How Rootsy Collects, Uses and Protects Your Personal Information

At Rootsy, protecting your personal information is an important part of building a trustworthy online marketplace.

Rootsy connects buyers with independent Canadian sellers and collects certain information to operate the marketplace, process orders, coordinate deliveries, provide customer support, and maintain platform security.

This guide explains what personal information Rootsy collects, how it may be used and shared, how it is protected, and what privacy choices are available to you.

1. What Personal Information Does Rootsy Collect?

The information Rootsy collects depends on how you interact with the marketplace.

Account and contact information

When you register or use a buyer account, Rootsy may collect:

  • Your name.

  • Email address.

  • Phone number.

  • Account credentials.

  • Province or region.

  • Shipping address and delivery instructions.

Shopping and transaction information

When you make a purchase, Rootsy may process:

  • Order details and purchase history.

  • Payment and transaction status.

  • Shipping and delivery information.

  • Returns and refund records.

  • Dispute information.

  • Order-related communications.

Customer support information

If you contact Rootsy Support, the information collected may include your messages, support requests, and photographs or documents you voluntarily provide to explain an issue.

Technical and usage information

Rootsy may also collect device information, IP address, browser information, website activity, and cookie-related information.

For more information, refer to Rootsy's Privacy Policy.

2. Why Does Rootsy Collect Personal Information?

Rootsy uses personal information for purposes described in its Privacy Policy, including:

  • Creating and managing buyer and seller accounts.

  • Processing purchases and coordinating payments.

  • Facilitating shipping and delivery.

  • Handling returns, refunds, and disputes.

  • Providing customer service.

  • Sending order confirmations and operational notices.

  • Detecting and preventing fraud.

  • Protecting account security.

  • Complying with applicable legal requirements.

  • Improving website functionality and marketplace services.

  • Providing relevant product recommendations.

  • Sending marketing communications where a valid legal basis and applicable consent requirements are satisfied.

Rootsy does not use personal information for unrelated purposes without consent or another basis permitted or required by law.

3. Does Rootsy Share My Information With Sellers?

Rootsy is a marketplace where purchases are made from independent sellers.

To fulfil a purchase, relevant information may need to be shared with the seller responsible for your order.

This may include your name, delivery address, order details, and other information necessary for fulfilment, returns, refunds, or dispute resolution.

Under Rootsy's Privacy Policy, sellers must use buyer information only for authorized transaction-related purposes unless they have a separate valid legal basis for another use.

Sellers must not automatically add Rootsy buyers to their own marketing lists merely because those buyers purchased a product.

Independent sellers also have responsibilities to protect buyer information under applicable privacy laws.

4. Does Rootsy Share Information With Service Providers?

Rootsy works with third-party providers to operate certain marketplace services.

Depending on the service, relevant information may be processed by:

  • Payment processing providers.

  • Shipping and logistics providers.

  • Customer support systems.

  • Communication and notification services.

  • Security and fraud prevention providers.

  • Website analytics and technology service providers.

Information is shared or processed for applicable operational purposes and in accordance with Rootsy's Privacy Policy.

Service providers may have their own privacy practices and legal obligations.

5. How Does Rootsy Handle Payment Information?

Rootsy uses Stripe as its payment processing provider.

According to Rootsy's Privacy Policy, Stripe processes payment card information under applicable payment security standards.

Rootsy does not store full credit card numbers, CVV codes, or payment card security codes on Rootsy-controlled systems.

Rootsy may retain relevant transaction records needed for orders, refunds, accounting, fraud prevention, and other legitimate purposes.

Never share complete payment card information through ordinary email or customer support messages.

6. How Does Rootsy Protect Personal Information?

Rootsy's Privacy Policy describes technical and organizational safeguards intended to protect personal information.

These include:

  • Access controls.

  • Encryption in transit and at rest where appropriate.

  • Secure transmission protocols.

  • Authentication mechanisms.

  • Security monitoring and logging.

  • Security requirements for service providers.

  • Security review procedures.

These safeguards are designed to reduce the risk of unauthorized access, disclosure, loss, or misuse.

However, no method of electronic storage or online communication can guarantee absolute security.

Customers also play an important role in protecting account credentials and device access.

