Privacy policy

RootVexx Ltd is the data controller for the personal data described here. We collect what we need to sell and deliver a machine, and nothing else.

Last updated 09 September 2026.

What we collect

Order data	Name, email, phone, delivery and billing address, order history, access notes you give us
Enquiry data	Whatever you type into the contact form and the emails you send us
Technical data	IP address and browser type in standard server logs
Payment data	None. Card details go directly to our payment provider and are never seen or stored by us

Why we use it and our lawful basis

To fulfil your order — performance of a contract. Without this we cannot sell or deliver you a machine.

To answer enquiries — legitimate interests in responding to people who contact us.

To meet legal duties — legal obligation, mainly keeping accounting records for six years.

Marketing email — consent, and only if you opt in. Every marketing email carries a one-click unsubscribe that works immediately.

Only those who need it to complete your order: our delivery carrier (name, address, phone so they can book your slot), our payment provider, our accountants, and our IT and email providers.

We never sell, rent or trade personal data, and we do not share it for anyone else's marketing. Where a provider processes data outside the UK, the transfer is covered by the UK International Data Transfer Addendum or adequacy regulations.

How long we keep it

Order and invoice records: six years after the end of the tax year, as HMRC requires. Warranty records: for the life of the warranty plus one year. Enquiries that do not become orders: two years. Marketing consent: until you withdraw it.

Cookies and analytics

This site sets no advertising or cross-site tracking cookies, and we do not use Google Analytics, Meta Pixel or any third-party tracker. Your basket is held in your own browser using local storage, which never leaves your device. Clearing your browser data clears your basket.

We do count visits, so we know which machines people are looking at. Each visit is given a random reference that lives only for that browser session and is discarded when you close the tab. Against it we record only the page you viewed, the machine you looked at, and whether a basket or checkout was started.

We do not record your name, email, IP address, device fingerprint or anything that identifies you, and the reference cannot be linked back to you or followed onto any other website. Counts are deleted after seven days. Because none of it identifies a person, no consent banner is required — but if you would rather not be counted at all, any browser setting that blocks background requests will stop it, with no effect on the site.

Your rights

Under UK GDPR you may ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, ask for it in a portable format, and withdraw consent at any time.