Privacy Policy

At Rug&Root (“we,” “us,” or “our”), your privacy is our priority. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or make a purchase from our website, RugandRoot.com (the “Site”). By using the Site, you agree to the practices outlined in this Privacy Policy.

1. Information We Collect

At Rug&Root, we gather certain personal information to provide you with an optimal browsing and shopping experience. The types of personal data we collect fall into two categories: information you provide directly to us and information we collect automatically.

1.1 Personal Information You Provide Directly

We collect personal data that you voluntarily provide when interacting with our Site in various ways. This includes, but is not limited to:

Contact Information: We collect details such as your name, email address, phone number, and billing/shipping address when you create an account, place an order, or subscribe to our newsletter. This information is necessary for us to process your orders, communicate with you, and deliver products.
Payment Information: When you make a purchase, we collect your payment details, such as credit card numbers or other payment method details, through secure, third-party payment processors. We do not store your full payment information on our servers; our payment providers handle this securely.
Account Information: If you choose to create an account on our Site, we will collect your username, password, and any other profile details you provide. This enables you to log in and access your order history, manage preferences, and enjoy a personalized experience.
Communication Data: We collect information from you when you contact us directly, such as through email, live chat, or contact forms on the Site. This may include your name, email address, and the content of your communication. This data is used to respond to your inquiries, provide customer support, and improve our services.

1.2 Automatically Collected Information

In addition to the personal data you provide, we also collect certain information automatically when you interact with our Site. This data helps us improve the functionality and security of our website and provide you with a seamless user experience.

Device Information: When you visit RugandRoot.com, we automatically collect data about the device you are using. This includes details like your IP address (used to identify your location), the type of device (such as mobile or desktop), the browser you are using (such as Chrome, Firefox, etc.), and your operating system (Windows, macOS, Android, etc.). This information helps us optimize the Site for your specific device and ensure compatibility.
Browsing Information: As you navigate through the Site, we collect information about your browsing behavior. This includes the pages you view, the links you click, the time spent on each page, and any search terms or products you explore. This data allows us to improve the layout, design, and functionality of the Site, and to provide personalized product recommendations.
Referral Information: We collect data on how you arrived at our Site, including the website, search engine, or advertisement that referred you. This helps us understand how our customers find us and allows us to improve our marketing strategies.
Cookies and Tracking Technologies: We use cookies and similar technologies (such as web beacons and pixels) to collect data about your interactions with our Site. Cookies are small data files stored on your device that allow us to remember your preferences (such as language settings or items left in your shopping cart) and provide a tailored experience. They also help us gather statistical data, such as the number of visitors to the Site, how users navigate the pages, and the effectiveness of our marketing campaigns.
- You can manage or disable cookies through your browser settings. However, please note that disabling cookies may limit certain features of the Site, such as saving your shopping cart or providing personalized content.

2. How We Use Your Information

At Rug&Root, we value your privacy and ensure that the personal information we collect is used only for necessary and legitimate purposes. Below is a detailed explanation of how we use your information and why it is essential for the proper functioning of our website and services.

To Process Transactions:

