of those sites and recommend reading their privacy policies before submitting any personal data.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a revised date at the top. For significant changes, we may notify you directly if we hold your contact details.

13. Contact

For any questions about this policy or how we handle your data:

Sprod Grid
6 Castle Street, Bristol BS1 3UX
Email: [email protected]
Tel: +44 7979 374 812