Privacy Policy

Privacy Policy for Root & Petal Home

We are staunchly committed to protecting and meticulously safeguarding the privacy, confidentiality, and security of personal information relating to our website visitors and service users. This commitment extends across all our operations, systems, and processes.

This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data. In this role, we are responsible for maintaining comprehensive oversight of how your personal information is collected, used, and protected throughout our systems.

We may process usage data (“usage data”), which comprehensively includes browser type, operating system, page views, navigation patterns, timing of visits, device information, and interaction metrics. This information is collected through automated tracking technologies, server logs, and analytics tools and may include time spent on specific pages, features accessed, and browsing patterns on rootandpetalhome.com. The source of this data is our analytics tracking system, user devices, and server monitoring tools. We process this information for several important purposes, including improving website performance, enhancing user experience, analyzing trends, and optimizing content delivery, which enables us to provide better service, personalize content, and maintain security. The legal basis for this processing is our legitimate interests in monitoring and improving our website and services.

We may process account data (“account data”), which comprehensively includes name, email address, telephone number, billing address, shipping address, and payment information. This information is collected through registration forms, checkout processes, and account settings updates and may include newsletter preferences, purchase history, and account settings. The source of this data is direct user input during account creation and subsequent interactions. We process this information for order fulfillment, communication purposes, account maintenance, and service delivery, which enables us to provide personalized services, process transactions, and maintain account security. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.

We may process profile data (“profile data”), which comprehensively includes preferences, interests, shopping history, wishlist items, and interaction history. This information is collected through user interactions, preference settings, and behavioral tracking and may include style preferences, saved items, and product interactions. The source of this data is your direct input and automated collection of interaction data. We process this information for personalizing user experience, providing recommendations, improving our services, and marketing purposes, which enables us to deliver relevant content, suggest products, and enhance user satisfaction. The legal basis for this processing is our legitimate interests in providing personalized services and marketing communications where permitted.

Your Rights

Right to Access
You have the right to access your personal data, which means you can request and receive a comprehensive copy of all personal information we hold about you. This includes the ability to receive confirmation of data processing, obtain copies of your data, and understand how your data is being used. To exercise this right, you can submit a written request through our dedicated data access portal or contact our privacy team at [email protected]. We will respond within 30 days and may require government-issued identification, proof of address, and account verification to verify your identity.

Right to Rectification
You have the right to rectification, which means you can request corrections or updates to any inaccurate or incomplete personal data we hold about you. This includes the ability to update contact information, correct account details, and modify personal preferences. To exercise this right, you can access your account settings directly or submit a correction request through our support channels. We will respond within 15 days and may require account verification, supporting documentation, and specific details about the information to be corrected.

Right to Erasure
You have the right to erasure (also known as the right to be forgotten), which means you can request the deletion of your personal data when it is no longer necessary for its original purpose. This includes the ability to delete your account, remove specific data points, and withdraw processing consent. To exercise this right, you can submit an erasure request through our privacy portal or contact our data protection team. We will respond within 30 days and may require password confirmation, identity verification, and explicit confirmation of deletion request.

Right to Restrict Processing
You have the right to restrict processing, which means you can limit how we use your personal data while maintaining storage of the information. This includes the ability to pause marketing communications, limit data usage, and temporarily suspend processing activities. To exercise this right, you can adjust your privacy settings or submit a restriction request through our dedicated form. We will respond within 15 days and may require account authentication, specific processing details, and reason for restriction.

Right to Data Portability
You have the right to data portability, which means you can receive your personal data in a structured, commonly used format and transmit it to another service provider. This includes the ability to download your data, transfer information between platforms, and receive data in machine-readable format. To exercise this right, you can request data export through our privacy dashboard or submit a portability request via email. We will respond within 30 days and may require account verification, specific data scope confirmation, and preferred format selection.Data Processing and Security Measures

At Root & Petal Home, we carefully process various types of personal data to provide you with our home and lifestyle services. Here’s how we handle your information:

We process Service Data which includes your account details, preferences, and interaction history with our platform. This processing involves automated collection and analysis, enabling us to personalize your experience and improve our services. For example, in the context of home, this includes tracking your favorite design styles, garden planning preferences, and sustainability interests. The legal basis for this processing is legitimate business interests and contract fulfillment, specifically to provide you with tailored content and services.

We process Technical Data which includes device information, IP addresses, browser details, and usage patterns. This processing involves automated logging and analysis, enabling us to optimize website performance and security. For example, in the context of home, this includes analyzing how users interact with our design galleries and DIY tutorials. The legal basis for this processing is legitimate interests, specifically to ensure proper website functionality and security.

We process Communication Data which includes email correspondence, chat logs, and customer service interactions. This processing involves storage and analysis of communications, enabling us to provide effective customer support and service improvements. For example, in the context of home, this includes maintaining records of design consultations and product inquiries. The legal basis for this processing is consent and legitimate interests, specifically to maintain quality customer service.