When you make a purchase on our Site, we use your personal data, such as your name, contact information, and payment details, to facilitate the transaction. This includes:
- Processing Payments: Your payment information, such as credit card details or payment account data, is securely processed through third-party payment processors. We don’t store your full payment details, but we use this data to verify and complete the transaction.
- Order Fulfillment: Once a payment is confirmed, we use your shipping information (such as your address) to ensure that your order is delivered to the right place.
- Customer Support: If there are any issues with your order, such as delays in shipping or questions about products, we use your contact information to reach out to you and resolve the issue efficiently.
By collecting and using this information, we ensure that your purchase journey is smooth and that we can deliver the products you’ve ordered.
To Improve Your Experience:
We use information about your device and browsing habits to customize your experience on the Site. For example:
- Personalized Recommendations: By analyzing what products you’ve viewed or purchased, we can recommend similar items that you may be interested in. This enhances your shopping experience by showing you relevant products and offers.
- Optimized Website Functionality: By understanding how you navigate the Site—such as which pages you visit, how long you spend on each page, or what links you click—we can make improvements to the layout, design, and overall usability of the Site. This helps us create a more intuitive and user-friendly experience for all visitors.
- Saved Preferences: We use cookies and similar tracking technologies to remember your preferences (e.g., language settings, products in your shopping cart). This means you won’t have to re-enter these details each time you visit the Site, making your experience more convenient.
Using this data allows us to continually refine and improve our website, ensuring that it meets your needs and expectations.
To Communicate With You:
We use the contact information you provide, such as your email address, to keep you informed about your orders and other relevant updates. This includes:
- Order Confirmations and Updates: After placing an order, you will receive an email confirmation to verify that we’ve received your purchase. As your order is processed and shipped, we send you updates, including tracking information, so you know when to expect delivery.
- Promotional Emails: If you’ve subscribed to our newsletter or opted in to receive marketing communications, we will use your email address to send you promotional materials, special offers, or information about new products. You can opt out of these emails at any time.
- Responding to Inquiries: If you reach out to us with questions about products, shipping, returns, or any other issue, we use your contact details to respond to your inquiry and provide support.
This ensures that you are always informed about the status of your interactions with Rug&Root and that we can address any questions or concerns you may have.
For Security and Fraud Prevention:
We take the security of our Site and your personal data very seriously. To protect against fraud, unauthorized access, and other potential threats, we use your information in the following ways:
- Detecting Fraud: By monitoring activity on our Site, such as the IP address used to make purchases or unusual patterns of activity, we can identify and block fraudulent transactions before they occur.
- Protecting Against Unauthorized Access: We use device information and security tools to safeguard the Site from hackers or unauthorized users attempting to gain access to sensitive data.
- Maintaining Website Security: We regularly analyze data to ensure the Site remains secure, including by patching vulnerabilities and enhancing security features.
By using this information, we aim to provide a safe and secure shopping environment for all of our customers.

3. Sharing Your Information

At Rug&Root, we prioritize the privacy of our customers and do not sell or trade your personal information for any purpose. However, in order to provide you with seamless services and a positive shopping experience, we may share your personal data with trusted third-party service providers. These third parties are only allowed to use your information for specific tasks that help us run our business efficiently, and they are required to protect your data under strict confidentiality agreements.3.1 Payment Processors

When you make a purchase on our Site, your payment details are processed securely through third-party payment providers, such as PayPal, Stripe, or other payment gateways. These processors handle your financial information directly and ensure that transactions are completed securely. Rug&Root does not store full payment details (e.g., credit card numbers) on our servers.

Why we share this data: To facilitate secure transactions and ensure that your payment is processed efficiently and securely.
Data shared: Payment details, transaction amount, and contact information.

3.2 Shipping Providers:

To fulfill your order and deliver products to your specified address, we share relevant information with our shipping and logistics partners. This includes companies like UPS, FedEx, DHL, or other courier services.

Why we share this data: To ensure that your order is shipped and delivered to the correct location in a timely manner.
Data shared: Name, shipping address, contact phone number, and order details.

3.3 Marketing Platforms:

If you have opted into receiving newsletters or promotional materials, we may share your email address with trusted marketing platforms (such as Mailchimp or other email marketing services) to send you product updates, special offers, or other marketing communications. You can opt out of these communications at any time.

Why we share this data: To keep you informed about our latest products, services, and exclusive offers.
Data shared: Email address, and sometimes preferences or purchase history (for targeted email marketing).

3.4 Analytics Providers:

We use analytics tools such as Google Analytics or similar services to gather insights on how visitors interact with our Site. These third-party providers help us understand how users navigate the Site, which products are most viewed, and which areas may need improvement.

Why we share this data: To improve our website’s performance, enhance the user experience, and make informed business decisions based on customer behavior.
Data shared: Device and browsing information (such as IP address, browser type, pages viewed, and time spent on the Site). No personal identification is associated with this data.

