Privacy Policy & Cookie Notice

1. Who We Are

Root Labs ("we", "us", or "our") is a technology and educational platform operated from Ireland. We are committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

2. What Personal Data We Collect

3. How We Use Your Data

We use your personal data only for the following purposes:

• To respond to your enquiries submitted via the contact form
• To create and manage your user account
• To enable you to post comments and interact with the platform
• To improve the security and functionality of the website
• To comply with legal obligations

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties.

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following lawful grounds:

• Consent — for optional communications and non-essential cookies
• Contractual necessity — to provide account and platform services you have signed up for
• Legitimate interests — for security monitoring and platform improvement
• Legal obligation — where required by Irish or EU law

5. Data Retention

We retain your personal data only for as long as necessary:

• Contact form enquiries: up to 12 months, unless an ongoing relationship develops
• User account data: for the duration of your account, plus up to 12 months after deletion
• Comment content: retained for the life of the platform, unless you request removal
• Security and access logs: up to 90 days

6. Data Sharing

We do not sell or rent your personal data. We may share data with trusted third-party service providers solely to operate this website (e.g., hosting providers, email delivery services). All third parties are contractually required to handle your data in compliance with GDPR.

We may also disclose data if required by law or to protect the rights and safety of Root Labs or its users.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to correct inaccurate data
• Right to erasure — to request deletion of your data ("right to be forgotten")
• Right to restriction — to limit how we use your data
• Right to data portability — to receive your data in a machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — at any time where consent was the lawful basis

To exercise any of these rights, please contact us at: rootlabs@root-labs.net

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Passwords are stored using industry-standard hashing. Access to user data is restricted to authorised personnel only.

9. International Transfers

We aim to keep all data processing within the EEA. If any third-party service provider is located outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) before any transfer occurs.

10. Children's Privacy

Root Labs is an educational platform. If any services are directed at children under 16, we will obtain verifiable parental consent before collecting their personal data, in accordance with GDPR Article 8 and Irish law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. We encourage you to review this policy periodically.