Last updated: 24 October 2026

1. Who we are

KindRoots and Elixyr are trading names/brands used by KindRoots Collective Ltd, based at 4 Verwood Close, Stafford, ST16 3SH.

In this policy, “we”, “us” and “our” refer to KindRoots Collective Ltd, including our KindRoots and Elixyr activities.

We are responsible for deciding how and why your personal information is used. For the purposes of applicable UK data protection law, we act as the data controller.

This policy explains how we collect, use, store and protect personal information when you:

- Visit or use our website at https://www.kindrootscollective.com

- Contact us with a question or enquiry.

- Book or attend our events, workshops, foraging courses, meals, pop-ups or other activities.

- Purchase our products or services.

- Subscribe to our mailing list or interact with us on social media.

- Visit our drinks cart or otherwise engage with our business.

Email: kindrootscollective@gmail.com

Postal address: KindRoots Collective Ltd, 4 Verwood Close, Stafford, Staffordshire, ST16 3SH

2. The personal information we collect

Depending on how you interact with us, we may collect the following information.

Information you provide to us

- Identity and contact details: name, email address, telephone number and, where necessary, postal or billing address.

- Booking information: event or course booked, booking reference, number of attendees, booking date, payment status and relevant communications.

- Payment information: payment confirmations, transaction references and limited payment details supplied by our payment provider. Where payments are processed by a third party, we do not ordinarily receive or store your full card details.

- Enquiries and correspondence: information you provide when contacting us, completing a form, requesting a quotation or discussing a booking.

- Dietary, allergy and accessibility information: where you voluntarily provide it and it is necessary to help us organise an event, prepare food safely or make reasonable arrangements for your participation.

- Marketing preferences: whether you have opted in to receive marketing and your preferences for communications.

- Feedback and reviews: comments, testimonials, survey responses and other feedback you choose to provide.

- Photographs and video: images or recordings taken at our activities or events, where applicable and subject to appropriate privacy arrangements.

Please do not provide sensitive personal information unless it is necessary for your booking or participation.

Information collected automatically

When you visit our website, we or our service providers may collect certain technical information, including:

- IP address and general location information derived from it.

- Browser type, device information and operating system.

- Pages visited, referring websites and interactions with our website.

- Cookie identifiers and website usage information, where permitted.

The information collected depends on our website platform, cookie settings and any analytics or other tools we use.

Information received from other sources

We may receive information from booking platforms, payment providers, website providers, event partners or social media platforms where you interact with us through those services.

Where appropriate, we will explain the relevant processing and provide any additional privacy information required by law.

3. How and why we use your information

We use personal information only where we have a lawful basis for doing so.

Purpose (Lawful basis)

Responding to enquiries and providing requested information. (Legitimate interests and, where applicable, steps taken at your request before entering a contract).

Managing bookings, providing events and delivering purchased products or services. Processing refunds, cancellations and payment queries. (Performance of a contract and compliance with legal obligations, as applicable).

Managing allergies, dietary requirements and accessibility arrangements. (Explicit consent where appropriate, or another lawful basis and special-category condition where applicable).

Sending marketing emails or messages. (Consent or, where all legal requirements are met, the applicable customer soft opt-in).

Operating, securing and improving our website. (Legitimate interests and, where required, consent for cookies or similar technologies).

Maintaining accounts, invoices and tax records. (Compliance with legal obligations).

Handling complaints, disputes, insurance matters and legal claims. (Legitimate interests and, where applicable, legal obligations).

Publishing event photographs, testimonials and promotional content. (Consent or another appropriate lawful basis, depending on the circumstances).

Legitimate interests means we may use information where it is reasonably necessary for our business, provided our interests do not override your rights and freedoms. Where we rely on this basis, you can ask us for more information about the relevant interests.

We will not use your personal information for purposes that are incompatible with the purposes described here without providing further information where required.

4. Event bookings, foraging courses and meals

When you book an event, foraging course, workshop or meal with us, we may use your information to:

- Confirm your booking and issue booking references or receipts.

- Contact you about event arrangements, timings, meeting points, preparation and what to bring.

