Legal

Privacy Policy

Last updated: May 2026 · Sprintly is a trading name operated as a sole trader

We keep this short and plain because that's how we do everything. No legalese. No hiding things in small print. If you have a question not answered here, email us.

Who we are

Sprintly is a technology delivery subscription service operating as a sole trader in the United Kingdom. We are the data controller for any personal data collected through this website and through the delivery of our services.

You can reach us at hello@sprintly.co.uk.

What data we collect

We only collect data you actively give us or that is necessary to deliver the service. We do not buy data, scrape data, or use tracking beyond what is described here.

Enquiry data — when you submit a contact form, we collect your name, email address, company name and the details of your enquiry.
Booking data — when you book a discovery call via Google Calendar, Google collects your name and email address to send a calendar invite. We receive that information as part of the booking.
Client workspace data — if you become a Sprintly client, we collect and process information you submit via your ClickUp workspace, including project requests, file attachments and messages.
Meeting recordings — Premium clients may have their Google Meet calls recorded for the purpose of extracting action items. You will always be informed before a recording starts.
Correspondence — emails and messages sent to or from hello@sprintly.co.uk are stored on Google Workspace servers.

How we use your data

To respond to your enquiry
To schedule and conduct discovery calls
To deliver sprint work as a Sprintly client
To send sprint summaries, planning communications and invoices
To extract action items from recorded calls (Premium clients only, with consent)
To comply with legal and financial obligations

We do not use your data for marketing without your explicit consent. We do not sell your data. Ever.

Legal basis (UK GDPR)

Contract — processing necessary to deliver the Sprintly service to clients
Legitimate interests — responding to enquiries from prospective clients
Consent — meeting recordings and any optional communications
Legal obligation — financial records and invoicing

How long we keep your data

Enquiries that don't become clients — deleted after 12 months
Client workspace data — retained for the duration of your subscription plus 12 months after it ends
Financial records — 7 years, as required by HMRC
Meeting recordings — deleted after action items have been extracted, typically within 7 days
Email correspondence — retained for 3 years then reviewed for deletion

Who we share your data with

We use a small number of trusted third-party tools to operate Sprintly. Each is used only for the purpose stated:

Google Workspace — email, calendar and meeting infrastructure (Google LLC, US — EU-US Data Privacy Framework)
ClickUp — client project workspace and request management (ClickUp Technologies Inc, US)
Stripe — payment processing (Stripe Payments Europe Ltd, Dublin)
Cloudflare — website hosting and DNS (Cloudflare Inc, US — EU-US Data Privacy Framework)

We do not share your data with any other third parties unless required to by law.

Your rights

Under UK GDPR you have the following rights. To exercise any of them, email hello@sprintly.co.uk and we will respond within 30 days.

Right	What it means
Access	Request a copy of the personal data we hold about you
Rectification	Ask us to correct inaccurate or incomplete data
Erasure	Ask us to delete your data where there is no lawful reason to keep it
Restriction	Ask us to limit how we use your data in certain circumstances
Portability	Receive your data in a portable format
Objection	Object to processing based on legitimate interests
Withdraw consent	Withdraw consent at any time where processing is based on consent

Cookies

This website does not use tracking cookies or advertising cookies. If we add analytics in future (such as Fathom Analytics, which is privacy-first and GDPR compliant), we will update this policy and notify existing clients.

Cloudflare may set a technically necessary cookie (__cf_bm) for bot protection. This does not track you across sites and is not used for advertising.

Complaints

If you have a concern about how we handle your data, please contact us first at hello@sprintly.co.uk and we will do our best to resolve it.

If you remain unsatisfied, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Website: ico.org.uk
Helpline: 0303 123 1113

Changes to this policy

If we make significant changes to this policy, we will notify active clients by email and update the date at the top of this page. Minor clarifications may be made without notice.