Privacy Policy

Last Updated: October 1, 2026

Roots & Roost, Co., LLC (“Roots & Roost,” “we,” “us,” or “our”) operates this store and website, including related information, content, features, tools, products, and services (collectively, the “Services”). Our store is powered by Shopify, which enables us to provide the Services.

This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you visit or use the Services, make a purchase or other transaction, sign up for communications, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing, or disclosure of personal information, this Privacy Policy controls for those matters.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read this Privacy Policy.

Personal Information We Collect or Process

“Personal information” means information that identifies you or can reasonably be linked to you or another person. It does not include information that has been collected anonymously or de-identified so that it cannot reasonably be used to identify you.

Depending on how you interact with the Services, we may collect or process the following categories of personal information, as permitted by applicable law:

• Contact details, including your name, billing and shipping addresses, telephone number, and email address.
• Payment information, including payment-card or financial-account details, transaction details, payment method, and payment confirmation. Payment information may be processed by Shopify and other payment service providers.
• Account information, including your username, password, preferences, and settings, if you create an account.
• Transaction information, including products you view, add to your cart, purchase, cancel, return, or otherwise interact with, as well as your transaction history.
• Communications, including information you provide when contacting us through customer-service inquiries, email, forms, or other communications.
• Device information, including information about your device, browser, network connection, IP address, and other device or online identifiers.
• Usage information, including how, when, and where you interact with the Services, such as pages or products viewed and features used.

Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, such as when you create an account, place an order, contact us, sign up for emails, complete a form, or otherwise provide information.
• Automatically through the Services, such as when you browse or use our website or when information is collected through cookies and similar technologies.
• From service providers that support our business, including payment processing, website hosting, order fulfillment, shipping, analytics, email marketing, and technology services.
• From third parties, where necessary to support transactions or our business operations, such as information provided by payment, shipping, or technology service providers.

How We Use Personal Information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

• Providing, tailoring, and improving the Services: to operate our store and website; process and fulfill orders; process payments; arrange shipping; respond to requests; remember preferences and items added to a cart; provide product recommendations; and improve the shopping experience.
• Marketing and communications: to send promotional emails through Shopify Email where permitted, send abandoned-checkout or customer-recovery communications, respond to inquiries, and communicate about orders, accounts, and transactions.
• Website measurement and advertising-related functions: to understand use of the Services and support marketing activities. As of the Last Updated date, Roots & Roost has not implemented third-party advertising pixels or tags such as Meta Pixel, Google Ads tags, or Pinterest Tag on the website. If we implement additional advertising or tracking technologies in the future, we will update this Policy as appropriate and provide any notices or choices required by law.
• Shopify services: to use Shopify’s store, checkout, analytics, personalization, and enhanced services, as described in the “Relationship with Shopify” section below.
• Security and fraud prevention: to process and protect transactions, detect and prevent fraud or other potentially illegal or harmful activity, and protect our Services and business.
• Legal reasons: to comply with applicable laws and regulations; respond to valid legal processes or requests from authorities; protect our rights and interests; investigate potential violations of our terms or policies; and participate in or respond to legal proceedings.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate business purposes, subject to this Privacy Policy and applicable law. These circumstances may include:

• Service providers: Shopify, payment processors, vendors, and other third parties that provide services on our behalf, such as website hosting, payment processing, customer support, analytics, cloud storage, order fulfillment, shipping, and email marketing.
• Marketing and communications: service providers that help us send promotional emails or customer-recovery communications.
• At your direction or with your consent: when you direct, request, or consent to disclosure to third parties, such as when information is provided to a shipping provider to fulfill an order or when you choose to interact with third-party social-media features.
• Business and legal purposes: in connection with a business transaction such as a merger, acquisition, sale of assets, or bankruptcy; to comply with legal obligations; to enforce our terms or policies; or to protect or defend our Services, rights, and users.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve them. Information you submit through the Services may be transmitted to and shared with Shopify and third parties that may be located in countries other than where you reside.

We use certain Shopify enhanced services that may use information from your interactions with our store, together with information from other merchants and Shopify, to help improve products, personalization, analytics, and advertising. Shopify may process personal information for these purposes in accordance with its own privacy practices and applicable law. Other merchants do not receive access to your personal information through these services.

Depending on where you live, you may have rights regarding Shopify’s use of your personal information for these purposes, including rights to opt out of certain uses for targeted advertising. To learn more about how Shopify collects, uses, and shares personal information, visit Shopify’s Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to personal information processed by Shopify through the Shopify Privacy Portal.

Cookies and Similar Technologies

Our website and Shopify may use cookies and similar technologies to operate the Services, remember preferences, support checkout and account functions, understand website usage, and improve the shopping experience. Your browser may allow you to control or disable cookies, although some features of the Services may not function properly if you do so. Where required by law, we will provide notices or choices concerning cookies and similar technologies.

Advertising and Personal Information

As of the Last Updated date, Roots & Roost has not implemented third-party advertising pixels or tags such as Meta Pixel, Google Ads tags, or Pinterest Tag on the website.

We do use Shopify enhanced services, which may involve Shopify processing information from interactions with our store for purposes such as personalization, analytics, and advertising, as described in the “Relationship with Shopify” section above. Shopify’s processing for these purposes is subject to Shopify’s own privacy practices and applicable law and is separate from any third-party advertising pixels or tags that Roots & Roost may implement directly in the future.

If Roots & Roost implements additional advertising or tracking technologies in the future, we will update this Policy as appropriate and provide any notices or choices required by applicable law. Depending on where you live and how personal information is processed, certain uses or disclosures may be treated as a sale, sharing, or targeted advertising under applicable law. Where required, we will provide the applicable opt-out mechanism.

