Last updated: September 2026
Privacy Policy
Rooted (trading as Rooted, operated by Carving Community CIC) is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and your rights under UK data protection law.
Who we are
Rooted is operated by Carving Community CIC, based in Exeter, Devon. We run immersive woodcarving experiences at St Nicholas Priory, Exeter. For data protection purposes, Carving Community CIC is the data controller. If you have any questions about this policy, please contact us at hello@therooted.work.
Information we collect
We collect information you provide directly when you make a booking, submit an enquiry, or contact us. This includes your name, email address, and any message you send us. When you make a payment, your card details are processed securely by Stripe and are never stored on our servers. We may also collect basic technical information such as your IP address and browser type through our website hosting provider.
How we use your information
We use your information to process bookings and payments, respond to enquiries, send you confirmation and joining information for events you have booked, and occasionally to let you know about future dates if you have indicated you would like to hear from us. We do not use your information for automated decision-making or profiling, and we do not sell your data to third parties.
Legal basis for processing
We process your personal data on the basis of contract (to fulfil your booking), legitimate interests (to respond to enquiries and improve our service), and, where applicable, your consent (for marketing communications). You may withdraw consent at any time by contacting us.
Third parties
We use Stripe to process payments securely. Stripe's privacy policy is available at stripe.com/gb/privacy. Our website is hosted by GoDaddy. We do not share your personal data with any other third parties except where required by law.
How long we keep your data
We retain booking and payment records for seven years in line with HMRC requirements. Enquiry correspondence is kept for up to two years. You may request deletion of your data at any time, subject to our legal obligations.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, request correction of inaccurate data, request erasure of your data, object to or restrict processing, and request data portability. To exercise any of these rights, please contact us at hello@therooted.work. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
Our website uses essential cookies required for the site to function. We do not currently use tracking or advertising cookies. If this changes, we will update this policy and seek your consent where required.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of our website after changes are posted constitutes acceptance of the updated policy.