Privacy Policy
Last updated: March 2026
Who We Are
Roots & Rights CIC is a Community Interest Company registered in England and Wales. We provide independent advocacy, assurance, and consultancy services for the public sector.
Data Controller
Roots & Rights CIC
86-90 Paul Street, London, EC2A 4NE
Email: hello@rootsandrights.org.uk
What Data We Collect
We collect minimal personal data. When you use our contact form, we may collect:
- Your name
- Your email address
- The content of your message
We do not collect any special category data, nor do we require you to create an account to use our website.
How We Use Your Data
We use the information you provide solely to respond to your enquiry. Our lawful basis for processing this data is legitimate interest — specifically, our interest in responding to people who contact us about our services.
We will never:
- Send you marketing communications unless you explicitly opt in
- Sell, rent, or share your personal data with third parties for their marketing purposes
- Use your data for automated decision-making or profiling
Cookies
Our website uses only essential cookies required for the site to function correctly (such as session and security cookies). We do not currently use any analytics, tracking, or advertising cookies.
For more detail, please see our Cookie Policy.
Third Parties
We do not currently share your personal data with any third parties. Our website is hosted via Cloudflare, which may process certain technical data (such as IP addresses) as part of delivering the site. Cloudflare acts as a data processor on our behalf.
Data Retention
Contact form enquiries and associated personal data are retained for up to 2 years from the date of your enquiry, after which they are securely deleted. If an ongoing relationship is established, we will inform you of any extended retention periods.
Your Rights
Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data where there is no compelling reason to continue processing.
Right to Restrict Processing
Request that we limit how we use your data in certain circumstances.
Right to Data Portability
Request transfer of your data in a structured, machine-readable format.
Right to Object
Object to our processing of your data based on legitimate interest.
To exercise any of these rights, please contact us at hello@rootsandrights.org.uk. We will respond within one month.
Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.