Privacy notice

In plain English

This summary is not part of the notice. Where the two differ, the sections below govern.

1. Reading this site tells us almost nothing about you. No cookies are set, no account exists, and the page-view statistics we keep cannot identify anybody.
2. If you email us, we hold your email. That is the only personal data we deliberately collect.
3. We do not sell anything, profile anyone, or run advertising. There is nothing to sell: we do not have it.
4. The scheme is not operating yet. What Rootwall will hold once it does is set out in the rulebook, and it is deliberately narrow. See below.

Who we are

The controller is ROOTWALL.AI LTD, a private limited company registered in England and Wales.

• Company number 12578817
• Registered office 200 Seymour Avenue, Morden, England, SM4 4QZ
• Registered with the Information Commissioner’s Office as a data controller
• Contact info@rootwall.ai

What this notice covers

This notice covers the website at rootwall.ai and correspondence sent to us. It does not cover the Rootwall scheme, which is not yet operating and which has no members. What the scheme will hold, and for how long, is governed by the rulebook rather than by this page — see the last section.

What we collect, and it is very little

• Page statistics. We use Cloudflare Web Analytics, which counts page views without cookies and without identifying individual visitors. We can see that a page was read. We cannot see who read it.
• Server records. The site is served by GitHub Pages. Like any web host, the provider may record IP addresses in its own logs for security and operational purposes. We do not receive those logs and cannot query them.
• Correspondence. If you write to info@rootwall.ai, we hold your message, your email address and anything you choose to put in it. Mail is hosted on Microsoft 365.

That is the complete list. We do not use advertising networks, social media pixels, session recording, heat mapping or any product that identifies visitors.

Why, and on what legal basis

• Page statistics — legitimate interests. Knowing which pages are read tells us which parts of the rulebook and the survey are useful. Because the data identifies nobody, the interference with anyone’s privacy is minimal, and no consent banner is required.
• Correspondence — legitimate interests. If you write to us, we need your message and address in order to reply. Where an exchange leads to a contract, the basis becomes performance of that contract.

Who else is involved

Three service providers process data on our behalf, and each is named here rather than described generically.

• Cloudflare — page statistics
• GitHub — hosting of this site
• Microsoft — email

Each may process data outside the United Kingdom, under the transfer safeguards those providers publish. We disclose personal data to nobody else, except where the law requires it.

How long we keep it

• Page statistics are aggregate and contain no personal data. Cloudflare’s own retention applies.
• Correspondence is kept while it is relevant to a live or reasonably anticipated matter, and deleted when it is not. If you ask us to delete an exchange and we are not required to keep it, we will.

Your rights

Under UK data protection law you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to our processing it, or ask for it in a portable form.

Write to info@rootwall.ai and we will answer within one month. Given how little we hold, the answer is usually short.

Complaints

If you think we have handled your personal data badly, please tell us first — it is the fastest way to fix it. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk without contacting us at all, and nothing here asks you to give that up.

What the scheme will hold, when it operates

The Rootwall scheme is not operating and has no members. When it does, what it may receive and hold is fixed by the rulebook rather than by this notice, and it is deliberately narrow.

• The scheme does not receive request or response bodies, argument values, or any member’s log estate. Records carry the names of arguments and a digest of their values, never the values themselves.
• Personal data is limited to the identifiers the rules require, and no clause may be read as permitting more.
• Records are destroyed at the end of a published retention period, and the scheme records that it has destroyed them.

The rulebook states all of this in full, with clause numbers, and it is published before anybody signs anything. This notice will be extended before the scheme admits its first member.

Changes to this notice

• Every version carries a number and a date, like every other published document here.
• Superseded versions stay readable on the version history. Nothing is quietly withdrawn.