Privacy

This privacy policy explains how Rooted Wealth (“we”, “us”, “our”) collects, uses and protects your personal data when you visit this website or get in touch with us. Rooted Wealth is operated by Laura Duffield, based in the United Kingdom.

We process personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

Who we are (data controller)

For the purposes of data protection law, the data controller is:

Laura Duffield, trading as Rooted Wealth Email: hello@rootedwealth.co.uk

If you have any questions about this policy or how your personal data is handled, please contact us at the address above.

What personal data we collect

We keep data collection to a minimum. Depending on how you interact with us, we may collect:

  • Contact details — your name and email address, and anything you include in a message when you contact us through the website, by email or via WhatsApp.
  • Coaching enquiry information — information you choose to share with us when enquiring about or arranging coaching, such as your goals and circumstances.
  • Technical data — basic technical information collected automatically when you visit the website, such as your IP address, browser type and pages visited. This is standard server log data generated by our hosting provider.

We do not knowingly collect any special category (sensitive) data through this website. If you share such information with us in the course of coaching enquiries, we will only use it to respond to you.

How and why we use your data

We only use your personal data where we have a lawful basis to do so:

  • To respond to your enquiries and messages — because it is in our legitimate interests to respond to people who contact us, or to take steps at your request before entering into a coaching agreement.
  • To provide coaching services — where necessary to perform a contract with you.
  • To operate and secure the website — because it is in our legitimate interests to keep the website available, safe and working properly.
  • To send you our newsletter — only with your consent, which you give by subscribing via Substack. You can withdraw consent and unsubscribe at any time using the link in every email.
  • To comply with legal obligations — for example keeping records we are required to keep by law.

We do not use your personal data for automated decision-making or profiling, and we do not sell your personal data.

Cookies and analytics

This website is a simple, static site. We do not set advertising or tracking cookies, and we do not run third-party analytics on this site. If this changes in the future, we will update this policy and, where required by the Privacy and Electronic Communications Regulations (“PECR”), ask for your consent first.

Third-party services

We use a small number of trusted third-party services, which may process your personal data on our behalf or as independent controllers:

  • Substack — our blog and newsletter are hosted on Substack. If you subscribe, your email address is processed by Substack under its own privacy policy.
  • WhatsApp — if you contact us via the WhatsApp link on this site, your communication is processed by WhatsApp (Meta) under its own privacy policy.
  • Website hosting — our hosting provider processes technical data (such as server logs) needed to deliver the website to you.

We also link to social media platforms such as Instagram and LinkedIn. This policy does not apply to those platforms — please review their own privacy policies.

International transfers

Some of our service providers (such as Substack) are based outside the United Kingdom. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep your data

We keep personal data only for as long as necessary for the purposes described above:

  • Enquiries that do not lead to coaching are kept for up to 12 months, then deleted.
  • Records relating to coaching clients are kept for the duration of our work together and for up to 6 years afterwards, in line with legal and accounting requirements.
  • Newsletter data is kept until you unsubscribe.

Your rights

Under the UK GDPR you have the following rights in relation to your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your data in certain circumstances.
  • Restriction — ask us to limit how we use your data in certain circumstances.
  • Portability — receive your data in a structured, commonly used format.
  • Objection — object to processing based on our legitimate interests, and to any direct marketing at any time.
  • Withdraw consent — where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, contact us at hello@rootedwealth.co.uk. We will respond within one month. Exercising these rights is free of charge.

Children

This website and our services are aimed at adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF ico.org.uk · Helpline: 0303 123 1113

Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, with the date above updated accordingly.