Privacy policy

Last updated: July 2026

Rootwork is a review platform for hair. This page explains, in plain language, what data we hold, why, and what your rights are. If anything is unclear, email hello@rootwork.hair and a human will answer.

What we collect

• Account details. Your email address (used to sign you in) and your chosen handle. Rootwork is pseudonymous by design: we never ask for your real name.
• Your hair profile. Hair type, porosity and goals, all optional, used to personalise the platform and give context to your reviews.
• Your diary, shelf and follows. Private to you. Nobody else on the platform can see them, and we do not use them for anything except showing them back to you and computing your reminders.
• Your reviews. Public, attached to your handle and hair type, never your email.
• Device preferences. Your theme choice and sign-in session are stored in your own browser. We do not run advertising trackers or third-party analytics.

Where it lives

Data is stored with Supabase in their London (UK) region, and the site is served by Cloudflare. If you joined the waitlist before launch, that email lives in Mailchimp. These providers process data on our behalf and cannot use it for their own purposes.

What we never do

We do not sell your data. We do not show ads. We do not share your email with vendors, stylists or anyone else on the platform. When you contact a vendor through Rootwork, you choose to do so and the message goes from your own WhatsApp or email, not ours.

Deleting your data

Email hello@rootwork.hair from your account address and we will delete your account and everything attached to it, usually within 7 days. Reviews are removed along with the account.

Your rights

Under UK and EU data protection law you can ask for a copy of your data, ask us to correct it, or ask us to delete it. The same email address handles all three. You also have the right to complain to the ICO (ico.org.uk) if you think we have handled your data badly.

Age

Rootwork is for people aged 13 and over. If you believe a younger child has created an account, contact us and we will remove it.

Changes

If this policy changes in a way that matters, we will say so plainly on the site rather than burying it. The date at the top always tells you when it last moved.