Privacy Notice
Last updated:
Sprint Start respects your privacy and only collects personal information that we need to respond to enquiries, provide estimates, process applications and deliver our services.
Sprint Start is operated by Harry William Bolton, sole trader, of 7A Victoria Road North, Southsea, PO5 1PL, United Kingdom.
Sprint Start is registered with the Information Commissioner's Office (ICO), registration number ZC265618.
For privacy enquiries, contact support@sprintstart.co.uk.
Information we collect
Depending on how you use Sprint Start, we may collect information including:
- your name;
- business name;
- telephone number and email address;
- your trade and service area;
- information you provide about your business and website requirements;
- your website and hosting preferences; and
- information you choose to provide when contacting or applying to Sprint Start.
If you become a customer, we may also collect information needed to build and manage your website, including business details, contact details, service information, branding, photographs, website preferences and relevant accreditation or qualification information.
If you respond to a Sprint Start post in a social media group, or message us about our services, we may record your name, business name, the contact details you give us, where you found us and brief notes of our conversation, so we can follow up with you.
If you sign an agreement with us online, we record the name and business name you type, the date and time, your IP address and browser details as evidence of your agreement, and keep the signed copy with your customer records.
Our website also processes limited technical information for security, spam prevention and reliable operation. This can include pseudonymised identifiers derived from IP addresses and technical submission references.
We do not collect customer payment-card credentials through this website. Our private admin records billing addresses, invoices, payment amounts, dates and payment references. Sprint Start stores its own receiving bank details for inclusion on invoices.
How we use your information
We use personal information to:
- respond to enquiries;
- prepare and send website estimates;
- assess applications for our offers;
- contact applicants about their application;
- build, manage and support customer websites;
- communicate with customers about their projects;
- prevent spam, abuse and duplicate submissions;
- maintain the security and reliability of our website and services; and
- comply with legal, tax and accounting obligations.
We do not use enquiry or application information for unrelated marketing unless we have an appropriate lawful basis to do so.
Our lawful bases
Under UK data protection law, we need a lawful basis for processing personal information.
Depending on the circumstances, we rely primarily on:
Steps before entering into a contract and performance of a contract: for example, when you request an estimate, apply for a website, become a customer or ask us to provide services.
Legitimate interests: where necessary to operate and protect Sprint Start, respond appropriately to enquiries, follow up with businesses that have shown interest in our services, prevent abuse, maintain records and keep our systems secure, provided those interests do not override your rights and interests.
Legal obligations: where we need to retain or use information to meet legal, tax, accounting or regulatory requirements.
Where we specifically rely on consent, you may withdraw that consent at any time.
How your information is handled
Public website enquiries, applications and estimates are primarily delivered to Sprint Start by email. The website does not currently maintain a separate customer database containing complete copies of these public submissions.
Our owner-only admin also keeps a sales lead list (the details described above for people who respond to our posts or messages) and a record of the social media groups where we post.
Our owner-only admin stores customer contact details, project notes, invoice records, payment history and recurring billing schedules. Invoice PDFs are emailed to customers and archived in our Google Drive, organised by tax year and month. We also save payment reports, and a nightly backup copy of these admin records, in Google Drive for business record keeping and recovery.
We may also store information relating to customers and projects securely in Google Workspace/Google Drive and on secured business devices where necessary to provide our services.
If private customer onboarding functionality is introduced or changed in future, this notice will be updated before that processing is used where required.
Service providers
We use trusted service providers to operate Sprint Start. Depending on how you interact with us, these may include:
Vercel: website hosting and server infrastructure.
Resend: transactional email delivery.
Upstash: security, rate limiting, abuse prevention and private billing records, including customer details and notes, invoice snapshots, payment and correction history, recurring invoice schedules, send receipts, operational alerts and admin authentication records.
Sentry: technical error and operational monitoring.
Google Workspace: business email and file storage. Google sign-in is used for owner-only admin access; the application verifies the owner’s email address and Google account identifier.
These providers may process limited personal information on our behalf where necessary to provide their services.
The website currently contains no Google Analytics, Meta Pixel, Hotjar, advertising tracker or session-replay integration.
International processing
Some of our service providers operate internationally, and personal information may therefore be processed outside the United Kingdom.
Where UK data protection law requires safeguards for an international transfer, we rely on appropriate arrangements provided by our service providers, which may include applicable adequacy regulations, recognised data-protection frameworks and contractual safeguards.
Sprint Start remains a UK business. Temporary access by Sprint Start to its own systems while the business owner is travelling outside the UK does not, by itself, constitute a restricted transfer to a separate overseas organisation under ICO guidance. Appropriate security measures still apply.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.
Enquiries and unsuccessful applications are normally removed when they are no longer required to deal with the enquiry or application, subject to information we reasonably need to retain for security, legal or record-keeping purposes.
Sales leads that do not go ahead are deleted automatically 12 months after they are closed, and leads with no activity for 12 months are deleted automatically too. You can ask us to delete yours sooner.
If you become a customer, relevant project and customer information may be retained throughout our relationship and afterwards where reasonably necessary for support, legal, tax, accounting or dispute-resolution purposes.
Some technical security information has much shorter automatic retention periods. For example, the website's application-level IP rate-limit identifiers are configured to expire after approximately 20 minutes, while other anti-abuse records have different short retention periods.
Sharing your information
We do not sell personal information.
We may share information with service providers where necessary to operate Sprint Start or provide our services, and with professional advisers, regulators, courts, law-enforcement bodies or other parties where required or permitted by law.
We only provide service providers with information necessary for the relevant purpose.
Your data protection rights
Depending on the circumstances and our lawful basis for processing, UK data protection law may give you rights including:
- access to your personal information;
- correction of inaccurate or incomplete information;
- deletion of your information in certain circumstances;
- restriction of processing in certain circumstances;
- objection to certain processing; and
- data portability in certain circumstances.
You can exercise your rights by contacting support@sprintstart.co.uk.
There is normally no charge for exercising your data protection rights. These rights are subject to legal conditions and exemptions.
Complaints
If you have concerns about how Sprint Start handles your personal information, please contact us first at support@sprintstart.co.uk so we can try to resolve them.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Changes to this notice
We may update this Privacy Notice as Sprint Start's services and systems change.
Where we introduce a new use of personal information that requires additional privacy information, we will update this notice and provide appropriate information before beginning that processing.
