Privacy policy

Last updated: 23 September 2026

This notice explains how Sproutify uses personal data when you place an order, start or manage a Weekly Mix subscription, create an optional customer account, contact us, or use this website.

1. Data we collect

• Order and subscription details: name, email address, phone number, delivery address, postcode, delivery notes, selected delivery dates, products, order totals, subscription choices and payment-status information.
• Optional account data: if you create a customer account, your saved profile and delivery details are associated with that account.
• Communications: information you send us by email or WhatsApp when discussing an order, payment or delivery.
• Technical information needed to operate and secure the website and account service, such as authentication and service logs handled by our hosting and account providers.

2. Why we use the data and legal basis

• To process order and subscription requests, confirm availability, manage payment status, arrange delivery and provide customer support. This is necessary to take steps at your request and to perform the order or subscription service (Article 6(1)(b) GDPR).
• To comply with tax, accounting and other legal obligations where applicable (Article 6(1)(c) GDPR).
• To protect the website, prevent abuse and maintain reliable business records where necessary for Sproutify's legitimate interests, balanced against your rights (Article 6(1)(f) GDPR).

Sproutify does not currently use the order or subscription forms for advertising or marketing mailing lists. If marketing is introduced later, it will use an appropriate separate legal basis and choice.

3. Service providers and recipients

We use service providers only as needed to operate the website and fulfil orders. These currently include Netlify for hosting, serverless functions, customer authentication and operational data storage, and Resend for transactional email. If you communicate with us through WhatsApp, WhatsApp/Meta processes that communication under its own privacy terms. Payment is completed through the payment provider shown in the secure payment link; Sproutify does not collect full card details on this website.

Personal data may also be disclosed to professional advisers or public authorities when required by law.

4. International transfers

Some service providers may process data outside the European Economic Area. Where this happens, Sproutify relies on the safeguards made available by the relevant provider for international transfers, such as adequacy mechanisms or standard contractual clauses, as applicable.

5. How long we keep data

We keep active order and subscription information for as long as it is needed to manage the requested service. Operational contact and delivery details are periodically reviewed and can be deleted or anonymised when they are no longer needed. Information that must be retained for tax, accounting, legal claims or other legal obligations may be kept for the period required by applicable law. Transactional email providers may retain delivery logs according to their own retention policies.

6. Your privacy rights

Depending on the circumstances, you may have rights to access, correct, delete, restrict or object to processing of your personal data, and to receive data in a portable format where applicable. To make a request, email hello@sproutify.it. We may need to verify your identity before acting on a request. Some data cannot be deleted immediately where retention is required by law or needed to establish, exercise or defend legal claims.

You may also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

7. Cookies and local browser storage

The current Sproutify website does not use advertising or behavioural analytics trackers. It uses technical browser storage and authentication mechanisms that are needed for features such as language preference, shopping cart, checkout state, account login and guest subscription management. Because these functions are technical and service-related, the website does not currently display an advertising-cookie consent banner. If non-essential analytics or advertising technologies are added later, this notice and the website's consent controls will be updated before those technologies are used.

8. Guest subscription management links

If you subscribe without an account, Sproutify gives you a private management link. The secret token in that link is stored in your browser for convenient access; the server stores only a one-way hash of new guest-management tokens. Do not share the management link. When the link is opened, Sproutify removes the token from the visible address bar after storing it locally.

9. Changes to this notice

We may update this notice when the website, service providers or legal requirements change. The current version will always be published on this page.

For privacy questions or requests: hello@sproutify.it