Home / Privacy
Privacy Policy
Who we are
Root & Stalk (“we”, “us”) is the data controller for personal data collected through rootandstalk.co.uk. Contact: hello@rootandstalk.co.uk.
Registered company name and address to be confirmed before launch.
What data we collect
- Name, email address, delivery address and phone number you give us at checkout.
- Order history and payment confirmations (we never see your full card details – these are handled by Stripe).
- Account details if you sign in: email and any profile details you choose to add.
- Basic technical data: IP address, browser type, pages visited, for security and fraud prevention.
How we use it
- To take payment, fulfil and deliver your order.
- To send order confirmations, dispatch updates and answer support questions.
- To manage your subscription if you have one.
- To send marketing emails – only if you opted in. You can unsubscribe at any time.
Legal bases (UK GDPR)
Contract (to fulfil your order), legitimate interest (to run the business and prevent fraud) and consent (for marketing email and non-essential cookies).
Who we share it with
- Stripe – to take payment.
- Our delivery partner – to ship your order.
- Our email and CRM tool (GoHighLevel) – to send transactional and (with consent) marketing email.
- Supabase – for secure data hosting in the EU.
How long we keep it
Order and accounting records: 6 years (UK tax law). Marketing data: until you unsubscribe. Account data: until you ask us to delete it.
Your rights
You can ask us to access, correct, delete or export your data, or to stop marketing. Email hello@rootandstalk.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We use a small set of strictly necessary cookies and local storage to run the site. We do not use analytics, advertising or tracking cookies.
- Cart – remembers what you've added so it's still there at checkout.
- Sign-in session – keeps you logged in to your account.
- Checkout – set by Stripe to process your payment securely.
- Cookie notice (
rs_consent_v1) – remembers you've seen this banner so we don't show it again.