Privacy Policy

Last updated: [02.01.2025]

At Roota, your privacy is important to us. This Privacy Policy outlines how we collect, use, and protect your personal information in accordance with applicable privacy laws, including the CCPA (USA), PIPEDA (Canada), GDPR (EU), UK GDPR, and the UAE Federal Data Protection Law No. 45 of 2021.

1. Personal Information We Collect

When you make a purchase or interact with our website, we may collect the following types of personal information:

Name, email address, shipping and billing addresses
Payment and transaction details (processed securely via Shopify)
IP address, device/browser data, geolocation, and analytics data
Marketing preferences (e.g., email newsletter subscriptions)

We may also collect data through cookies and tracking technologies (e.g., Google Analytics, Meta Pixel, Hotjar) to enhance your experience and optimize our website’s performance.

2. Why We Use Your Information

We use your personal data to:

Fulfill your orders and deliver products
Respond to your inquiries and provide customer support
Improve your shopping experience and website usability
Send marketing communications (with your consent)
Comply with legal obligations and fraud prevention

3. Legal Basis for Processing

Depending on your location, our processing of personal data may be based on:

Contractual necessity (e.g., fulfilling your purchase)
Consent (e.g., email marketing)
Legal compliance
Legitimate interests (e.g., improving our service)

4. Sharing Your Information

We share your information only with trusted third parties as necessary to operate our business:

Shopify (our ecommerce platform and data host)
Payment processors (who follow PCI-DSS standards)
Logistics and shipping providers
Marketing and analytics tools

If your data is transferred outside the European Economic Area (EEA), United Kingdom, or UAE, we ensure that such transfers are protected by appropriate safeguards. These may include Standard Contractual Clauses (SCCs) approved by the European Commission or other legally recognized mechanisms.

5. Data Security

We follow industry best practices to ensure your personal information is secure. Shopify uses encryption (SSL and AES-256) and complies with PCI-DSS standards.

While no system is 100% secure, we take reasonable measures to protect your data from loss, misuse, or unauthorized access.

6. Cookies and Tracking

We use cookies to:

Remember your session and shopping cart
Track site visits and performance
Offer a personalized experience

Visitors from the EU, UK, and UAE will be presented with a cookie consent banner in accordance with applicable laws (e.g., ePrivacy Directive, GDPR). This banner allows you to manage your cookie preferences. You may also adjust your browser settings to control or disable cookies at any time.

7. Your Rights

Depending on your location, you may have the right to:

Access, correct, or delete your personal data
Withdraw consent or object to processing
Request data portability (EU/UK)
File a complaint with a data protection authority
Opt-out of data sale (California residents)
Restrict the processing of your personal data
Lodge a complaint with your local data protection authority
Request human intervention for automated decision-making (if applicable)

To exercise your rights, please contact us at info@rootaglobal.com

8. Age of Consent

By using our site, you affirm that you are of legal age in your state/province or have given us consent to allow any minor dependent to use this site.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect upon posting to the website. We encourage you to review this page regularly.

If our store is acquired or merged, your information may be transferred to the new owners.

10. Contact Us

If you have any questions or requests related to your personal data, please contact our Privacy Compliance Officer: