Privacy Policy

Last updated: . This Privacy Policy explains how CoreDash, operating at sproutshine.site, processes personal data when you purchase or use our digital home workout guides and related training kits.

Data Controller

The data controller is CoreDash, Nicolaas Tulplaan 308, 1186 DT Amstelveen, Netherlands. For privacy inquiries contact us via the details on the reach us page. Email: hello@sproutshine.site. Phone: +31629051622.

Scope of This Policy

This policy applies to personal data collected through our website, checkout communications, customer support, and delivery of digital fitness guide products. It does not cover third-party websites linked from our pages.

Categories of Personal Data

We may process identification data such as your name, email address, and phone number when you contact us or purchase a product. Transaction data includes order references, selected training kits, payment confirmation status, and billing country. Technical data includes IP address, browser type, device identifiers, and cookie identifiers as described in our Cookies Policy. Communication data includes messages you send through our contact form and support correspondence related to workout guide access.

Purposes and Legal Bases

We process personal data to deliver digital products you purchase, including sending download links and account instructions, based on contract performance. We process contact form submissions to respond to your questions about routines, kits, or billing, based on legitimate interest in operating our business and, where required, your consent. We process payment-related records to comply with Dutch tax and accounting obligations, based on legal obligation. We process analytics and cookie data to improve site usability, based on consent where required under the GDPR and Dutch Telecommunications Act.

Product-Specific Processing

When you buy a CoreDash training kit, we store your email to deliver PDF guides, interval cue sheets, and progression templates. We may record which kit version you received to provide update notifications for products that include quarterly refreshes. If you request printed quick-reference cards, we process your postal address solely for fulfillment and delete it when no longer needed for warranty or support claims.

Retention Periods

Contact form messages are retained for up to twenty-four months unless a longer period is required to resolve a dispute. Purchase records are retained for seven years to meet Dutch tax record requirements. Marketing preferences, if any, are retained until you withdraw consent. Server logs are retained for up to ninety days unless security investigation requires longer storage.

Recipients and Processors

We use trusted processors for hosting, email delivery, and payment processing. Processors act only on our instructions and provide appropriate safeguards such as Standard Contractual Clauses when data leaves the European Economic Area. We do not sell personal data to advertisers.

International Transfers

Where processors store data outside the EEA, we ensure a valid transfer mechanism is in place, including adequacy decisions or Standard Contractual Clauses supplemented by technical measures such as encryption in transit and at rest where available.

Security Measures

We implement access controls, encrypted connections via HTTPS, and least-privilege administrative access to systems holding customer data. No method of transmission is completely secure; we encourage strong, unique passwords for any optional client portal access.

Your Rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. Where processing relies on consent, you may withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with the Autoriteit Persoonsgegevens in the Netherlands. To exercise rights, contact us using the details above with sufficient information to verify your identity.

Children

Our products are marketed to adults managing their own training. We do not knowingly collect data from children under sixteen without parental authorization. If you believe a child provided data, contact us for deletion.

Automated Decision-Making

We do not use automated decision-making that produces legal or similarly significant effects regarding our workout guide products.

Changes to This Policy

We may update this Privacy Policy to reflect product changes or legal requirements. Material changes will be noted on this page with an updated date. Continued use of sproutshine.site after changes constitutes acknowledgment where permitted by law.