3.5 Compliance with Legal Obligations:

In certain situations, we may be required to share your personal data to comply with applicable laws, regulations, or legal requests (such as a court order, subpoena, or government inquiry). We may also disclose information if we believe it is necessary to protect the rights, property, or safety of Rug&Root, our customers, or others.

Why we share this data: To comply with legal requirements or to protect the safety of individuals.
Data shared: Information requested by law enforcement or legal authorities, limited to what is necessary for compliance.

3.6 Strict Confidentiality Obligations:

We ensure that all third-party service providers we work with are subject to strict confidentiality agreements. These agreements ensure that your personal data is used solely for the purpose of providing the specific service and is protected from unauthorized access or misuse. Our third-party partners are prohibited from using your information for any purpose other than the one it was provided for.

What this means for you: Your data is only shared with third parties who need it to perform specific services for Rug&Root (such as processing payments or delivering orders) and they are legally required to protect your data.

4. Data Security

At Rug&Root, the security of your personal information is a top priority. We take comprehensive steps to ensure that your data is safeguarded against unauthorized access, loss, misuse, or alteration. Our security measures are designed to protect your personal data throughout the entire process—during collection, transmission, and storage.

4.1 Technical Measures:

We implement a range of robust technical measures to protect your data, including:

Encryption: We use industry-standard encryption protocols (such as SSL/TLS) to ensure that sensitive information, such as payment details and personal data, is securely transmitted between your device and our servers. This encryption makes it difficult for unauthorized parties to intercept and access your information.
Firewalls: Our systems are protected by advanced firewalls that create a barrier between our servers and potential unauthorized access attempts from the outside. This helps prevent malicious attacks and ensures that your data remains secure.
Secure Servers: All personal information you provide is stored on secure servers, which are equipped with access controls and monitoring tools to prevent unauthorized access or breaches.

4.2 Organizational Measures:

In addition to technical safeguards, we implement organizational measures to protect your personal data:

Access Control: Only authorized personnel within our organization and our trusted service providers are granted access to your personal data. These individuals are required to adhere to strict confidentiality agreements and follow security protocols.
Training and Awareness: Our staff is regularly trained on the importance of data security and privacy protection to ensure they handle personal data responsibly and in accordance with legal requirements.
Regular Audits: We conduct regular security audits and assessments to identify and address potential vulnerabilities in our systems, ensuring that our security measures remain effective.

4.3 Your Responsibility:

While we are committed to maintaining the security of your data, it is also important for you to take certain precautions to protect your personal information:

Account Credentials: You are responsible for maintaining the confidentiality of your account username and password. Please make sure to choose a strong password and do not share it with others. We recommend changing your password periodically to enhance security.
Suspicious Activity: If you suspect any unauthorized access or activity on your account, please contact us immediately at contact@rugandroot.com so that we can investigate and take appropriate action.

4.4 Limitations of Data Transmission:

Although we take strong security measures to protect your personal information, it is important to understand that no method of transmitting data over the internet or storing data electronically can be completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

What this means for you: Although we make every effort to protect your personal data, any transmission of information over the internet carries some inherent risks. By using our Site, you acknowledge and accept these risks.

4.5 Data Breach Notification:

In the unlikely event of a data breach that compromises your personal information, we are committed to complying with all applicable legal obligations, including notifying affected individuals and authorities (where required) promptly. We will provide you with clear information on what occurred, what data was affected, and what steps we are taking to mitigate the impact of the breach.

5. Data Retention

At Rug&Root, we only retain your personal information for as long as it is necessary to fulfill the specific purposes for which it was collected. This includes using your data to provide services such as processing transactions, delivering products, responding to inquiries, and complying with legal, regulatory, or contractual obligations.

