Privacy & Cookies Policy

We're a small family business and we treat your information the way we'd want ours treated. This policy explains what we collect, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). Last updated: July 2026.

Who we are

Roots & Vines, 12 West Street, Tavistock, Devon PL19 8AD, is the data controller for the personal information described in this policy. Contact us at hello@rootsandvines.co.uk or on 01822 616818.

What we collect and why

• Order information — your name, email, phone number, billing and delivery addresses, and details of what you've ordered. We need this to fulfil your order (legal basis: performance of a contract).
• Payment information — card payments are processed by Dojo, our payment provider. Card details go directly to Dojo; we never see or store your full card number. You can read Dojo's privacy policy at dojo.tech.
• Correspondence — emails, contact-form messages and phone notes, kept so we can help with your enquiry (legal basis: legitimate interests).
• Website usage — anonymous analytics data such as pages visited, device type and approximate location, via Google Analytics, used to improve the website (legal basis: legitimate interests / consent via your cookie settings).
• Marketing preferences — we'll only send you marketing emails if you've asked for them, and every one includes an unsubscribe link (legal basis: consent).

Who we share it with

We never sell your information, and we never share it with third parties for their own marketing. We share it only with the services that make the shop run:

• Dojo — payment processing
• Ecwid — our online shop platform, which stores order and account data
• Couriers — your name, delivery address, phone number and any delivery notes, so they can deliver your order
• Google Analytics — anonymous website usage data
• Professional advisers or authorities — only where we're legally required, or to protect our legal rights

International transfers

Some of our service providers (such as Ecwid and Google) may process data outside the UK. Where that happens, transfers are protected by UK-approved safeguards such as adequacy decisions or standard contractual clauses.

How long we keep it

• Order and payment records — 6 years, as required for tax and accounting purposes
• General correspondence — up to 2 years after our last contact
• Marketing details — until you unsubscribe or ask us to remove you

Your rights

Under UK GDPR you have the right to:

• Access a copy of the personal data we hold about you — free of charge
• Correct anything that's inaccurate
• Ask us to delete your data, where we no longer need it
• Object to or restrict our use of your data
• Receive your data in a portable format
• Withdraw consent at any time, for anything based on consent (such as marketing)

To exercise any of these, just email hello@rootsandvines.co.uk. We'll respond within one month. If you're unhappy with how we've handled your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk.

Cookies

Our website uses a small number of cookies:

• Essential cookies — set by our shop platform (Ecwid) so your basket and checkout work. These can't be switched off.
• Analytics cookies — set by Google Analytics to help us understand how the website is used. The data is aggregated and doesn't identify you personally.

You can block or delete cookies through your browser settings at any time — though blocking essential cookies may stop the online shop from working properly.

Contact us