ROOT & FUEL LTD (company number SC866605), registered office 47 Craggan Drive, Glasgow, Scotland, G14 0EN, trading as "Root & Fuel" ("we", "us", "our"), is the data controller for personal data collected through https://www.rootandfuelltd.com. We are committed to protecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What we collect
When you order, enquire about catering, or contact us, we may collect:
- Name, email address, phone number and delivery/postal address
- Order details — items, delivery date, promo codes used
- Catering enquiry details — event date, guest count, dietary requirements
- Payment information, processed directly by our payment provider, Stripe (we do not store card details ourselves)
- Messages you send us through our contact or enquiry forms
How we use your data
- To fulfil and deliver your order
- To respond to catering enquiries and contact-form messages
- To send order confirmations, delivery updates and — where you've ordered from us — an occasional review request
- To prevent abuse of promotional discount codes
- To meet our legal and accounting obligations
Who we share it with
We use the following third-party processors to run our service. Each only receives the data it needs to do its job:
- Stripe — payment processing
- Resend — transactional email delivery (order confirmations, enquiry notifications)
- Vercel — website hosting, order storage and privacy-friendly, cookieless analytics
- OpenStreetMap (Nominatim) — checking delivery addresses fall within our delivery area
- Google Sheets — internal logging of catering enquiries
We do not sell your personal data.
Cookies
Our website analytics (Vercel Web Analytics) is cookieless — it does not set tracking cookies or use persistent identifiers. Where we ever introduce cookies that aren't strictly necessary for the site to function, we will ask for your consent first via the cookie banner.
How long we keep your data
We keep order records for as long as necessary to meet our accounting and tax obligations (normally 6 years), and contact-form/catering enquiries for as long as needed to respond to and resolve them.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data, where we're not required to keep it
- Object to or restrict certain processing
- Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk
Contact us
For any privacy question or to exercise your rights, email samanthahamilton@rootandfuelltd.com or use our contact form.