Privacy Policy

MeadowSprout (“we,” “us,” or “our”) is firmly committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data through your use of our website, meadowsprout.com (the “Site”). We prioritize your privacy rights and handle personal data in accordance with the General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), and other applicable privacy laws.

Please read this Privacy Policy carefully to understand how we treat your personal data and your rights concerning this information.

1. Commitment to Privacy and Data Protection

Your privacy is of paramount importance to us. We adhere to principles of transparency, accountability, and user control in handling personal data. We implement robust security measures and data governance practices to ensure that all collected data is processed lawfully, fairly, and transparently. Our commitment is to collect and manage your information with care and integrity, respecting your rights and safeguarding your information.

2. Scope of Policy and Role as Data Controller

This Privacy Policy applies to all personal data that we collect through the Site, including when you access, browse, interact with, purchase products on, or contact us through meadowsprout.com. MeadowSprout acts as the “data controller,” meaning we determine the purposes and means of processing your personal data.

3. Categories of Data Processed

We collect and process the following categories of personal data:

a. Usage Data
Includes data about your interactions with the Site such as IP address, browser type, domain name, pages viewed, access times, referring URLs, and other diagnostic data.

b. Account Data
Includes your name, mailing address, email address, phone number, and credentials used when creating or maintaining a user account.

c. Profile Data
Comprises preferences, purchase history, wish lists, behavior on the Site, and your interests in products and services.

d. Communication Data
Includes records of communications with us such as support tickets, email correspondence, and contact form submissions.

e. Technical Data
Includes information on devices used to access the Site: operating system, browser settings, screen resolution, device identifiers, language, and time zone settings.

f. Transaction Data
Includes payment processing details (via our third-party payment processors), order history, shipping addresses, and delivery confirmations.

g. Preference Data
Entails your marketing and communication preferences, including opt-ins for email communications, product alerts, and feedback.

4. Legal Bases for Processing

We collect and process personal data based on the following lawful grounds:

– Consent: Where you have given explicit consent (e.g. subscribing to newsletters).
– Contractual Necessity: Processing necessary to perform or enter into a contract (e.g. completing orders).
– Legitimate Interests: For business operations, IT administration, fraud prevention, or product optimization, balanced against your rights and interests.
– Legal Obligation: Where processing is required to comply with a legal obligation (e.g. tax record keeping).

5. Your Rights

In accordance with GDPR and CCPA, you are granted the following rights concerning your personal data:

– Right of Access: To request access to your personal data and obtain a copy.
– Right to Rectification: To have inaccurate or incomplete data corrected.
– Right to Erasure: To request deletion of your data (“right to be forgotten”) under certain conditions.
– Right to Restriction: To request limiting of processing in specific circumstances.
– Right to Data Portability: To receive the personal data you provided to us in a structured, commonly used, machine-readable format or request its transmission to another service provider.
– Right to Object: To object to certain types of processing, including marketing.
– Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights under applicable laws.

To exercise these rights, you may contact us at [email protected].

6. Security Measures

We implement technical and organizational measures to secure your data, including:

– Data encryption during transmission and storage
– Multi-level access controls and user authentications
– Firewall and anti-malware protections
– Regular security audits and testing
– Isolation of sensitive information using logical segregation
– Staff training on privacy practices and data handling

Though no system is completely secure, we work diligently to protect your data from unauthorized access, loss, or misuse.

7. International Data Transfers

Where your personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

– Standard contractual clauses approved by the European Commission
– Participation in appropriate international frameworks
– Region-specific compliance mechanisms under applicable laws

Such transfers are only made where strictly necessary and legally permissible.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, contractual, accounting, or reporting requirements. Retention periods include, but are not limited to:

– Account and Transaction Data: 7 years for regulatory and tax obligations
– Usage and Technical Data: 12 months for analytics
– Communication and Support Data: 2 years post-last communication
– Marketing Consents: Until withdrawn or 24 months from last interaction

Data may be anonymized or securely deleted once retention periods expire.

9. Cookie Policy

We use cookies and similar technologies to enhance functionality, analyze usage, and improve user experience on meadowsprout.com. These include:

– Essential Cookies: Required for basic functions (e.g. session management, cart functionality)
– Functional Cookies: Adapt the Site’s behavior based on your preferences
– Analytics Cookies: Provide data on visitor behavior and performance metrics (e.g. page views, time-on-site)
– Performance Cookies: Measure and improve Site speed, loading, and responsiveness

10. Cookie Management and Compliance

Upon visiting the Site, you are presented with cookie management options to consent or customize preferences in compliance with GDPR and CCPA. Users may manage or withdraw cookie consent via:

– Our embedded cookie preference tools
– Browser-level cookie controls
– Opt-out links for third-party cookies and ad tracking (e.g. Google Analytics opt-out)

Refusing some cookies may impair certain Site functionalities.

11. Special Protections for Children Under 13

We do not knowingly collect personal information from children under the age of 13. If we become aware that a user under the age of 13 has submitted personal data without verified parental consent, we will take reasonable steps to delete such information. Parents or legal guardians who believe their child has provided information may contact us at [email protected].

12. Policy Updates and User Notifications

We may update this Privacy Policy to reflect changes in law, technology, services, or our practices. Material updates will be communicated through the Site or via email, where appropriate. We encourage users to periodically review this Policy to remain informed about how we are protecting your data.

13. Contact

If you have questions, concerns, or requests about this Privacy Policy or our data handling practices, please contact:

Data Protection Officer
Email: [email protected]
Website: https://meadowsprout.com

We are committed to ensuring full compliance with all relevant privacy regulations and to addressing any privacy-related concerns in a timely and respectful manner.