5.1 Retention Period:

We retain different types of data for different periods of time based on the purpose of collection:

Transaction Data: Information related to your purchases, such as billing and shipping details, will be retained for as long as necessary to process your order, ensure delivery, and provide customer support. We may also retain this information to comply with legal or tax obligations (e.g., accounting and auditing records).
Account Data: If you have created an account on our Site, we will retain your account information, including your username, password, and purchase history, for as long as your account remains active. You can request account deletion at any time, but please note that some data (e.g., purchase records) may need to be retained for legal or compliance reasons.
Marketing Data: If you have opted into receiving promotional emails or newsletters, we will retain your email address and communication preferences until you choose to unsubscribe or request the deletion of your data.
Communication Data: Any correspondence between you and Rug&Root (such as emails, chat logs, or inquiry forms) will be retained for as long as necessary to address your questions, provide support, and improve our services.

5.2 Legal, Regulatory, and Compliance Obligations:

In some cases, we may be required to retain your personal information for a longer period of time in order to meet our legal, regulatory, or compliance obligations. This may include situations such as:

Compliance with Tax Laws: Retaining transaction and financial records for audit purposes.
Legal Claims: Retaining data as evidence in the event of disputes or legal claims.
Fraud Prevention: Retaining information related to fraudulent activity or suspected breaches to protect against future risks.

5.3 Requesting Data Deletion:

You have the right to request that we delete your personal information when it is no longer needed for the purposes for which it was collected. You may request the deletion of your data by contacting us at contact@rugandroot.com. However, please be aware that in some cases, we may be legally obligated to retain certain information, even after a deletion request, to comply with applicable laws, fulfill our contractual obligations, or protect our legitimate business interests (such as fraud prevention).

What this means for you: While we are committed to respecting your privacy and rights, we may need to retain certain personal data to meet legal requirements. We will inform you of any such requirements if you request data deletion.

5.4 Anonymized Data:

Once your personal information is no longer needed, we may anonymize certain data for statistical or analytical purposes. Anonymized data cannot be linked back to you, and we may retain it indefinitely to help us improve our services and understand user behavior.

6. Your Rights

At Rug&Root, we are committed to respecting and protecting your privacy. If you are a resident of the European Union (EU) or other regions with data protection laws, such as under the General Data Protection Regulation (GDPR) or similar legislation, you have specific rights regarding your personal data. These rights empower you to control how your data is used and to ensure that it is processed lawfully and transparently.

6.1 Right of Access

You have the right to request access to the personal data we hold about you. This includes the right to ask us for:

A confirmation that we are processing your personal data.
A copy of the personal data we have collected about you.
Information about how we use your data, the purposes for which it is processed, and with whom it is shared.

This allows you to understand how your information is being handled and verify that it is being processed lawfully.

6.2 Right to Rectification

If you believe that any of the personal data we hold about you is inaccurate or incomplete, you have the right to request corrections. We will make reasonable efforts to rectify any incorrect or outdated information, ensuring that the data we hold about you is accurate and up-to-date.

Example: If your contact details change or if there is an error in your recorded information, you can request that we update it accordingly.

6.3 Right to Erasure (Right to be Forgotten)

You can request the deletion of your personal data in certain circumstances, including:

If the data is no longer necessary for the purposes for which it was collected.
If you withdraw your consent and there is no other legal ground for processing your data.
If you object to the processing, and there are no overriding legitimate grounds for continuing.
If the data has been unlawfully processed.
If the data must be erased to comply with a legal obligation.

However, please note that we may retain certain information as required by law, such as for tax or regulatory reasons, even after a request for erasure.

6.4 Right to Restriction of Processing

You have the right to request that we temporarily suspend the processing of your personal data in certain situations, including:

When you contest the accuracy of your data, for the period it takes us to verify its accuracy.
If the processing is unlawful, but you do not want your data erased.
When we no longer need the data for its original purpose, but you require us to retain it for the establishment, exercise, or defense of legal claims.
When you have objected to the processing and we are evaluating whether our legitimate grounds override yours.

While processing is restricted, we will not use your personal data for any other purpose except where legally permitted.

6.5 Right to Data Portability

You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format (e.g., CSV file) and, where technically feasible, to have that data transmitted directly to another data controller (such as another service provider).

This right applies when the processing of your data is based on your consent or a contract, and the processing is carried out by automated means.

