Privacy Policy

Last updated 5 September 2026.

This policy explains what SprintlyWorks does with personal data collected through
sprintlyworks.com. It is written to be read, not to be survived, so it says what actually happens
rather than what might conceivably happen.

Who is responsible

SprintlyWorks is the controller of the personal data described here.

• Business ID 3096416-9
• Mannerheiminaukio 1a, 00100 Helsinki, Finland
• contact@sprintlyworks.com

Questions about this policy, or any request about your own data, reach Rahul Abhisek directly at
rahul.abhisek@sprintlyworks.com. There is no separate privacy team to route you through.

What we collect, and why

When you write to us

The contact form asks for your name, your email address and your message. We use them to answer
you and to carry on the conversation if one starts. The lawful basis is our legitimate interest in
responding to people who contact us, and, where you are asking about working with us, the steps
taken at your request before entering a contract.

When you send a problem statement

The problem statement form asks for your email address, your company and a short description of
the problem you want help with. It also records which page of this site you were reading when you
sent it. That description is business information you choose to give us, so please do not include
anything confidential in it. We store the submission before we email it to ourselves, so that a
mail failure cannot lose your enquiry.

When you download a case study or report

Our case studies, whitepapers and industry reports are behind a short form that asks for a work
email address. Personal and free webmail addresses are rejected by the form, so if you use one it
will not let you through. We use the address to send you the document you asked for, and to follow
up once about it. The lawful basis is your consent for the document, and our legitimate interest in
a single relevant follow up about the same subject.

An automated message may reach you shortly after a download. You can stop it by replying and
saying so, and we will not send another.

When you subscribe

The footer subscription form asks only for an email address. The lawful basis is your consent,
which you can withdraw at any time by replying to any message we send or writing to
contact@sprintlyworks.com. We will act on it the same week.

What we do with enquiries after they arrive

We score and classify incoming enquiries automatically, to decide which ones to answer first.
The classification looks at the email domain and sorts senders into broad categories such as a
company, a personal address, a university, a consultancy or a vendor. It is a triage aid. It
produces no legal effects and nothing is decided about you by machine alone: a person reads every
enquiry.

Enquiry records, including the email address and the page that produced them, are copied into a
private Google Sheet in our own Google Workspace, which is how we keep track of who has written in.
It is visible to us and to nobody else.

Measurement

We measure how this site is used so we can write things worth reading. We do not run
advertising, we do not sell data, and we do not build profiles for anyone else.

Google Analytics

Google Analytics 4 records which pages are viewed, roughly where in the world the visitor is,
what device and browser they used, and which site or search sent them. It sets cookies to
distinguish one visit from another. IP addresses are used to work out an approximate location and
are not stored by us.

Microsoft Clarity

Microsoft Clarity records how visitors move through pages. This includes session recordings,
which replay mouse movement, scrolling and clicks on a page, and heatmaps that aggregate where
people click and how far they read. Clarity masks text input by default, so what you type into a
form is not captured in a recording.

Microsoft keeps session recordings for 30 days and heatmap and click data for 9 months. We use
it to find pages that are confusing or broken.

What we stopped doing

Until August 2026 this site also ran visitor identification services that attempted to work out
which company a visitor belonged to from their IP address. They were removed on 22 August 2026 and
no longer run. We still hold the dataset they produced, which describes companies rather than named
people, and we are not adding to it.

Cookies and how to refuse them

The cookies this site sets come from the measurement tools above and from WordPress, which needs
one to keep a form working across a page load. There are no advertising cookies.

You can block or delete cookies in your browser settings, which is the most reliable control
and works regardless of what any website tells you. Google publishes an opt out add on for Google
Analytics at tools.google.com/dlpage/gaoptout. Microsoft Clarity honours the browser Do Not Track
setting, and Microsoft describes how to opt out at privacy.microsoft.com.

Who else sees your data

We use a small number of service providers, each of which processes data on our instructions
only. We do not sell personal data, and we do not share it with anyone for their own marketing.

• GoDaddy, which hosts this website
• Cloudflare, which sits in front of it and serves it quickly and safely
• Google, for Google Analytics, Google Workspace email and Google Sheets
• Microsoft, for Clarity

Some of these providers are based in the United States or process data there. Those transfers
rely on the European Commission’s adequacy decision for the EU to US Data Privacy Framework, or on
standard contractual clauses where a provider is not certified under it.

We will also disclose data where the law requires it, which has not yet happened.

How long we keep things

• Enquiries and problem statements: 36 months after our last contact with you,
  then deleted.
• Download records: 36 months from the download.
• Subscription addresses: until you unsubscribe, and removed promptly when you
  do.
• Google Analytics: the period configured on our property, and never more than 14 months, which is the longest the product allows us to keep it.
• Clarity recordings: 30 days. Heatmap and click data: 9 months. Both are set by
  Microsoft and we cannot extend them.

Your rights

If you are in the EU or the UK you have the right to ask us for a copy of the personal data we
hold about you, to have it corrected, to have it deleted, to restrict what we do with it, to
receive it in a portable form, and to object to processing we carry out on the basis of legitimate
interest. Where we rely on consent, you can withdraw it at any time, which does not affect anything
done before you withdrew it.

Write to rahul.abhisek@sprintlyworks.com. We will respond within one month. There is no charge,
and you do not have to explain why you are asking.

If you are not satisfied with how we handle it, you can complain to the Finnish Data Protection
Ombudsman, the Office of the Data Protection Ombudsman, tietosuoja.fi, or to the supervisory
authority in the country where you live.

Security

The site is served over HTTPS. Enquiry data sits in the website’s own database and in a private
Google Sheet, both reachable only with an account we control. Access is limited to the people who
need it, which today is a very short list.

Children

This site is aimed at people working in industry. It is not directed at children and we do not
knowingly collect data about them.

Changes

If we change how we use personal data we will change this page and update the date at the top.
Material changes will be noted here rather than made quietly.