Legal

Safeguarding Statement

Last updated: 3 July 2026

CyberSprouts provides cyber-safety, digital resilience and privacy support for individuals, families, households, older adults, vulnerable individuals and private clients.

Because our work may involve children, young people, older adults or people who may be at risk of harm, we take safeguarding seriously.

This statement explains our safeguarding position and the principles we follow when providing services.

1. Who we are

CyberSprouts is operated by CyberSprouts Limited, a company registered in England and Wales.

  • Company number: 13031873
  • Registered office: 61 Bridge Street, Kington, United Kingdom, HR5 3DJ
  • Contact email: hello@cybersprouts.com

2. Our safeguarding commitment

CyberSprouts is committed to acting responsibly where our services involve children, young people, older adults, vulnerable individuals or people who may be at risk of harm.

We aim to:

  • support safer and more confident use of technology;
  • provide practical advice that reduces digital risk;
  • treat safeguarding concerns seriously;
  • avoid unnecessary collection of sensitive information;
  • respect privacy and confidentiality where appropriate;
  • recognise that safety may sometimes require action or signposting;
  • work within the limits of our role and expertise.

3. Our role

CyberSprouts is not a statutory safeguarding agency, emergency service, law-enforcement body, social-care provider, medical provider or counselling service.

Our role is to provide cyber-safety, privacy and digital resilience advice and support.

We do not investigate criminal offences, make safeguarding determinations, provide therapy, or replace the role of parents, guardians, carers, schools, local authorities, police, healthcare professionals or specialist support organisations.

Where a concern appears to be outside our role, we may signpost to appropriate services or recommend that the client contacts the relevant authority or professional body.

4. Who this statement protects

This statement applies where our work may involve or affect:

  • children and young people;
  • older adults;
  • vulnerable individuals;
  • people at risk of harm, abuse, exploitation, coercion, harassment or neglect;
  • family members or household members whose information may be discussed during a CyberSprouts service.

For this statement, a child or young person means someone under the age of 18.

5. Types of concerns we may encounter

CyberSprouts services may involve digital-safety concerns such as:

  • online grooming or exploitation;
  • cyberbullying, harassment or stalking;
  • sextortion or image-based abuse;
  • coercive or controlling behaviour involving technology;
  • unauthorised access to accounts or devices;
  • financial scams or digital exploitation;
  • unsafe contact from strangers online;
  • harmful content or inappropriate online interactions;
  • misuse of tracking, monitoring or surveillance tools;
  • family conflict involving devices, accounts or online activity;
  • concerns about the digital safety of an older or vulnerable person.

This list is not exhaustive.

6. How we work safely

When providing services, we aim to:

  • collect only the information needed for the service;
  • use children’s age bands rather than exact dates of birth where possible;
  • avoid collecting passwords, recovery codes or unnecessary identity documents;
  • avoid unnecessary medical, disability, safeguarding or other sensitive information;
  • provide advice to parents, guardians, carers or adult clients unless a different arrangement has been clearly agreed and is appropriate;
  • limit exposure checks and public-source checks to lawful, defensive and authorised purposes;
  • avoid covert monitoring, unauthorised account access or intrusive investigation;
  • handle information carefully and in line with our Privacy Policy;
  • escalate, signpost or pause work where a safeguarding concern arises.

7. Information about children and young people

CyberSprouts normally collects information about children and young people from a parent, guardian or responsible adult.

We do not usually collect information directly from children.

We do not need children’s passwords, private messages, exact dates of birth, school details or identity documents unless there is a clear and exceptional reason. If such a reason arises, we will explain why the information is needed and how it should be handled.

We do not use children’s information for marketing.

8. Confidentiality and information sharing

We respect privacy and confidentiality. However, confidentiality is not absolute.

If we believe there is a serious or immediate risk of harm, or if we are legally required to do so, we may need to share relevant information with appropriate authorities or support services.

Where possible and appropriate, we will discuss this with the client first. However, we may not do so if it could increase risk, compromise safety, prejudice a response, or place another person at greater risk.

Data protection law does not prevent appropriate information sharing for safeguarding purposes. The ICO states that data protection law is not a barrier to sharing information to protect a child from harm, and that children’s personal data may be shared where there is a compelling reason, including safeguarding.

9. When we may pause, refuse or stop work

We may pause, refuse or stop work where:

  • a request appears unlawful, unsafe or inappropriate;
  • we are asked to access accounts, devices, systems or information without proper authority;
  • we are asked to obtain passwords, recovery codes or security credentials;
  • we are asked to bypass security controls;
  • we are asked to carry out covert monitoring or surveillance;
  • we believe the service could increase risk to a child, vulnerable person or person at risk;
  • we believe the matter needs urgent support from police, local authority safeguarding teams, a school, healthcare provider or specialist organisation;
  • continuing would create an unacceptable legal, ethical, security or safeguarding risk.

10. Urgent or emergency situations

CyberSprouts is not an emergency service.

If someone is in immediate danger, or if there is an urgent risk of harm, contact the emergency services.

In the United Kingdom, call 999 in an emergency.

If the situation is not an immediate emergency but involves a safeguarding concern, contact the relevant local authority safeguarding team, school safeguarding lead, police non-emergency number, healthcare professional or specialist support organisation as appropriate.

11. Client responsibilities

Clients should:

  • provide accurate information;
  • avoid sending unnecessary sensitive information;
  • avoid sending passwords, recovery codes or security credentials;
  • only provide information about other people where they have a proper reason to do so;
  • tell us if a situation involves a child, vulnerable adult or person at risk;
  • tell us if they believe there is an urgent or escalating risk;
  • seek emergency, legal, medical, social-care or law-enforcement support where appropriate.

12. Concerns about CyberSprouts

If you have a safeguarding concern connected with CyberSprouts or the way we have handled a matter, contact:

hello@cybersprouts.com

If your concern involves immediate risk of harm, contact the emergency services or relevant safeguarding authority first.

Complaints about CyberSprouts can also be raised under our Complaints Policy.

13. Review of this statement

We may update this Safeguarding Statement as our services, processes or legal obligations change.

The latest version will be published on our website with the date it was last updated.