Privacy policy
This policy explains how BRN Brands LLC ("Rootsy", "we", "us", "our") collects, uses and shares your personal data when you visit tryrootsy.com or buy from us. We are the data controller of that personal data.
BRN Brands LLC, 8200 NW 41st St, 2nd Floor, Doral, FL 33166, United States. Email: support@tryrootsy.com. Phone: +1 (505) 552-3130.
Personal data we collect
- Contact and order details: name, delivery and billing address, email address, phone number, products ordered and order history.
- Payment details: payment method and transaction confirmation. Card details are processed by our payment providers. We do not store full card numbers.
- Communications: emails and messages you send us, including photos you attach to a refund request.
- Device and usage data: IP address, browser and device type, pages viewed, items added to the basket, referring website and the date and time of your visit.
- Marketing preferences: whether you have subscribed to or unsubscribed from our emails.
How we use your data and our legal bases
| Purpose | Legal basis under UK GDPR |
|---|---|
| Processing, delivering and supporting your order, including refunds and returns | Performance of a contract |
| Answering your questions and requests | Performance of a contract; legitimate interests |
| Preventing fraud and keeping the site secure | Legitimate interests |
| Keeping tax and accounting records | Legal obligation |
| Sending marketing emails | Consent |
| Analytics and advertising cookies and pixels | Consent |
| Improving our site and products | Legitimate interests |
Cookies, pixels and similar technologies
We use cookies and similar technologies to run the site, remember your basket, measure how the site is used and show relevant advertising. Non-essential cookies are set only with your consent, which you give or refuse in the cookie banner. You can change your choice at any time in the banner settings or in your browser.
We use the following tools:
- Meta Pixel (Meta Platforms): measures and targets advertising on Facebook and Instagram.
- Google Analytics 4 (Google): measures site traffic and use.
- TikTok Pixel (TikTok): measures and targets advertising on TikTok.
- Klaviyo: sends and measures our marketing and order-related emails.
Who we share your data with
We share personal data only where needed, with:
- Shopify, which hosts our online shop and processes orders.
- Payment providers, which process your payment.
- Fulfilment and delivery partners, which prepare and deliver your order.
- Meta, Google, TikTok and Klaviyo, for the purposes described above.
- Professional advisers, and authorities where the law requires it.
We do not sell your personal data.
International transfers
We are based in the United States, and some of our service providers are located outside the United Kingdom. When personal data is transferred outside the UK, we rely on UK adequacy regulations or on appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep your data
We keep order records for as long as needed to meet tax, accounting and legal obligations, which is generally six years. Marketing data is kept until you unsubscribe or withdraw consent. Support messages are kept for as long as needed to resolve your request and handle any related claim.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing;
- object to direct marketing at any time.
To use any of these rights, email support@tryrootsy.com. We respond within one month.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to resolve your concern first.
Marketing emails
We send marketing emails only if you have subscribed. Every email has an unsubscribe link, and you can also ask us to remove you by emailing support@tryrootsy.com.
Children
Our site is not intended for anyone under 18, and we do not knowingly collect personal data from children.
Security
We use technical and organisational measures to protect your personal data. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
Changes to this policy
We may update this policy to reflect changes in our practices or in the law. The current version is always published on this page.