This policy explains how Roots of Eagle (“we”, “us”) collects and uses your personal data when you visit our website or place an order. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable local law.
Data we collect
- Contact and delivery details: name, email address, phone number and shipping address.
- Account details: email address and a securely hashed password (we never store your password in plain text).
- Order details: products purchased, amounts, payment method and payment status.
- Technical data: IP address used for security purposes such as preventing abuse and fraud.
Why we use your data
- To process, deliver and support your orders (performance of a contract).
- To send transactional emails such as account verification and order confirmations.
- To protect our store against fraud and abuse (legitimate interest).
- To meet accounting and tax obligations (legal obligation).
Who we share it with
We share only the data necessary with service providers that help us run the store: our hosting provider, our database provider, our email delivery provider and the courier delivering your parcel. We do not sell your personal data.
Cookies
We use only strictly necessary cookies to keep you signed in and to keep the site secure. Your shopping bag is stored locally in your browser. We do not use advertising or tracking cookies.
How long we keep it
Order records are kept for as long as required by accounting and tax law. Account data is kept until you ask us to delete your account.
Your rights
You have the right to access, correct, delete or export your personal data, and to object to or restrict its processing. You may also lodge a complaint with your local data protection authority. To exercise your rights, contact support@rootsofeagle.com.