Privacy Policy

1. Introduction

Sproutback ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard personal information when you visit our website sproutback.world or contact us.

We are an organisation based in New Zealand and handle personal information in accordance with the Privacy Act 2020 and the Information Privacy Principles (IPPs). Where applicable, we also comply with other relevant laws, including the Unsolicited Electronic Messages Act 2007.

By using our website and providing personal information, you acknowledge that you have read this Privacy Policy. Where we rely on your consent, you may withdraw it at any time as described below.

2. Who We Are

The organisation responsible for your personal information is:

• Organisation: Sproutback
• Address: Unit C/23 Norman Spencer Drive, Manukau City Centre, Auckland 2104, New Zealand
• Phone: +64 9 263 4158
• Email: business@sproutback.world

For privacy enquiries, please contact us using the details above. We will respond within a reasonable timeframe and, where required by law, within 20 working days of a valid access request.

3. Information We Collect

3.1 Information You Provide

We may collect personal information that you voluntarily provide when you:

• Submit our contact form (name, email address, and message content)
• Communicate with us by phone or email
• Subscribe to updates or request information from us

3.2 Automatically Collected Information

When you visit our website, we may automatically collect technical information such as:

• IP address and approximate location (country or region)
• Browser type and version
• Operating system and device type
• Pages visited, time spent on pages, and navigation paths
• Referring website or search terms
• Date and time of access

Some of this information may be collected through cookies and similar technologies. Analytics and marketing cookies are used only if you give consent through our cookie banner. See our Cookie Policy for details.

4. Why We Collect and How We Use Information

We collect personal information only where we have a lawful purpose connected to our functions or activities. We use information to:

• Respond to your enquiries and provide customer support
• Operate, maintain, and improve our website
• Understand how visitors use our site (with your consent for analytics cookies)
• Measure advertising performance (with your consent for marketing cookies)
• Comply with legal obligations and protect our legal rights
• Prevent fraud, abuse, or security incidents

We will not use your personal information for a purpose that is unrelated to the purpose for which it was collected, unless we are permitted or required to do so by law, or we obtain your consent.

5. Collection Notices and Consent

When you submit the contact form, we will ask you to confirm that you agree to our collection and use of your information as described in this policy. You are not required to provide personal information, but if you do not, we may be unable to respond to your enquiry.

For optional cookies (analytics and marketing), we request your consent before those technologies are activated. You may change your choices at any time using the cookie banner on our website.

6. Disclosure of Personal Information

We do not sell your personal information. We may disclose information to:

• Service providers: Trusted third parties who help us host the website, process enquiries, or provide analytics and advertising services (only where you have consented to relevant cookies, where applicable)
• Legal and regulatory authorities: When required by New Zealand law, court order, or to protect rights, safety, or property
• Professional advisers: Such as lawyers or accountants, under confidentiality obligations
• Business transfers: In connection with a merger, reorganisation, or sale of assets, subject to appropriate safeguards

Some service providers may store or process data outside New Zealand. Where we disclose information overseas, we take reasonable steps to ensure that comparable safeguards apply, in line with the Privacy Act 2020.

7. Data Retention

We retain personal information only for as long as necessary for the purposes described in this policy:

• Contact form submissions: Up to 2 years from the date of your last communication, unless a longer period is required by law
• Analytics data: Up to 26 months (where analytics cookies are enabled)
• Cookie consent records: Up to 1 year

When information is no longer needed, we delete it or de-identify it using reasonable security measures.

8. Security

We take reasonable steps to protect personal information from loss, unauthorised access, misuse, or disclosure, including:

• HTTPS encryption for data transmitted between your browser and our website
• Access controls limiting who can view personal information
• Secure hosting and regular review of our security practices

No method of transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Your Rights Under the Privacy Act 2020

Under New Zealand privacy law, you have the right to:

• Access: Request access to personal information we hold about you (IPP 6)
• Correction: Request correction of inaccurate, incomplete, or out-of-date information (IPP 7)
• Withdraw consent: Where processing is based on consent, withdraw consent for future use (this does not affect prior lawful processing)
• Complain: Lodge a complaint with us or with the Office of the Privacy Commissioner

To exercise access or correction rights, contact us at business@sproutback.world. We may need to verify your identity before responding. We will respond within 20 working days where the Privacy Act requires it, or explain if an extension applies.

10. Notifiable Privacy Breaches

If a privacy breach is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required under the Privacy Act 2020.

11. Marketing Communications

If we send commercial electronic messages to New Zealand recipients, we will do so in accordance with the Unsolicited Electronic Messages Act 2007. Messages will identify us as the sender and include a functional unsubscribe facility. We will not send marketing emails without your consent.

12. Children's Privacy

Our website is intended for a general audience and is not directed at children under 16. We do not knowingly collect personal information from children without appropriate parental or guardian consent. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

13. Third-Party Links

Our website may contain links to third-party websites (for example, Google policies). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date. Material changes may be highlighted on our website where appropriate.

15. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the issue. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner:

• Website: www.privacy.org.nz
• Phone: 0800 803 909 (New Zealand)

16. Contact Us

For privacy questions, access requests, or corrections, contact us:

• Address: Unit C/23 Norman Spencer Drive, Manukau City Centre, Auckland 2104, New Zealand
• Phone: +64 9 263 4158
• Email: business@sproutback.world

Last Updated: