Rootsworn

Privacy Policy

Last updated: September 3, 2026

1. What we collect

2. How we use it

3. What we don't do

We don't sell your personal data. We don't share it with anyone beyond the services that make the store work (Shopify for the store, checkout and payments — including PayPal and Shop Pay where you choose them; print partners for fulfillment; Cloudflare for hosting).

4. Your rights

Wherever you live — and especially under the EU/UK GDPR — you can ask us to access, correct, export or delete the personal data we hold about you. Email [email protected] and we'll respond within 30 days.

5. Cookies

We use only what the store needs to function: a cart identifier stored in your browser, and the cookies Shopify sets on the checkout and payment form to prevent fraud. Checkout stays on our own address, checkout.rootsworn.com — you are never handed off to a different company's web address — and it is operated for us by Shopify.

6. Retention & contact

Order records are kept as long as tax and consumer law require, then deleted. Questions about this policy: [email protected].