7. Does Rootsy Use Cookies?

Yes. Rootsy's Privacy Policy describes the use of cookies and similar technologies.

Cookies may support activities such as:

  • Account login and authentication.

  • Shopping cart functionality.

  • Checkout and payment processes.

  • Fraud prevention and security.

  • Remembering preferences.

  • Website performance analysis.

  • Product recommendations.

  • Marketing and advertising where permitted.

Some cookies are necessary for the marketplace to function.

Non-essential cookies are subject to the applicable consent requirements described in Rootsy's policy.

8. Can I Control Cookies?

You may have options to manage cookie preferences through the available website controls or your browser settings.

Most browsers allow you to review, restrict, or delete cookies.

However, blocking certain cookies may affect essential website functions, including:

  • Signing in.

  • Keeping items in your shopping cart.

  • Completing checkout.

  • Maintaining account security.

  • Accessing some marketplace features.

Disabling optional marketing communications does not automatically disable website cookies.

For complete details, review the Cookies section of Rootsy's Privacy Policy.

9. Does Rootsy Use My Information for Marketing?

Rootsy may send newsletters, promotions, and other commercial electronic messages in accordance with applicable Canadian anti-spam legislation and its Privacy Policy.

Where consent is required, Rootsy obtains the appropriate consent.

You may unsubscribe from marketing emails by using the unsubscribe mechanism provided in the message.

You can also contact Rootsy about marketing communication preferences.

Unsubscribing from marketing communications does not necessarily stop essential operational messages, including order confirmations, delivery notices, security alerts, or refund updates.

10. Is My Personal Information Processed Outside Canada?

Rootsy is a Canadian business, but some of its service providers may process personal information in other countries, including the United States.

For example, certain payment processing, support, communication, and technology providers may operate outside Canada.

Information processed outside Canada may be subject to the laws of the country where it is processed.

Rootsy's Privacy Policy describes contractual, technical, and organizational safeguards used in connection with international service providers.

Rootsy cannot guarantee that information held by providers in other countries will never be subject to lawful access under those countries' laws.

11. How Long Does Rootsy Keep Personal Information?

Rootsy retains personal information for as long as reasonably necessary for the purposes described in its Privacy Policy or as required or permitted by law.

Retention periods depend on factors such as:

  • Whether an account remains active.

  • Order fulfilment and customer support requirements.

  • Accounting and tax obligations.

  • Refunds, chargebacks, and disputes.

  • Fraud prevention and security.

  • Consent-management requirements.

  • Applicable legal obligations.

Rootsy's Privacy Policy generally provides for retaining order, payment, and transaction records for at least seven years for tax and accounting purposes.

When information is no longer required, Rootsy describes procedures for deleting or anonymizing it.

Closing an account does not necessarily result in immediate deletion of all transaction records.

12. Can I Request Access to My Personal Information?

Subject to applicable privacy law, you may request access to personal information Rootsy holds about you and information about how it is used.

To make a request, contact Rootsy's Privacy Officer.

Privacy email: contact@rootsy.ca

Rootsy may require identity verification before processing a request.

Certain information may be withheld where permitted by law, including circumstances involving other people's privacy or an ongoing investigation.

13. Can I Correct Incorrect Personal Information?

Yes. Subject to applicable law, you may request correction of inaccurate, incomplete, or outdated personal information.

Some information may be editable through your account settings.

For information that cannot be updated through your account, contact Rootsy's Privacy Officer at contact@rootsy.ca.

For urgent corrections to the shipping details of an existing order, contact Rootsy Customer Support promptly.

14. Can I Withdraw Consent?

Where Rootsy relies on your consent to process personal information, you may request to withdraw that consent, subject to applicable legal or contractual restrictions and reasonable notice.

Withdrawing consent may affect Rootsy's ability to provide services that require the relevant information.

Certain information may still need to be processed or retained where permitted or required by law.

Contact the Privacy Officer for assistance with a consent-related request.

15. Can I Request Deletion of My Information?

You may contact Rootsy's Privacy Officer to ask about account closure, information retention, or an applicable deletion request.

Whether particular information can be deleted depends on Rootsy's legal obligations, legitimate retention requirements, and applicable privacy rights.

For example, transaction information may need to be retained for tax, accounting, disputes, fraud prevention, or regulatory purposes.

