1. Who We Are
Sprouto is the trading name of SPROUTO LTD, a company registered in England and Wales under company number 09297043. Our registered office is:
82 King Street, Manchester, M2 4WQ, United Kingdom.
In this notice, “Sprouto”, “we”, “us” and “our” refer to SPROUTO LTD.
This Privacy Notice explains how we collect, use, store and share personal data when you visit our websites, contact us, use our products or services, or otherwise interact with our business.
It applies to Sprouto-operated websites, ScopeAI, Sprouto Enterprise, Sprouto One, our software and AI services, contact and consultation forms, chatbots, booking facilities, and related business activities, unless a specific service provides a separate privacy notice.
We process personal data in accordance with applicable UK data protection and privacy laws, including the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.
2. Personal Data We Collect
The information we collect depends on how you interact with Sprouto.
2.1 Contact And Consultation Enquiries
When you contact us or submit a project enquiry, we may collect:
- Your name, email address and telephone number.
- Your job title, organisation and other business contact information.
- Your project description, requirements, budget or other details you choose to provide.
- Files and documents you upload.
- Your response to questions about confidentiality or whether you require a non-disclosure agreement (NDA).
- Correspondence and other information you provide when communicating with our team.
2.2 Enterprise Enquiries
When you enquire about our enterprise services, we may collect your name, job title, business contact details, organisation, turnover range, areas of interest, project requirements and related correspondence.
2.3 ScopeAI™
When you use ScopeAI™, we may collect and process:
- Project descriptions and requirements you submit.
- Uploaded briefs, documents and files.
- Your answers, selections and interactions while preparing an estimate.
- Generated project scopes, estimates, pricing information and related outputs.
- Technical information needed to operate, secure and troubleshoot the service.
ScopeAI can be used without creating an account. Do not upload personal, confidential or sensitive information unless you have the necessary authority to provide it and it is appropriate for the service.
2.4 Chatbots And Online Interactions
When you use a chatbot or assistant on our website or services, we may process your messages, questions, contact details if supplied, conversation history where retained, and technical information required to operate the feature.
Please avoid including unnecessary confidential or sensitive personal information in chatbot conversations.
2.5 Payments And Invoicing
If you purchase our services, we may process your name, business name, email address, telephone number, billing address, invoice details, transaction records and payment status.
Stripe processes payments made through its checkout or payment facilities. We may also create and manage invoices manually through Xero and retain accounting records necessary to administer our business.
Payment information handled directly by a payment provider is subject to that provider’s own processing arrangements.
2.6 Bookings And Meetings
When you book a discovery call, we may collect your name, email address, booking details, availability and any information you provide in connection with the meeting.
We use Cal.com for bookings and Google Meet for meetings where applicable. If we intend to record or transcribe a meeting, we will notify participants beforehand and obtain consent where required by law.
2.7 Technical And Website Usage Information
When you visit our websites or use our services, we and our service providers may process technical and usage information, including:
- IP address and approximate location derived from it.
- Browser type, device information, operating system and similar technical data.
- Pages visited, referring pages, timestamps and website interactions.
- Cookie identifiers and other information stored on or accessed from your device, where applicable.
- Security events, request metadata, errors and information used to detect abuse.
We use Google Analytics 4 and custom website heatmap and interaction-analysis tools to understand how visitors use our websites. We also use a custom IP-based analytics and intent-management tool to analyse website activity and business interest. Depending on how that tool is configured, it may associate visits or inferred interest signals with an IP address or an organisation.
We do not currently run promotional email campaigns. If we introduce additional marketing activities, we will assess the applicable legal requirements and update our privacy information before introducing new processing where required.
3. How We Use Personal Data
We use personal data for the following purposes:
| Purpose | Examples of lawful basis |
|---|---|
| Responding to enquiries and preparing proposals or estimates | Taking steps at your request before entering into a contract; legitimate interests where appropriate |
| Providing, operating and supporting our services | Performance of a contract; legitimate interests where appropriate |
| Processing ScopeAI inputs and generating estimates | Taking steps at your request before a potential contract; legitimate interests in operating and securing the service |
| Taking payments, issuing invoices and keeping financial records | Performance of a contract; compliance with legal obligations |
| Managing meetings, bookings and business communications | Performance of a contract or steps taken at your request; legitimate interests where appropriate |
| Securing our systems, preventing spam, limiting abuse and investigating technical problems | Legitimate interests and, where applicable, compliance with legal obligations |
| Analysing website performance and interactions | Consent where required for cookies or similar technologies; legitimate interests for other analytics where appropriate |
| Understanding website traffic and potential business interest through IP-based analysis | Legitimate interests, subject to an appropriate assessment and applicable rights |
| Establishing, exercising or defending legal claims | Legitimate interests and, where applicable, legal obligations |
A legitimate interest is a business purpose that must be balanced against the rights and interests of the people whose personal data is processed. We rely on this basis only where it is appropriate.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that lawfully took place before you withdrew consent.
Where we need information to enter into or perform a contract, failing to provide it may prevent us from responding to your request or providing the relevant service.
4. ScopeAI™ And Artificial Intelligence
ScopeAI processes project descriptions, uploaded files and user responses through our estimator service to generate a preliminary scope of work and estimate.
Estimate records are stored in our database, which currently includes Neon. Depending on the service and deployment, submissions may also pass through our application hosting and storage infrastructure.
We use Google’s Gemini AI models to help generate ScopeAI outputs.
We do not use your project details to train our own AI models. Our current AI-provider configuration is intended to prevent submitted project data from being used to train the AI models. AI providers may nevertheless process submitted information as necessary to provide the requested service, subject to the applicable provider terms and configuration.
ScopeAI generates estimates and other outputs from the information submitted. It does not make decisions about individuals that produce legal or similarly significant effects.
You should not submit information that you are not authorised to share. Please contact us before submitting sensitive personal data or material subject to special contractual, regulatory or confidentiality requirements.
