Privacy policy
Privacy Policy
At Ergoroot (“we”, “our”, “us”), accessible at https://ergoroot.com, we are committed to protecting your privacy and handling your personal data responsibly and transparently, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
We may collect and process the following personal information:
-
Name
-
Email address
-
Phone number
-
Billing and shipping address
-
Payment details (processed securely via third-party payment providers)
-
Order history and product preferences
-
IP address, browser type, device information, and usage data
2. How We Use Your Information
We use your information to:
-
Process and fulfil orders
-
Deliver products and services
-
Communicate about orders, returns, and support requests
-
Improve our website, products, and customer experience
-
Send marketing communications (only where consent has been given)
-
Comply with legal and regulatory obligations
3. Legal Basis for Processing (UK GDPR)
We process your personal data under the following legal bases:
-
Contractual necessity – to fulfil your orders
-
Legitimate interests – to improve services and prevent fraud
-
Legal obligation – to comply with UK laws
-
Consent – for marketing communications (you may withdraw consent at any time)
4. Sharing Your Information
We do not sell your personal data.
We may share your data with trusted third parties only where necessary, including:
-
Payment processors
-
Shipping and logistics partners
-
Website hosting and analytics providers
-
Legal or regulatory authorities when required by law
All third parties are required to protect your data and use it only for the intended purpose.
5. International Data Transfers
If your data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections, to keep your data secure.
6. Data Retention
We retain personal data only for as long as necessary to:
-
Fulfil the purposes outlined in this policy
-
Meet legal, accounting, or reporting requirements
7. Your Rights Under UK GDPR
You have the right to:
-
Access your personal data
-
Request correction of inaccurate data
-
Request deletion of your data
-
Object to or restrict processing
-
Request data portability
-
Withdraw consent at any time
-
Lodge a complaint with the Information Commissioner’s Office (ICO)
8. Cookies
We use cookies and similar technologies to enhance website functionality and analyse usage.
You can manage or disable cookies through your browser settings.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
12. Policy Updates
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.