- Provide important updates, including changes to arrangements, cancellations or postponements.

- Manage attendee numbers, dietary requirements and reasonable accessibility arrangements.

- Deliver the event safely and respond to incidents or emergencies.

- Process refunds and manage complaints or disputes.

- Meet our legal, accounting and insurance obligations.

We may ask for limited information about allergies, dietary restrictions or accessibility requirements where this is relevant to your participation.

Some of this information may constitute special-category personal data under UK data protection law. We will request only what is reasonably necessary, restrict access and use an appropriate lawful basis and additional condition where required.

Please tell us only what we need to know to make appropriate arrangements. You should contact us if your requirements change before an event.

We may share necessary booking information with a venue, caterer, event partner or other service provider involved in delivering your booking. We will limit the information shared to what is reasonably necessary.

Your information will not automatically be added to our marketing list because you book an event.

5. Payments and purchases

Payments may be processed through third-party payment providers or booking platforms.

Those providers may collect and process your payment information under their own privacy policies and security arrangements. We receive the information needed to confirm and reconcile transactions, manage refunds and maintain appropriate records.

We do not intend to store full payment card numbers or security codes ourselves.

Where you purchase products or services from us in person, we may retain transaction information and relevant contact details where needed for receipts, customer service, accounting or legal purposes.

6. Marketing and newsletters

We may offer email newsletters and updates about KindRoots, Elixyr, our products, drinks cart, events, foraging activities and related services.

We will send direct electronic marketing to individuals only where we have appropriate consent or can lawfully rely on an applicable exception under the Privacy and Electronic Communications Regulations (PECR).

Where we rely on consent, you can withdraw it at any time. Where we rely on the customer soft opt-in, you can opt out at the time your details are collected and in each subsequent marketing message.

You can unsubscribe using the link in a marketing email, where provided, or contact us directly.

We will not make marketing consent a condition of booking an event or purchasing a product.

We may retain a minimal record of your opt-out so that we can respect your preferences and avoid contacting you again inappropriately.

We do not sell your personal information or provide personal contact details to other businesses for their independent marketing without an appropriate lawful basis.

7. Website cookies and analytics

Our website may use cookies and similar technologies to make the website work, remember preferences, understand website traffic and, if enabled, support advertising or other optional features.

Strictly necessary cookies may be used where permitted by law. We will seek consent before using non-essential cookies or similar technologies where required.

Where our website uses analytics, advertising pixels, embedded media or other third-party technologies, these may collect information about your use of the website in accordance with the relevant settings and permissions.

You can manage your cookie preferences through our website's cookie settings, where available. You can also adjust cookie settings in your browser, although blocking certain cookies may affect website functionality.

Simply continuing to browse the website will not be treated as consent where the law requires a positive choice.

Our website may use third-party services whose own cookies and privacy practices are governed by their respective providers. We will update this policy and our cookie information if the technologies we use change.

8. Photographs, video and social media

We may take photographs or record video at our events, workshops, markets and other activities for record-keeping, publicity and promotional purposes.

Where we intend to use identifiable images for promotional purposes, we will provide appropriate information and obtain consent where required, particularly for close-up, featured or posed images.

We will take reasonable steps to make attendees aware when photography or filming is taking place and how to raise an objection. Please tell us before or during an event if you do not wish to be photographed.

If we publish an image based on your consent, you can withdraw that consent for future use. This does not make earlier processing unlawful, and it may not be possible to retrieve material already printed or shared by third parties.

If you interact with us on social media, the platform provider may process your personal information independently under its own privacy policy. Public comments and messages may be visible to other users depending on the platform and your settings.

9. Who we share information with

We may share personal information with trusted service providers where necessary to run our business, including:

- Website hosting and website-building providers.

- Event booking, ticketing and reservation platforms.

- Payment processors and accounting software providers.

- Email, newsletter and customer communication providers.

- Cloud storage and document management providers.

- Venues, caterers, event partners and relevant suppliers.

- Professional advisers, insurers and legal representatives.

- Regulators, law enforcement or other authorities where we are legally required or permitted to do so.

We require service providers processing personal information on our behalf to handle it appropriately and protect it in accordance with applicable law.

