SparkLift Privacy Policy
Last updated: 13 September 2026
This policy explains what personal information SparkLift collects, why, who we share it with, and the choices and rights you have.
1. Who is responsible for your information
SPARKLIFT LTD (“SparkLift”, “we”, “us”) is the data controller for personal information processed through sparklift.app.
- Company number: 17331436
- Registered office: Unit 9 Caxton House, Broad Street, Great Cambourne, Cambridge, England, CB23 6JN
- Contact for privacy questions and requests: [email protected]
2. What we collect
Account information. Your name, username, email address, password (stored in scrambled form, never readable by us), profile details, avatar, account type (fan or creator) and settings.
Community content. Posts, replies, reactions, uploaded images and videos, reports you make, and moderation history. Much of this is public by design.
Direct messages. The content of messages you send and receive, and who they are with.
Creator information. If you apply to become a creator: your application answers, social links, audience details and application status. If approved: store details, products, sales, earnings, payout requests and the payout details you give us (for example a PayPal email address or bank account details).
Orders and memberships. What you bought, prices, membership status, billing and delivery details, refund and support history.
Payment information. Card payments are handled by Stripe. We never see or store your full card number.
Communications. Emails and messages you send us, and whether you open or click our emails.
Technical information. IP address, browser and device type, pages visited, referring site, approximate location derived from your IP address, and security and error logs.
Cookies. See section 7.
3. Why we use it, and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Creating and running your account | Contract |
| Showing and moderating community content and messages | Contract and legitimate interests (keeping the community safe) |
| Processing orders, memberships, refunds and delivery | Contract |
| Reviewing creator applications, running creator stores and paying creators | Contract |
| Calculating and collecting tax, keeping accounting records | Legal obligation |
| Preventing spam, fraud and abuse, and securing the site | Legitimate interests |
| Service emails (receipts, password resets, account notices) | Contract |
| Marketing emails | Consent, or for existing customers the “similar products” rule, with an unsubscribe link in every email |
| Analytics and advertising cookies | Consent |
| Improving SparkLift | Legitimate interests |
4. Who we share it with
We use trusted service providers who process information on our behalf and under contract:
| Provider | What they do | Where |
|---|---|---|
| Stripe | Card payments, memberships, refunds, fraud checks and sales tax calculation | UK, EU and US |
| Printful | Printing and delivering merchandise. Receives your name, delivery address and order contents | EU and US |
| Amazon Web Services | Website hosting, storage of uploaded media, backups and sending email | US and EU |
| Cloudflare | Security and faster delivery of the website. Processes IP addresses | Global |
| reCAPTCHA spam protection on login and sign-up forms, and Google Analytics if you accept analytics cookies | US | |
| Meta | Meta Pixel advertising measurement, only if you accept marketing cookies | US |
| PayPal or your bank | Receiving creator payouts | Depends on the method chosen |
| Patchstack | Security monitoring of our website software | EU |
Creators can see the name and order details of people who buy from them, so they can deliver what was ordered. Other members can see your public profile and public posts.
We may also share information with professional advisers (such as accountants and lawyers), and with authorities where the law requires it or to protect people’s safety.
We do not sell your personal information.
Google reCAPTCHA is used to tell people from automated bots. Its use is subject to Google’s Privacy Policy and Terms of Service.
5. International transfers
Some providers process information outside the UK, mainly in the United States. Where they do, we rely on the UK’s data adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or on the UK International Data Transfer Addendum to standard contractual clauses.
6. How long we keep it
| Information | How long |
|---|---|
| Account information | While your account is open, then deleted or anonymised within 90 days of closure, unless we need it for the reasons below |
| Orders, payments, payouts and tax records | 6 years from the end of the financial year they relate to, as required for UK company and tax records |
| Public posts | Until you or we delete them. After account closure, posts may remain but are shown without your name |
| Direct messages | While the conversation exists. Messages involved in a report may be kept longer to handle it |
| Creator applications that are not approved | 12 months |
| Marketing preferences | Until you unsubscribe, then only a record that you unsubscribed |
| Security logs | Up to 12 months unless needed for an investigation |
| Backups | Overwritten on a rolling schedule |
7. Cookies
We use cookies that are strictly necessary to run the site (for login, your basket and checkout, and security), which do not need consent.
Analytics and marketing cookies are only set if you accept them in our cookie banner. You can change your choice at any time from the cookie settings link in the website footer. See our Cookie Policy for the full list.
8. Emails
We send service emails, such as receipts, password resets and important account notices, because they are part of providing the service. Marketing emails are only sent where you have agreed or where the law allows, and every one has an unsubscribe link.
9. Your rights
You can ask us to:
- Give you a copy of your personal information.
- Correct information that is wrong.
- Delete your information.
- Restrict or object to how we use it, including objecting to direct marketing at any time.
- Give you your information in a portable format.
- Withdraw consent you have given, at any time.
Email [email protected] to make a request. We may need to confirm your identity first. We will reply within one month.
If you are unhappy with how we handle your information, please tell us first so we can try to fix it. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk). If you live in the EU, you can complain to your local data protection authority.
US residents. Some US states give residents rights to access, correct and delete their information and to opt out of targeted advertising. You can make any of these requests by emailing [email protected], and you can opt out of advertising cookies at any time from the cookie settings link. We do not sell personal information.
10. Public content
Posts, profiles, product listings and reviews in public areas can be seen by anyone. Please do not post personal details you do not want to be public.
11. Children
SparkLift is not for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it. Users aged 13 to 17 need a parent or guardian’s permission.
12. Security
We protect information with measures including encrypted connections, two-factor authentication for administrators, limited access to systems, security monitoring and regular backups. No online service is completely secure, so please keep your password safe and tell us if you think your account has been accessed without permission.
13. Changes
We may update this policy. If we make significant changes, we will tell you by email or a notice on the site before they take effect.
14. Contact
SPARKLIFT LTD Unit 9 Caxton House, Broad Street, Great Cambourne, Cambridge, England, CB23 6JN Email: [email protected]