Privacy Policy

Effective date: March 18, 2026
Last updated: August 12, 2026

This Privacy Policy explains how sproutvest.com ("the Site"), operated by SproutVest, LLC, collects, uses, and protects information when you visit the Site or book a call through our scheduling service.

What We Collect

Analytics (Google Analytics 4)

The Site uses Google Analytics 4 (GA4) to understand how visitors use the Site. GA4 collects:

• Page views: which pages you visit and when
• Device and browser information: screen size, browser type, operating system
• Approximate location: country and city level, derived from IP address (your full IP address is not stored by GA4)
• Interaction events: button clicks, outbound link clicks, scroll depth, and language preference

GA4 uses first-party cookies to distinguish unique visitors. These cookies do not contain personal information, and none of them are set until you accept them.

Legal basis (GDPR): Your consent, given through the banner. You may withdraw it at any time, and withdrawing deletes the cookies as well as stopping new collection.

Advertising (Google Ads)

We run paid search ads on Google. When you arrive from one of those ads, the Google Ads tag records that the visit came from a specific ad and whether it led to an action we count, such as completing the free diagnostic or booking a call. It collects:

• Click identifier: a Google-issued ID attached to the ad click, stored in a first-party cookie and, if you complete the free diagnostic in the same browsing session, saved with your submission in our own records
• Conversion events: which counted action you took, and when

We keep the click identifier so we can tell Google that an ad it served led to a completed diagnostic, and later that it led to a sale. That is the only thing we send back. Your email address, your name, your answers, and your report are never sent to Google, and Google's enhanced conversions feature is switched off.

The identifier is governed by the same consent choice as analytics, and that choice starts as "no" for everyone. Unless you have accepted, it is discarded in your browser and never reaches us, whatever country you are in. It is held only for the browsing session, so closing the tab discards it, and we delete it from a stored submission on request.

A fuller description of the software behind this, what it does and what it never sends, is on our Google Ads integration page.

Legal basis (GDPR): Your consent, given through the banner.

Scheduling (Cal.com)

When you book a call through our "Book a Discovery Call" button, you are directed to Cal.com, a third-party scheduling platform. Cal.com may collect:

• Name and email address: required to confirm your booking
• Phone number: if you choose to provide it
• Any notes you include in the booking form

This data is processed by Cal.com under their own Privacy Policy. We receive the information you submit in order to prepare for and conduct the scheduled call.

Legal basis (GDPR): Performance of a contract (you are requesting a meeting) and your explicit consent when submitting the booking form.

Report Downloads (SproutVest Field Notes)

Some reports on the Site are available in exchange for your email address. When you request a download we store:

• Email address: the address you submit in the download form
• Request details: which report you requested, the page language, and timestamps of the request and download

This data is stored in a Cloudflare D1 database under our control. We use it to deliver the download and to let you know about future reports in the same series. We never sell it or share it with third parties. To have your address removed, contact us at the email address below.

Legal basis (GDPR): Your explicit consent when submitting the download form.

Hosting (Cloudflare Pages)

The Site is hosted on Cloudflare Pages. Cloudflare may automatically collect:

• IP address: in server access logs, retained temporarily for security purposes
• Request metadata: pages requested, timestamps, HTTP headers

This data is processed by Cloudflare under their own Privacy Policy.

Legal basis (GDPR): Legitimate interest in maintaining Site security and availability.

What We Do Not Collect

• We do not build user profiles for ad targeting, and we run no remarketing or audience lists
• We do not sell, rent, or share personal data with third parties for marketing
• We do not require account creation or store passwords
• We do not collect payment information

Cookies

The Site uses the following cookies:

None of these are set until you accept them. That is true wherever you are visiting from: we do not treat visitors outside Europe as having agreed by default. Until you answer the banner, analytics and advertising storage are switched off, and if you decline they stay off.

If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as a decision and do not ask again.

You may change your mind at any time, in either direction:

Cookie Settings

Declining after having accepted does more than stop new collection: we delete the cookies listed above from your browser at that point. Your choice is remembered for twelve months, after which we ask again rather than assume it still holds.

You can also control cookies through your browser settings. Disabling cookies will not prevent you from using the Site but will limit analytics data collection.

Your Rights

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your personal data
• Object to processing based on legitimate interest
• Withdraw consent where processing is based on consent
• Data portability: receive your data in a structured format

To exercise any of these rights, contact us at the email address below.

Data Retention

• Analytics data is retained by Google Analytics for 14 months, after which it is automatically deleted
• Booking data is retained by Cal.com according to their retention policy and by us for as long as necessary to fulfill the purpose of the scheduled meeting
• Server logs are retained by Cloudflare for a limited period as described in their privacy policy

Third-Party Services

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Site after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions or to exercise your data rights, contact:

SproutVest, LLC
Website: sproutvest.com
Email: [email protected]