Privacy
Your details deserve care, too.
A plain-language description of how Rooted's website handles information while you prepare a request.
Your basket stays in this browser
The website stores only product IDs, variant IDs and quantities in localStorage under the key rooted-cart-v1. It uses them to rebuild your basket from the current catalogue. It does not store your name, location, note or message there.
Remove every item to empty the basket, or clear this site’s browser storage. If localStorage is unavailable, the current tab can still keep a temporary basket, but it may disappear when you reload.
Forms prepare a message, not a server submission
Your name, fulfilment details and optional note stay in the current page’s memory while you prepare a request. They are not submitted to an order database, emailed or placed in this website’s application URLs. Leaving or reloading the page clears the form.
If you explicitly open a prepared WhatsApp link, the message is included in that external URL so WhatsApp can prefill it. WhatsApp receives the link information at that point, even before you press Send. Your browser history and the WhatsApp service may retain the handoff URL. Review the details first and do not include sensitive information.
WhatsApp and copied summaries
Pressing Send inside WhatsApp shares the message with the selected Rooted recipient under WhatsApp’s own service and privacy terms. Copying a summary places it on your device clipboard, which is outside this site’s control. Avoid copying private information on a shared device.
The website opens a prepared WhatsApp message but cannot verify that it was sent or received. Rooted confirms orders personally in WhatsApp; no order-confirmation database is used by this website.
No marketing trackers have been added
This implementation does not add analytics, advertising pixels, newsletter collection or third-party font requests. Images and fonts are served locally by the site. A future hosting provider may process technical request information such as IP addresses and server logs; the actual host and retention settings must be documented before launch.
Business records and privacy requests
Shamilla must confirm the responsible business identity, privacy contact, purposes, retention periods, security practices and process for access, correction or deletion requests before launch. WhatsApp conversations kept by the business need their own retention and access rules.
This draft is not a declaration of compliance with the Protection of Personal Information Act. The owner should review the actual operating arrangements with an appropriately qualified adviser.