6.6 Right to Object

You have the right to object to the processing of your personal data in certain circumstances:

Direct Marketing: You can object at any time to the processing of your data for direct marketing purposes. Once you object, we will cease all marketing-related activities toward you.
Legitimate Interests: If the processing of your data is based on our legitimate interests or public interest, you may object to it. We will evaluate your objection and stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

6.7 Rights in Relation to Automated Decision-Making and Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you. We will only carry out automated decision-making in accordance with applicable laws and will provide you with the necessary information about the logic involved, as well as the significance and consequences of such processing.

6.8 How to Exercise Your Rights

If you wish to exercise any of these rights, please contact us at contact@rugandroot.com. When submitting your request, please include the following information:

Your full name.
The email address associated with your account or transaction.
A detailed description of your request (e.g., data access, rectification, erasure).

We will respond to your request as soon as possible, typically within 30 days, in accordance with applicable legal requirements. In some cases, we may need to verify your identity before processing your request to ensure the security of your personal data.

7. Cookies and Tracking Technologies

At Rug&Root, we use cookies and similar tracking technologies to improve your browsing experience, analyze website performance, and provide you with personalized content. Cookies are small data files that are placed on your device (computer, tablet, or mobile) when you visit our Site. These cookies store information about your interactions with the website, which helps us tailor our services to better meet your needs.

7.1 Types of Cookies We Use

We use various types of cookies, each serving a specific purpose:

Essential Cookies: These cookies are necessary for the proper functioning of our Site. They enable you to navigate the website and use features such as secure areas, shopping carts, and account login. Without these cookies, certain services you have requested, such as order processing, cannot be provided.
Performance and Analytics Cookies: These cookies allow us to gather information about how visitors use our Site, such as which pages are most popular, how long users stay on the Site, and what features are accessed most frequently. This helps us understand how visitors interact with the website and enables us to improve its functionality and performance.
Functional Cookies: These cookies help us remember your preferences and choices, such as your language settings or items left in your shopping cart. By using these cookies, we can enhance your browsing experience, making the website more convenient to use.
Targeting and Advertising Cookies: These cookies are used to deliver personalized ads that are more relevant to your interests. They may track your browsing behavior across different websites to display targeted ads based on your preferences. For instance, if you view certain types of products on our Site, these cookies may show you related ads on other websites. These cookies may also help limit the number of times you see the same advertisement.

7.2 How We Use Cookies and Tracking Technologies

Enhance User Experience: Cookies allow us to remember your preferences (such as language settings, currency preferences, and login information) to make your experience more seamless and personalized. For example, if you add items to your shopping cart but don’t complete the purchase, cookies help us save those items for your next visit.
Track Website Usage: We use cookies to track how users interact with our Site. This includes monitoring website traffic, the duration of visits, and the pages or products viewed. This data helps us identify trends, improve the design of our Site, and enhance overall performance.
Target Advertising: Cookies enable us to show you personalized ads based on your browsing history and preferences. We may partner with third-party advertisers who use these cookies to display relevant ads to you when you visit other websites. This ensures that the ads you see are more aligned with your interests.

7.3 Third-Party Cookies

In addition to our own cookies, we also work with third-party service providers who use cookies and tracking technologies to help us:

Analyze website traffic and user behavior (e.g., Google Analytics).
Deliver personalized advertising (e.g., Google Ads, Facebook Ads).
Integrate social media features (e.g., Facebook Like or Share buttons).

These third-party cookies are subject to the privacy policies of their respective providers, and we encourage you to review those policies to understand how they handle your data.

7.4 Managing Your Cookie Preferences

You have control over how cookies are used on your device. You can manage, block, or delete cookies by adjusting the settings in your web browser. Here’s how you can manage cookies in popular browsers:

Google Chrome: Go to Settings > Privacy and Security > Cookies and other site data.
Mozilla Firefox: Go to Preferences > Privacy & Security > Cookies and Site Data.
Safari: Go to Preferences > Privacy > Cookies and Website Data.
Microsoft Edge: Go to Settings > Site Permissions > Cookies and Site Data.

