Privacy Policy
Last updated: May 2026
Billing descriptor
sprinthaven.com
support@sprinthaven.com
This Privacy Policy explains how Solvyrion Ltd ("we", "us", or "our"), trading as SprintHaven, collects, uses, stores, and protects your personal data when you subscribe to and use our digital publication services. This policy is designed to comply with the General Data Protection Regulation (GDPR) as it applies in the European Union and the UK GDPR as it applies in the United Kingdom.
1. Data Controller
Solvyrion Ltd is the data controller responsible for your personal data processed in connection with this website (sprinthaven.com).
Company Name: Solvyrion Ltd
Company number: 17171207 · Registered in: England and Wales
Address: Markham House, 20 Broad St, Wokingham, Berkshire RG40 1AH, United Kingdom.
Privacy Enquiries: support@sprinthaven.com
2. EU Representative
As we offer services to individuals in the European Union, we have appointed an EU Representative to act on our behalf regarding our obligations under the GDPR.
You can contact our EU Representative at:
- [Name of EU Representative Company]
- [Address of EU Representative Company]
- [Email of EU Representative Company]
3. Data We Collect
We collect and process the following categories of personal data:
- Identity and Contact Data: Name, email address, and country of residence.
- Account and Subscription Data: Subscription plan details, trial status, renewal dates, and cancellation history.
- Payment Data: Payment processing is handled by secure third-party providers. We do not store full credit/debit card numbers on our servers; however, we may receive partial information (e.g., the last four digits of a card) for billing verification.
- Technical Data: IP address, browser type, operating system, and similar device information collected via cookies and storage technologies (see section 4 and our Cookie Policy).
- Communications: Records of any messages or support requests you send to us.
5. How and Why We Use Your Data
We process your personal data for the following purposes:
- Service Delivery: To provide and deliver our digital publications, newsletters, and coaching content.
- Subscription Management: To process payments, manage trials, handle renewals, and execute cancellations.
- Tax Compliance: To accurately apply VAT based on your location and comply with UK and EU tax reporting obligations.
- Communication: To send service-related notifications regarding billing, access, security, and updates to our terms.
- Customer Support: To respond to your enquiries and resolve any technical or billing issues.
- Security and Fraud Prevention: To protect our services and users from unauthorized access or fraudulent activity.
6. Legal Basis for Processing (GDPR & UK GDPR)
Under the GDPR, we must have a "legal basis" to process your data. We rely on the following:
- Performance of a Contract: Processing is necessary to provide the services you have subscribed to.
- Legal Obligation: Processing is necessary to comply with law (e.g., tax, accounting, and anti-fraud regulations).
- Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., improving our services, ensuring security) where these interests do not override your fundamental rights.
- Consent: Where required by law, we will obtain your explicit consent (e.g., for non-essential cookies—see section 4 and our Cookie Policy—or certain marketing communications).
7. Data Sharing and Processors
We share your data only with trusted third-party service providers who act as "data processors" on our behalf. These include:
- Payment Processors: To securely handle your subscription payments.
- Hosting and Infrastructure Providers: To maintain our website and store data securely.
- Email Delivery Services: To send our digital publications and service notifications.
- Subscription Management Tools: To manage customer accounts and billing cycles.
All our processors are contractually bound to protect your data and are prohibited from using it for any other purpose. We do not sell your personal data to third parties.
8. International Data Transfers
As we are based in the United Kingdom, your data may be processed in the UK and other countries. Where data is transferred outside the European Economic Area (EEA) or the UK, we ensure that appropriate safeguards are in place, such as:
- Adequacy Decisions: Transferring to countries recognized as providing an adequate level of protection.
- Standard Contractual Clauses (SCCs): Using EU or UK approved model clauses to ensure data protection.
9. Data Retention
We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means
- Typically, we retain data as follows:
- **Account and Subscription Data:** For the duration of your active subscription and for a period of 6 months after cancellation, to facilitate re-subscription or address any post-cancellation queries, unless a longer period is required by law.
- **Financial Records (including Payment Data):** 6-7 years as required by UK tax and accounting laws.
- **Marketing Communication Data:** Until you unsubscribe or withdraw your consent, or for a maximum of 2 years from your last interaction, unless a longer period is required by law.
- **Customer Support Communications:** For 2 years from the date of the last interaction to ensure we can provide consistent support and resolve ongoing issues.
- **Technical Data (e.g., IP addresses, browser info):** For 13 months for analytics and security purposes.
When personal data is no longer required, we securely delete or anonymize it.
10. Your Rights (GDPR & UK GDPR)
You have the following rights regarding your personal data:
- Right of Access: You can request a copy of the data we hold about you.
- Right to Rectification: You can ask us to correct inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): You can request that we delete your data under certain conditions.
- Right to Restrict Processing: You can ask us to limit how we use your data.
- Right to Data Portability: You can request that we transfer your data to another service provider.
- Right to Object: You can object to our processing of your data based on legitimate interests.
- Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, use our Data Request form at /legal/data-request or contact us at support@sprinthaven.com. We respond within one month (extendable by two months where permitted by law if the request is complex).
11. Automated Decision-Making and Profiling
We do not use automated decision-making, including profiling, in a way that produces legal effects concerning you or similarly significantly affects you.
12. Data Security
We implement robust technical and organizational security measures to protect your personal data from unauthorized access, loss, alteration, or disclosure. This includes encryption, secure servers, and regular security reviews.
13. Children's Privacy
Our services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.
14. Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with a supervisory authority:
In the UK
Information Commissioner's Office (ICO) — ico.org.uk
In the EU
Your local Data Protection Authority in your country of residence.
15. Contact Us
For any questions or requests regarding this Privacy Policy or your data, please contact:
Email: support@sprinthaven.com
Address: Solvyrion Ltd, Markham House, 20 Broad St, Wokingham, Berkshire RG40 1AH, UK.
Company number: 17171207 · Registered in: England and Wales