Privacy policy

Last updated: 6 June 2026

This policy explains what personal information we collect, why we collect it, and what we do with it. We have tried to write it in plain English.

Who we are

RevitalRoots is a trading name of Kyriaco Charalambous, a sole trader based in the United Kingdom. Where this policy says “we” or “us”, it means RevitalRoots. For data protection purposes, we are the data controller for the personal information we hold about you.

We are registered with the Information Commissioner’s Office (ICO), the UK’s data protection regulator. Our registration reference is ZC167620.

You can contact us about anything in this policy at [hello@revitalroots.co.uk](mailto:hello@revitalroots.co.uk).

The information we collect

Depending on how you use our website, we may collect:

- Your name
- Your email address
- Your delivery and billing address
- Your phone number, if you give it to us
- Details of your orders and purchases
- Information about how you use our website, collected through cookies and similar technologies, such as the pages you visit and the device and browser you use

We collect most of this directly from you when you place an order, contact us, or sign up to our newsletter. Some technical information is collected automatically when you visit the site.

We do not knowingly collect special category data, such as information about health or ethnicity, and we do not ask for it.

Why we use your information, and our lawful basis

Under UK data protection law, we must have a lawful basis for using your personal information. We rely on the following:

- To process and deliver your orders, take payment, and provide customer service. Lawful basis: performance of a contract with you.
- To send you marketing emails, where you have signed up. Lawful basis: your consent. You can withdraw this at any time by clicking unsubscribe in any email, or by emailing us.
- To keep proper business and accounting records and meet our legal obligations, for example tax record-keeping. Lawful basis: legal obligation.
- To understand how our website is used and to keep it secure and working well. Lawful basis: our legitimate interests in running and improving our business, balanced against your rights.

Who we share your information with

We use a small number of trusted companies to help us run our business. They only access the information they need to do their job, and only on our instructions. These include:

- Our website and checkout platform, which hosts our store and processes orders
- Payment providers, who process your payment securely. We do not store your full card details
- Delivery and fulfilment partners, who use your name and address to send your order
- Our email marketing provider, who sends our newsletter to subscribers
- Analytics providers, who help us understand how the site is used

We may also share information if we are required to by law. We do not sell your personal information to anyone.

Storing your information outside the UK

Some of our providers may store or process information outside the United Kingdom. Where they do, we rely on safeguards approved under UK data protection law, such as the UK’s International Data Transfer Agreement or adequacy regulations, to keep your information protected.

How long we keep your information

We keep your information only for as long as we need it:

- Order and transaction records: up to seven years, to meet tax and accounting obligations
- Marketing data: until you unsubscribe or ask us to stop, after which we remove you from our list
- Website and analytics data: for a limited period, in line with the cookies and tools we use

When we no longer need your information, we delete it or make it anonymous.

Your rights

Under UK data protection law, you have the right to:

- Ask for a copy of the personal information we hold about you
- Ask us to correct information that is wrong or incomplete
- Ask us to delete your information, in certain circumstances
- Ask us to restrict or stop using your information, in certain circumstances
- Object to us using your information, in certain circumstances
- Ask us to transfer your information to another provider, in certain circumstances
- Withdraw your consent at any time, where we rely on consent

To exercise any of these rights, email us at [hello@revitalroots.co.uk](mailto:hello@revitalroots.co.uk). We will respond within one month, and there is usually no charge.

Cookies

Our website uses cookies and similar technologies. You can read more in our Cookie Policy.

Complaints

If you are unhappy with how we have handled your information, please contact us first at [hello@revitalroots.co.uk](mailto:hello@revitalroots.co.uk) so we can try to put it right. You also have the right to complain to the ICO:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk

Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of this page.