Rootsy will review requests under its Privacy Policy and applicable law.

16. How Does Rootsy Handle Privacy Incidents?

Rootsy's Privacy Policy describes a process for assessing and responding to confidentiality incidents involving personal information.

Where an incident creates a real risk of significant harm, Rootsy will provide notifications to affected individuals and applicable regulators as required by law.

If you believe your personal information has been exposed or misused:

  1. Secure any potentially affected accounts.

  2. Change compromised passwords.

  3. Review your recent account activity.

  4. Contact the Rootsy Privacy Officer promptly.

  5. Provide relevant details about the suspected incident.

  6. Follow any appropriate account or financial security precautions.

Privacy email: contact@rootsy.ca

Do not include account passwords or authentication codes in your report.

17. Does Rootsy Collect Information From Children?

Rootsy's Privacy Policy states that the platform is intended for users who are at least 18 years old.

Rootsy does not knowingly collect personal information from individuals under 18.

If Rootsy becomes aware that a minor has used the platform, it may take appropriate action regarding the account and associated information.

18. How Can I Submit a Privacy Complaint?

If you have concerns about how your information is being collected, used, shared, retained, or protected, you may contact Rootsy's Privacy Officer.

Email: contact@rootsy.ca

Explain your concern and include information necessary to identify the issue.

Rootsy may request identity verification when appropriate.

If your concern remains unresolved, you may have the right to contact the Office of the Privacy Commissioner of Canada or another applicable privacy authority.

Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca

Frequently Asked Questions

What personal information does Rootsy collect?

Rootsy may collect account details, contact information, addresses, order records, transaction information, support communications, and certain device and usage information.

Why does Rootsy collect my information?

Information is used to operate marketplace services, process transactions, coordinate deliveries, provide support, maintain security, and fulfil other purposes described in the Privacy Policy.

Does Rootsy share my address with sellers?

Relevant delivery and order information may be shared with the seller responsible for fulfilling your purchase.

Can sellers use my information for marketing?

Sellers must have a valid independent legal basis before using buyer information for their own marketing activities.

Does Rootsy store my full credit card number?

According to Rootsy's Privacy Policy, Rootsy does not store full credit card numbers or CVV codes on Rootsy-controlled systems.

Does Rootsy use cookies?

Yes. Cookies support account access, checkout, security, preferences, analytics, and other described activities.

Can I disable cookies?

You may control certain cookies, but blocking essential cookies can interfere with website functionality.

Is all my information stored in Canada?

Not necessarily. Some Rootsy service providers process information outside Canada, including in the United States.

Can I request a copy of my personal information?

Yes, subject to applicable privacy law and identity verification requirements.

Can I correct inaccurate account information?

Yes. You may request corrections through available account features or contact Rootsy's Privacy Officer.

Can I unsubscribe from marketing emails?

Yes. Use the unsubscribe mechanism in the message or contact Rootsy about your communication preferences.

Will closing my account delete all transaction records?

Not necessarily. Rootsy may retain certain information to satisfy applicable legal and operational requirements.

How do I report a privacy concern?

Contact Rootsy's Privacy Officer at contact@rootsy.ca.

Related Help Articles

For additional guidance, see:

  • How to Access and Manage Your Rootsy Buyer Account — Account, Payments & Safety → Buyer Account and Login Security.

  • How to Update Your Rootsy Buyer Profile and Shipping Information — Account, Payments & Safety → Buyer Account and Login Security.

  • How to Protect Your Rootsy Account and Report Suspicious Activity — Account, Payments & Safety → Buyer Account and Login Security.

  • How Rootsy Keeps Your Payments and Checkout Secure — Account, Payments & Safety → Payments and Checkout Security.

Need Assistance With Your Privacy?

For questions about personal information, privacy rights, consent, or suspected privacy incidents, contact:

Rootsy Privacy Officer: contact@rootsy.ca

For general buyer account, order, and technical support:

Support Centre: https://support.rootsy.ca/support/home

Customer Support: support@rootsy.ca

This article provides a summary of Rootsy's privacy practices. For full details, please refer to the current Rootsy Privacy Policy. Applicable law and the full policy govern where additional terms or exceptions apply.

Rootsy — Stronger Together, Locally Rooted.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article