Some providers may act as independent controllers for their own purposes. Their own privacy notices may apply to those activities.

We do not sell personal information.

10. International transfers

Some of our service providers may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that the transfer complies with applicable UK data protection law. Depending on the circumstances, this may involve a UK adequacy regulation, appropriate safeguards such as an approved international data transfer agreement or addendum, or another permitted transfer mechanism.

You can contact us for further information about relevant international transfers and safeguards.

11. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, insurance and reporting requirements.

Our intended retention approach is:

- Enquiries: generally up to 12 months after the enquiry has been resolved, unless a longer period is necessary.

- Event and booking records: generally up to 24 months after the event, unless needed longer for complaints, incidents, insurance or legal claims.

- Financial and transaction records: for the period required by applicable tax and accounting rules.

- Marketing records: until you unsubscribe or withdraw consent, with limited suppression records retained where necessary to respect your choice.

- Dietary, allergy and accessibility information: only for as long as needed to make the relevant arrangements, deal with any associated incident or meet applicable legal requirements.

- Website logs and analytics: according to the relevant system settings, provider retention periods and our operational needs.

- Complaints, disputes and legal claims: for as long as reasonably necessary to investigate, resolve and document the matter and protect or exercise legal rights.

These are intended guidelines, not guaranteed deletion dates. Actual retention periods will depend on the nature of the information and the applicable requirements.

When information is no longer required, we will securely delete it, anonymise it or otherwise dispose of it appropriately.

12. How we protect your information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include restricted access, secure accounts, appropriate password practices, reputable service providers and secure disposal of records.

No website, email service or electronic storage system can be guaranteed to be completely secure. Please avoid sending sensitive information through ordinary email unless necessary and appropriate.

If a personal data breach occurs, we will take appropriate steps to investigate, contain and address it and notify the relevant authorities or affected individuals where required by law.

13. Your data protection rights

Under applicable UK data protection law, you may have the right to:

- Access the personal information we hold about you.

- Rectify inaccurate or incomplete information.

- Erase personal information in certain circumstances.

- Restrict the processing of your information in certain circumstances.

- Object to processing based on legitimate interests.

- Object to direct marketing at any time.

- Withdraw consent where we rely on consent, without affecting the lawfulness of processing before withdrawal.

- Data portability, where the relevant legal conditions apply.

- Complain to the Information Commissioner's Office (ICO).

These rights are subject to certain conditions and exceptions. We may need to verify your identity before responding to a request.

To exercise your rights, contact us at kindrootscollective@gmail.com. We will respond within the period required by law.

You can find further information or raise a concern with the ICO at https://ico.org.uk/make-a-complaint/.

14. Children and young people

Our activities may be attended by children or young people where an event permits this.

Where a booking involves a child, we may process the information needed to administer the booking and communicate with the responsible adult. We will seek any necessary permissions and take particular care with children's personal information, photographs and any sensitive information.

Where consent is the appropriate basis for processing a child's information, we will take account of the child's age, understanding and the applicable legal requirements.

Parents or guardians who have questions about information relating to a child may contact us using the details in this policy. We may need to verify their authority before providing access to information.

15. Links to other websites

Our website may contain links to third-party websites, including ticketing platforms, payment services, social media and partner organisations.

We are not responsible for the privacy practices or content of websites we do not control. Please read their privacy notices before providing personal information to them.

16. Automated decision-making

We do not intend to make decisions about you using solely automated processing that produce legal or similarly significant effects.

If this changes, we will provide any additional information and safeguards required by law.

17. Changes to this privacy policy

We may update this policy from time to time to reflect changes in our activities, website technology, service providers or legal obligations.

The latest version will be published on our website with its updated date. Where required, we will provide additional notice of significant changes.

18. Contact us

If you have questions about this policy or how we handle your personal information, please contact:

KindRoots Collective Ltd

Trading names/brands: KindRoots, KindRoots Collective and Elixyr

Email: kindrootscollective@gmail.com

Address: 4 Verwood Close, Stafford, Staffordshire, ST16 3SH

If you are unhappy with our response, you can raise a concern with the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/