Third-Party Websites and Links

The Services may provide links to websites or online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms. We are not responsible for the privacy, security, accuracy, completeness, or reliability of those sites. The inclusion of a link does not, by itself, imply endorsement of the site or its operator.

Children’s Data

The Services are not directed to children, and we do not knowingly collect personal information from children under 13 years of age. If you are a parent or legal guardian and believe a child under 13 has provided personal information to us, please contact us using the information in the Contact section below. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete that information as required by applicable law.

We do not knowingly sell or share the personal information of individuals under 16 years of age for purposes prohibited by applicable law.

Security and Retention of Your Information

We use reasonable administrative, physical, and technical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. However, no system, transmission over the internet, or method of electronic storage can be guaranteed to be 100% secure. We recommend that you avoid using insecure channels to communicate sensitive or confidential information to us.

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Policy, including providing and maintaining accounts and Services, processing transactions, providing customer service, complying with legal, accounting, or reporting requirements, resolving disputes, enforcing agreements and policies, preventing fraud, and protecting our rights and the security of our Services.

Retention periods vary depending on the type of information and the purpose for which it was collected. When personal information is no longer reasonably necessary for these purposes, we may delete it, de-identify it, or retain it as permitted or required by law.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights described below regarding your personal information. These rights are not absolute, may apply only in certain circumstances, and may be subject to exceptions permitted by law.

Access / Right to Know

You may have the right to request access to personal information we maintain about you, including, where required by law, the categories of personal information collected, used, or disclosed and the sources from which it was obtained.

Correction

You may have the right to request that we correct inaccurate personal information. If you have an account, you may be able to update your name, address, telephone number, or email address by logging in. You may also contact us using the details below. We may verify your identity before providing access to or changing certain information.

Deletion

You may have the right to request that we delete personal information we maintain about you, subject to applicable law and exceptions that may permit or require us to retain certain information.

Portability

You may have the right to receive a copy of certain personal information and, in some circumstances, request that we transfer it to another organization.

Opt Out of Sale, Sharing, or Targeted Advertising

Depending on where you live and how personal information is processed, you may have the right to opt out of activities defined under applicable law as the sale or sharing of personal information or the use of personal information for targeted advertising.

As of the Last Updated date, Roots & Roost has not implemented third-party advertising pixels or tags such as Meta Pixel, Google Ads tags, or Pinterest Tag on its website. Shopify’s enhanced services may involve separate processing by Shopify as described above. If an applicable opt-out mechanism is required for our practices, we will make it available and update this Policy as appropriate.

Managing Email Preferences

You may unsubscribe from promotional emails at any time using the unsubscribe link at the bottom of the email or by contacting us. You may continue to receive promotional emails for a short period while an unsubscribe request is processed. Even if you opt out of promotional emails, we may still send non-promotional communications necessary to provide the Services or complete or administer transactions, including order, shipping, return, account, and security communications.

Submitting a Request

You may exercise applicable rights through any relevant mechanism provided on the Services or by contacting us using the details below. To submit a privacy request by email, please contact us at marybeth@rootsandroost.com with the subject line “Privacy Request.”

We may need to verify your identity before processing a request, as permitted or required by law. Where permitted, you may designate an authorized agent to submit a request on your behalf. We may require proof of authorization and may ask you to verify your identity directly with us. We will respond within the time period required by applicable law.

We will not discriminate against you for exercising privacy rights available to you under applicable law.

California Privacy Rights

California residents may have additional rights under the California Consumer Privacy Act, as amended, and other applicable California laws. Depending on the circumstances, these rights may include the right to know/access, correct, or delete personal information; receive certain information in a portable format; and opt out of the sale or sharing of personal information or certain targeted advertising.

California Online Privacy Protection Act (CalOPPA)

This Privacy Policy is available through our website and describes the categories of personal information we collect, how we use it, and the circumstances in which we may disclose it. You may browse portions of our website without providing personal information, although account creation, purchases, email sign-ups, and certain features may require information. Our Privacy Policy link includes the word “Privacy” and is intended to be readily accessible from our website.

Global Privacy Control

We recognize Global Privacy Control (GPC) signals where required by applicable law. Depending on the law and the processing involved, a GPC signal may communicate a request to opt out of certain sales, sharing, or targeted advertising.

Commercial Email and CAN-SPAM

We may collect and use your email address to process orders, communicate about transactions, provide customer service, and, where permitted, send promotional information about Roots & Roost.

Our commercial emails are intended to comply with applicable requirements of the CAN-SPAM Act. We do not knowingly use false or misleading header information or subject lines, will identify commercial messages appropriately, include our physical business address in applicable commercial emails, monitor any third-party email marketing service we use for compliance, and honor valid unsubscribe requests promptly.

You may unsubscribe from promotional emails using the unsubscribe link included in the email or by contacting us. Unsubscribing from promotional emails will not prevent us from sending transactional or service-related communications necessary to complete or administer your transactions, account, or use of the Services.

Complaints

If you have a complaint about how we process personal information, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local data protection authority.

International Transfers

Some of our service providers may store or process personal information in countries other than the country in which you reside, including the United States and Canada. Where required by applicable law, we take reasonable steps to ensure personal information is protected in accordance with applicable privacy requirements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Policy on this website, update the “Last Updated” date, and provide notice as required by applicable law.

Contact

If you have questions about our privacy practices or this Privacy Policy, or would like to exercise a privacy right available to you, please contact us:

Roots & Roost, Co., LLC
Phone: 970-819-6396
Email: marybeth@rootsandroost.com
Address: 1015 Lincoln Ave., Steamboat Springs, CO 80487, United States