Privacy policy

Last updated: 01/04/2026

Your privacy is important to us, and we are committed to protecting your personal data and being transparent about how we use it.

---

1. Who We Are

Soulful Roots is a UK-based business offering wellbeing products, events, and retreats.

If you have any questions about this policy or your data, you can contact us at:

Email: Contact@SoulfulRoots.co.uk

---

2. What Information We Collect

We may collect and process the following data:

- Personal details: Name, billing/shipping address

- Contact information: Email address, phone number

- Order details: Purchases, payment information (processed securely via third-party providers)

- Technical data: IP address, browser type, device information

- Usage data: How you use our website

- Marketing preferences: Your preferences in receiving marketing from us

---

3. How We Use Your Information

We use your data to:

- Process and deliver your orders

- Manage payments and refunds

- Communicate with you about your order or enquiries

- Improve our website, products, and services

- Send marketing communications (if you opt in)

- Comply with legal obligations

---

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

- Contract: To fulfil your orders

- Consent: For marketing communications

- Legitimate interests: To improve our services and user experience

- Legal obligation: For accounting and regulatory compliance

---

5. Sharing Your Data

We only share your data when necessary, including with:

- Payment providers (e.g. Stripe, PayPal)

- Delivery companies (e.g. Royal Mail, couriers) --- Fulfilment partners: We may share your personal data (including name, delivery address, and order details) with trusted third-party fulfilment partners and suppliers for the purpose of order processing, packaging, and delivery

- Website and hosting providers

- Professional advisers (e.g. accountants)

We do not sell your personal data.

---

6. International Transfers

Some of our service providers may be based outside the UK. When this happens, we ensure your data is protected through appropriate safeguards.

---

7. Data Retention

We only keep your personal data for as long as necessary to:

- Fulfil the purposes we collected it for

- Meet legal, accounting, or reporting requirements

---