Legal
Privacy
Privacy policy.
Last updated 11 October 2026
1. Who we are
Sprig Drinks B.V. is the company behind this site and decides how your personal data is used. These are sample details: replace them with your own company name, registration number, contact person and address.
2. What we collect
We collect only what you give us and what the site needs to run.
When you write to us through the contact form we receive your name, your email address, the subject you choose and your message. The stockist form also asks for the name of your business and where it is. The newsletter form asks for your email address only.
Each form also sends the title and address of the page you were on, and any campaign tags in the link that brought you here, so that we can tell where an enquiry came from.
If you accept analytics cookies we record visits in aggregate: the pages viewed, the referring site, the approximate country, and the type of device and browser. We do not collect special categories of data, and we do not knowingly collect data from children under 16.
3. Why we collect it
We use your data for the purposes below, each with its legal basis under the GDPR.
To answer your enquiry and handle stockist requests: our legitimate interest in replying to people who contact us, or steps taken at your request before entering into a contract (Article 6(1)(f) and 6(1)(b)).
To send the monthly newsletter: your consent (Article 6(1)(a)). You can withdraw it at any time with the unsubscribe link in every letter.
To measure how the site is used and, if you allow it, to measure advertising: your consent, given in the cookie banner (Article 6(1)(a)).
To keep the site secure and to meet legal duties such as bookkeeping: our legitimate interest and our legal obligations (Article 6(1)(f) and 6(1)(c)). We make no automated decisions about you and do no profiling that has a legal effect on you.
4. Cookies and analytics
Necessary cookies make the site work and remember your cookie choice. They are always on and need no consent.
Preference, analytics and marketing cookies are off until you switch them on. The banner offers Reject all, Save choices and Accept all side by side, and no optional cookie is set before you choose.
You can change or withdraw your choice at any time through the Cookies link in the footer. Withdrawing consent does not affect anything that happened before you withdrew it.
List every analytics and advertising tool this site uses here, with the provider’s name, what it is for and how long each of its cookies lasts.
5. Who we share it with
We never sell your data. We share it only with service providers that process it on our behalf, each under a data processing agreement.
Framer B.V. in the Netherlands hosts the site and receives what you send through the forms. Name your newsletter service, your email provider and any analytics or advertising service here.
Some providers may process data outside the European Economic Area. Where that happens we rely on an adequacy decision of the European Commission or on its standard contractual clauses, and you can ask us for a copy.
We may also disclose data when the law requires us to.
6. How long we keep it
We keep personal data no longer than we need it.
Enquiries and stockist requests are kept for up to 24 months after our last contact, unless we start working together. Newsletter addresses are kept until you unsubscribe, and deleted within 30 days after that. Analytics data is kept for up to 14 months, in aggregate. Records we must keep by law, such as invoices, are kept for seven years.
After these periods the data is deleted or anonymised.
7. Your rights
Under the GDPR you have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.
Write to hello@example.com and we will answer within one month. We may ask you to confirm who you are first. Using these rights is free.
If you believe we handle your data wrongly, you can complain to the data protection authority where you live or work. Ours is the Autoriteit Persoonsgegevens in the Netherlands.
8. Changes to this policy
We update this policy when what we do with data changes, or when the law does. The date at the top of this page shows the latest version.
If a change is significant we will say so on the site, and tell newsletter subscribers by email, before it takes effect.