Privacy policy

PRIVACY POLICY

Last updated: May 2026

RootReva Limited is committed to protecting your personal data. This policy explains what we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

RootReva Limited 86–90 Paul Street, London EC2A 4NE Email: hello@rootreva.com

We are the data controller for personal data collected through rootreva.com.

2. What Data We Collect

We may collect the following categories of personal data:

When you place an order:

  • Name, email address, delivery address, billing address
  • Payment information (processed securely by our payment provider — we do not store card details)
  • Order history and purchase details

When you create an account:

  • Email address, password (encrypted), name

When you contact us:

  • Your name, email address, and the content of your message

When you subscribe to our mailing list:

  • Email address, and optionally your name

Automatically when you visit our website:

  • IP address, browser type, device type, pages visited, time spent on site (via cookies — see our Cookie section below)

3. How We Use Your Data

We use your personal data for the following purposes:

Purpose Legal basis
Processing and fulfilling your order Performance of a contract
Sending order confirmation and dispatch updates Performance of a contract
Responding to your enquiries Legitimate interests
Sending marketing emails (only if you opted in) Consent
Improving our website and customer experience Legitimate interests
Complying with legal obligations Legal obligation

We will never use your data for purposes incompatible with those listed above.

4. Marketing Communications

We will only send you marketing emails if you have explicitly opted in — either at checkout or via our sign-up form. You can unsubscribe at any time by clicking the unsubscribe link in any of our emails or by emailing hello@rootreva.com.

We do not sell or rent your personal data to third parties for marketing purposes.

5. Who We Share Your Data With

We share your data only where necessary:

  • Shopify — our e-commerce platform, which processes your order data
  • Royal Mail / delivery partners — your name and delivery address to fulfil your order
  • Payment processors (e.g. Stripe, PayPal) — to process your payment securely
  • Email marketing platform (e.g. Klaviyo or Mailchimp) — to send transactional and marketing emails where you have opted in
  • Analytics providers (e.g. Google Analytics) — aggregated, anonymised website usage data

All third-party processors are contractually required to handle your data in accordance with UK GDPR.

6. Data Retention

We retain your personal data only for as long as necessary:

  • Order data: 7 years (required for UK tax and accounting compliance)
  • Account data: until you close your account or request deletion
  • Marketing data: until you unsubscribe or request removal
  • Customer service correspondence: 3 years from resolution

7. Cookies

Our website uses cookies to function properly and to improve your experience. These include:

  • Essential cookies — required for the website and checkout to work
  • Analytics cookies — help us understand how people use our site (Google Analytics)
  • Marketing cookies — used to personalise advertising (only with your consent)

You can manage your cookie preferences via the cookie banner when you first visit our site, or at any time through your browser settings.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten") in certain circumstances
  • Restrict how we process your data in certain circumstances
  • Object to processing based on legitimate interests
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time (for processing based on consent)

To exercise any of these rights, email us at hello@rootreva.com. We will respond within 30 days as required by law.

9. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO website: ico.org.uk ICO helpline: 0303 123 1113

We would, however, welcome the opportunity to address your concern directly first — please email us at hello@rootreva.com.

10. Changes to This Policy

We may update this policy from time to time. The current version will always be published on our website with the date it was last updated. Significant changes will be communicated by email where appropriate.