Privacy Policy for Root and Petal Botanicals

Effective Date: 5 August 2025
Last Updated: 5 August 2025

Root and Petal Botanicals ("we", "our", or "us") is committed to protecting your privacy and ensuring your personal data is handled safely and responsibly. This Privacy Policy outlines how we collect, use, and protect your information when you visit our website, purchase products, or use our services.

​

1. Who We Are

Root and Petal Botanicals is a UK-based aromatherapy and wellness business offering handmade botanical products and holistic treatments.

Contact:
Email: info@rootandpetalbotanicals.co.uk
Address: Warrington, United Kingdom WA14JL

ICO certificate can be found on the ICO website.

​

2. What Information We Collect

We may collect and process the following types of personal data:

• Identity Data: Name, date of birth (if required for treatment), gender.

• Contact Data: Email address, postal address, phone number.

• Transaction Data: Details of products or services you’ve purchased.

• Technical Data: IP address, browser type, device information.

• Usage Data: Information about how you use our website or services.

• Health Information: Only if relevant to a treatment and with explicit consent.

3. How We Collect Your Data

We collect data in the following ways:

• When you fill out forms on our website.

• When you book a treatment or make a purchase.

• When you subscribe to our newsletter or mailing list.

• Automatically through cookies and analytics tools (e.g., website usage).

4. Why We Use Your Data

We only use your personal information when the law allows us to. This includes:

• To process orders and deliver products.

• To book and manage treatments.

• To respond to enquiries or provide customer support.

• To send you marketing communications (only with your consent).

• To comply with legal or regulatory obligations.

5. Lawful Basis for Processing

We process your personal data based on the following lawful grounds:

• Consent – for email marketing or collecting sensitive information (e.g. health details for aromatherapy treatments).

• Contract – to fulfil orders or treatment bookings.

• Legal Obligation – to maintain records for tax or insurance.

• Legitimate Interest – to improve our services and customer experience.

6. Marketing and Communication

You will only receive marketing communications from us if you have opted in. You can unsubscribe at any time by:

• Clicking the “unsubscribe” link in emails

• Contacting us directly

We never sell or share your data for marketing purposes.

7. How We Store and Protect Your Data

• Data is stored securely using encrypted devices, password protection, and secure platforms.

• Paper records (if any) are stored in locked cabinets and destroyed securely when no longer needed.

• We retain client records for a minimum of 10 years (for insurance/legal reasons), after which they are securely deleted or destroyed.

8. Cookies

Our website uses cookies to enhance your browsing experience and gather data about site traffic. You can disable cookies via your browser settings.

9. Your Rights

You have the right to:

• Access the personal data we hold about you.

• Request correction or deletion of your data.

• Object to or restrict certain types of processing.

• Withdraw consent at any time.

• Lodge a complaint with the ICO (www.ico.org.uk) if you believe your rights have been violated.

10. Third-Party Services

We use third-party providers (e.g., payment processors, booking software, website hosting) who may process your data. All providers are required to comply with UK GDPR standards and treat your data securely.

11. Changes to This Privacy Policy

We may update this policy from time to time. The most recent version will always be available on our website, with the date clearly shown.