Privacy Policy

We collect information you voluntarily provide when you use our contact form:

• Full name
• Email address
• Company name (optional)
• Phone number (optional)
• Service interest
• Message

We also collect limited technical data automatically when you visit the Website, including IP address, browser type, pages visited, referring URL, and device type. This data is used solely for security, fraud prevention, and rate limiting purposes.

• To respond to your service enquiries and evaluate your requirements
• To deliver a one-time password (OTP) to verify your email address before form submission
• To communicate with you about our services
• To protect the security and integrity of our Website through rate limiting and abuse prevention
• To analyse website usage patterns and improve our services

We do not sell, rent, or trade your personal information to third parties. We may share information with:

• Service providers who assist in operating our Website — including Google (reCAPTCHA v3 for spam prevention) and Gmail SMTP (for email delivery). These providers are subject to their own privacy policies and confidentiality obligations.
• Legal or regulatory authorities where required by applicable law, court order, or to protect the rights, property, or safety of Root Host LLP or others.

Our Website uses Google reCAPTCHA v3 to protect the contact form from automated abuse. reCAPTCHA collects hardware and software information from your device and sends it to Google for analysis. Your use of the contact form is subject to Google's Privacy Policy and Terms of Service.

We retain contact form submissions for as long as necessary to evaluate your enquiry and respond appropriately, and for a reasonable period thereafter for business record-keeping. Email communications are retained in accordance with standard email storage practices. You may request deletion of your information at any time by contacting us at [email protected].

Our Website may use essential browser storage (such as session tokens) for functional purposes during the OTP verification flow. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Measures in place include:

• Encrypted data transmission over HTTPS/TLS
• HTTP security headers (X-Frame-Options, X-Content-Type-Options, and others)
• Rate limiting on all API endpoints to prevent abuse
• HMAC-SHA256 signed OTP tokens with cryptographically secure random generation
• Cross-origin request protection (CSRF guards) on all form submission endpoints

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

You may contact us at any time to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Withdraw consent for us to contact you

To exercise any of these rights, email us at [email protected]. We will respond within a reasonable timeframe.

Our Website and services are intended solely for business use by individuals aged 18 and above. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected such information, we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated effective date. Continued use of the Website after such changes constitutes your acceptance of the revised policy.

If you have any questions or concerns about this Privacy Policy, contact us at: