Who we are
BlooSprout Ltd, trading as BlooSprout ("we", "us", "our"), provides help for UK software businesses building with AI: design to software, brand and context, AI features, websites and launches. This privacy policy explains how we collect, use, and protect your personal data when you use our website or get in touch. We are the data controller for this information. Any processing we carry out on a client's behalf is covered separately in the agreement for that work.
Contact
For privacy-related enquiries: vaibhav@bloosprout.co.uk
Personal data we collect
We may collect:
- Contact details: name, email address, phone number (when you book a call or get in touch)
- Communication data: messages you send us
- Tool inputs and results: the free tools calculate results in your browser. Their inputs and results are not sent to us or our analytics providers. The optional email-results feature is currently switched off.
- Analytics data: if you accept analytics, Google Analytics and PostHog receive page-visit information and selected interactions, referring pages, approximate location, browser and device details, and identifiers that distinguish browsers and visits. Google Analytics also collects basic session and engagement information, such as when a visit starts and how long a page is in focus.
- Technical request data: hosting and booking providers receive information such as your IP address and browser details when your device connects to their services, including when you interact with a booking control. This is separate from optional site analytics.
- Theme preference: light/dark mode (stored locally in your browser)
We use analytics to understand which pages people read and improve the site. With your consent, we also record when the opening homepage sequence reaches its final state, which What we build link you open, and which example piece you open. These events include only the selected page or piece identifier, where relevant. We do not make session recordings or automatically collect other clicks, scrolling or form interactions. We do not add names, email addresses, tool entries or example text to analytics events. Browser identifiers mean this data should not be treated as fully anonymous.
Analytics providers receive your IP address when your browser connects. Google says it discards IP addresses from UK, EU and Swiss visitors after deriving approximate location. This does not mean the rest of the visit data is deleted.
Lawful basis and purpose
We process your data for:
- Consent: for optional analytics and any marketing communications you choose to receive
- Contract: to take steps you request before a contract and provide agreed services
- Legitimate interest: to respond to enquiries and keep the site working
- Legal obligation: where required by law
Sending an enquiry or emailing interest in a workshop, group or newsletter does not automatically subscribe you to a marketing list. We use that message to respond to your request. We do not make decisions about you with legal or similarly significant effects using only automated processing.
You can use the site without accepting analytics. Use Cookie settings in the footer to withdraw consent at any time. Analytics then stay off unless you accept again.
Who we share data with
We may share data with:
- Cal.com: to load the booking service when you interact with its controls, and arrange a call if you book
- Google Analytics: to count visits and see which pages get read (only if you accept analytics cookies)
- PostHog: to understand page visits and the selected homepage interactions described above (only if you accept analytics cookies)
- Hosting and email providers: to deliver the website, receive your messages and respond to you
- We do not sell your data to third parties.
International transfers
Providers may process data outside the UK, including in the EU and United States. Google describes its international transfers in its data transfer frameworks, including the UK Extension to the EU-US Data Privacy Framework. Our PostHog integration uses its EU service, which stores customer-user data in Germany; its privacy policy also explains international access and safeguards. The Cal.com privacy policy describes processing for bookings. Contact us for information about the safeguards applicable to your data.
Retention
We keep enquiry and service records while they are needed to respond to you, deliver agreed work, resolve questions or meet legal record-keeping requirements. The period depends on the nature of the enquiry, whether it leads to work, and any applicable legal requirements. Analytics retention depends on the relevant provider's settings and the continuing need to understand site usage. A cookie's expiry is not the same as deletion of data already received by an analytics provider. Browser-storage and cookie durations are described in our Cookie Policy. Contact us about the records we hold or to request deletion.
Your rights
Depending on the circumstances and the basis for processing, your UK GDPR rights include:
- Access, rectify, or erase your data
- Restrict or object to processing
- Data portability (where applicable)
- Withdraw consent at any time
- Complain to the ICO
You can object to processing based on legitimate interests, and to direct marketing at any time. Withdrawing consent does not affect processing that was lawful before you withdrew it.
To exercise these rights, contact us at vaibhav@bloosprout.co.uk.
Security
We take reasonable steps to protect your data using appropriate technical and organisational measures.
Changes
We may update this policy. Changes will be posted on this page with an updated date.