You can choose to block certain cookies or delete cookies that have already been stored. However, please note that disabling cookies may affect the functionality of our Site and limit your ability to use some features. For example, if you block essential cookies, you may not be able to log in, use the shopping cart, or complete a purchase.

7.5 Consent for Cookies

By continuing to use RugandRoot.com, you agree to the use of cookies in accordance with this Privacy Policy. You will be notified of our use of cookies when you first visit the Site, and you can choose to accept or manage your cookie preferences.

7.6 Do Not Track (DNT) Signals

Some web browsers offer a "Do Not Track" feature that lets you indicate your preference not to have your online activity tracked. Our website does not currently respond to DNT signals. However, you can manage your cookie preferences as described above.

8. Third-Party Links

Our website, Rug&Root, may contain links to third-party websites or services that are not operated or controlled by us. These links are provided for your convenience and to enhance your browsing experience, such as links to external resources, payment providers, or social media platforms.

However, it is important to note that once you leave our Site by clicking on these third-party links, we no longer have control over the privacy practices or the content of these external websites. The information you provide or interact with on these third-party sites is subject to their own privacy policies and terms of service.

We cannot be held responsible for:

The content, practices, or security measures of any third-party website.
The way these external websites collect, store, or use your personal data.

We strongly encourage you to review the privacy policies and terms of any external websites you visit to understand how your personal data will be handled. If you have any concerns about the security or privacy practices of these sites, we recommend contacting the third-party providers directly for further information.

9. Legal Disclosure

At Rug&Root, we prioritize your privacy, but there may be situations where we are required or compelled to disclose your personal information in compliance with legal obligations or to protect our interests.

9.1 Compliance with Legal Requirements:

We may disclose your personal information if required by law or in response to valid requests from public authorities, including:

Government Authorities: In response to a valid request from law enforcement or regulatory bodies.
Court Orders or Subpoenas: If we are legally required to provide your information as part of a legal proceeding or investigation.
Other Legal Processes: To comply with other legal obligations, such as complying with tax laws or regulatory reporting requirements.

9.2 Protection of Rights and Safety:

We may also disclose personal information if we believe in good faith that it is necessary to:

Protect Our Rights: Defend the legal rights or intellectual property of Rug&Root.
Ensure Your Safety: Act to protect your safety or the safety of others if we have reason to believe there is an imminent risk.
Prevent Fraud: Investigate or take action against fraud, potential illegal activities, or suspected violations of our terms and conditions.
Respond to Legal Disputes: Address claims, disputes, or resolve issues that require the use of personal data in a legal context.

Any disclosure of personal information under these circumstances will be handled in a manner that complies with applicable legal and regulatory requirements.

10. Data Transfers

At Rug&Root, we are committed to protecting your personal information, regardless of where it is processed or stored. Please note that if you are located outside the United States, your personal data will be transferred to and processed in the United States, where our servers and central operations are located.

10.1 International Data Transfers

When you use our Site, interact with our services, or make purchases, your personal information may be transferred, stored, and processed in the United States. By using our Site and providing us with your personal information, you consent to this transfer of your data to the U.S.

10.2 Safeguards for Data Transfers

We are committed to ensuring that your personal data is protected during cross-border transfers. To ensure your data remains secure and compliant with applicable data protection laws (such as the General Data Protection Regulation (GDPR) for European residents), we implement the following safeguards:

Standard Contractual Clauses (SCCs): We use legally approved mechanisms, such as Standard Contractual Clauses, to ensure that your personal data receives adequate protection when transferred outside of your country of residence.
Adequacy Decisions: In cases where applicable, we may rely on an adequacy decision issued by the European Commission, which certifies that the destination country offers sufficient levels of data protection.
Technical and Organizational Measures: We employ encryption, secure servers, and other advanced security technologies to protect your data during transfer and while it is stored in the United States.

10.3 Your Rights Regarding Data Transfers

If you are a resident of the European Union or another region with data protection laws, you may have rights related to the transfer of your data, including the right to be informed of how your data is protected and the right to object to international data transfers. To learn more about your rights or to exercise them, you can contact us at contact@rugandroot.com.