We process Transaction Data which includes purchase history, payment details, and shipping information. This processing involves secure storage and analysis, enabling us to process orders and improve our service offerings. For example, in the context of home, this includes tracking preferences for sustainable products and home decor items. The legal basis for this processing is contract fulfillment and legal obligations, specifically to complete transactions and maintain required records.

We process Preference Data which includes saved items, wishlists, and customization choices. This processing involves analysis and storage of your preferences, enabling us to provide personalized recommendations and experiences. For example, in the context of home, this includes remembering your preferred design styles and plant care preferences. The legal basis for this processing is consent and legitimate interests, specifically to enhance user experience.

Security Measures

To protect your data, we implement:
• Comprehensive encryption protocols with regular security assessments and penetration testing
• Multi-layered security infrastructure including advanced firewalls and intrusion detection systems
• Strict access controls through role-based permissions and multi-factor authentication
• Continuous monitoring systems with real-time threat detection
• Regular backup procedures with encrypted offsite storage
• Comprehensive staff security training and compliance protocols

International Transfers

We may transfer your personal data to countries outside your jurisdiction. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses, Privacy Shield certification, and Binding Corporate Rules. Each international transfer is conducted under strict protocols that ensure:
• Adequate data protection standards
• Compliant processing procedures
• Enforceable data subject rights
• Effective legal remedies

International transfers are protected by GDPR standards, ISO 27001 certification, and regional data protection regulations. We implement additional measures including:
• Regular compliance audits
• Data protection impact assessments
• Documented transfer mechanisms
• Continuous monitoring procedures

Regarding international transfers, you maintain specific rights including:
• Right to information about transfers
• Right to object to transfers
• Right to withdraw consent
• Right to data protection guarantees

Data Retention

We maintain specific retention periods for different data categories:

Account Information: 2 years after account closure to maintain service continuity
Usage Data: 12 months to analyze trends and improve services
Transaction Records: 7 years to comply with tax and financial regulations
Communication History: 3 years to maintain service quality and handle disputes
Technical Logs: 6 months for security and performance optimization

These retention periods are determined by:
• Legal requirements
• Business purposes
• Technical necessities
• User preferences

Special circumstances affecting retention include legal obligations, dispute resolution, and security investigations.

For more information about our data handling practices, please contact us at [email protected] Policy for Root & Petal Home

Essential cookies serve fundamental functions for our website’s core operations. These cookies process authentication data, security tokens, and session information to enable basic site functionality. For example, they remember your shopping cart contents while browsing our curated home decor collections and maintain your login status when accessing personalized features.

Essential cookies specifically manage:
– User authentication for secure account access
– Security measures to protect your browsing experience
– Basic site operations ensuring smooth navigation
– Session management for consistent user experience
– Technical stability across all pages

Functional cookies enhance your experience by remembering your preferences and customization choices. These cookies process interface settings and user choices to provide a tailored experience. For example, they remember your preferred language when browsing our home styling guides and maintain your display preferences for product galleries.

Analytics cookies help us understand how visitors interact with our content. They collect anonymous data about:
– Page interactions with our home decor guides
– Navigation patterns through our lifestyle content
– Feature usage across our design tools
– Session duration on inspiration galleries
– User preferences for different content types

Performance cookies assess and improve our website’s operation by monitoring technical aspects. These cookies track loading times, server response rates, and system performance metrics to ensure optimal content delivery. For example, they help us optimize image loading in our room styling galleries and ensure smooth video playback in our DIY tutorials.

Cookie Management
You can control your cookie preferences through your browser settings, our cookie consent banner, or your account privacy preferences. We respect your choices and provide clear options to manage your cookie experience.

GDPR Compliance
For our European Union visitors, we maintain strict data protection standards including explicit consent mechanisms, data minimization practices, and transparent processing procedures. We limit data collection to essential purposes and maintain clear storage limitations.

CCPA Compliance
California residents enjoy additional privacy rights, including the ability to request information about collected data, delete personal information, opt-out of data sales, and exercise their rights without discrimination. We ensure equal service quality regardless of privacy choices.

COPPA Compliance
We take special precautions regarding users under 13, implementing strict age verification, requiring parental consent for data collection, and maintaining limited data collection protocols. Parents have special access rights to review and manage their children’s information.

Updates and Changes
We regularly review and update our privacy practices, notifying users of significant changes and requesting renewed consent when necessary. Our commitment to privacy protection includes continuous compliance monitoring and clear documentation of policy updates.

Contact Information
For privacy-related inquiries:
– Primary Contact: [email protected]
– Response Time: Within 48 hours
– Verification Required: For data-related requests
– Available Support: Privacy concerns, data requests, rights exercise

This policy was created specifically for rootandpetalhome.com and covers all associated services within the home industry.