Privacy policies & Legal terms of use

  • US Privacy Policy

    Updated: October 2, 2018

    Roots takes our relationship with all our customers seriously, and this includes how we handle your personal information. Roots is committed to meeting the requirements of all relevant North American laws regarding privacy.

    This Policy sets out the ways we collect, use and share your personal information.

    This Policy addresses:

    1. 1. What is personal information?
    2. 2. How do we collect your personal information?
    3. 3. How do we use information about you?
    4. 4. With whom does Roots share your personal information?
    5. 5. Personalized banner / targeted advertising
    6. 6. Use of Cookies
    7. 7. Marketing choices
    8. 8. Withdrawing consent
    9. 9. What do we do to safeguard personal information?
    10. 10. Storage of US data in the US
    11. 11. How do we retain your personal information?
    12. 12. Links to other websites
    13. 13. Changes to this Policy
    14. 14. Access to your personal information
    15. 15. Concerns or questions

    1. What is personal information?

    Personal information is information about you, that can be used to identify you. When you interact with Roots, in store and online at Roots.com (the “Website”), we may collect personal information such as:

    • your full name, age, date of birth and gender;
    • your billing and delivery postal addresses, phone (including mobile phone)and e-mail details;
    • where you have chosen to register a user account with us, your user name and password;
    • your communication and shopping preferences;
    • details regarding your browsing on our website and shopping activities;
    • your interests, feedback and survey responses;
    • information about the device on which you have accessed our website, including your IP address, operating system and browser type;
    • your location; and
    • any other correspondence with us.

    2. How do we collect your personal information?

    Personal information is primarily collected directly from you, such as information voluntarily provided to us through our website, mobile applications, social media channels or in store, and other means of communication. We may also collect personal information about you from your use of other Roots websites, social media networks (Facebook, Instagram, Pinterest, Twitter, YouTube, Yelp, Snapchat and Google) you participate in.

    When you sign up to participate in a contest on We may also obtain personal information from public sources, third party service providers, individuals who have indicated you have agreed for them to provide your personal information, government, tax or law enforcement agencies and other third parties. For example, if you are on another website and you opt-in to receive information from Roots, that website may submit to us your email address and other information about you so that we may contact you as requested. You may also choose to participate in a third party application or feature (such as one of our Facebook or Twitter applications or a similar application or feature on a third party website) through which you allow us to collect (or the third party to share) information about you, such as details of your friends/connections, "likes", comments you have shared, groups and location. In addition, we may receive information about you if other users of a third party website give us access to their profiles and your personal information is accessible through your friends'/connections´ web page, profile page, or similar page on a Social Media Channel or other third party website or interactive service.

    We may supplement the information we collect about you directly with the information we receive from third parties in order to enhance our ability to serve you, to tailor our content to you and send you details of promotions and/or offers which we believe may be of interest to you. We sometimes receive personal information about other individuals from customers who wish to send our products as gifts. In these circumstances, we will use and store that personal information for the purpose of completing the customer’s order.

    The Website is not intended for children under the age of 13 and Roots does not knowingly collect personal information from children in this age group.

    3. How do we use information about you?

    Roots will use your personal information for the purposes described in this policy or explained to you at the time it is collected. If we want to use your personal information for new or additional purposes, we will provide you with notice of these purposes and give you an opportunity to provide or withdraw your consent.

    We may use your personal information in connection with the purposes for which you have provided it. This may include:

    • when you make purchases or returns on our website, mobile applications, over the telephone or in-store;
    • to respond and/or deal with your request or enquiry, including as a result of searches on our website;
    • to enter you in contests and notify you of results if you have agreed to participate in such contests;
    • to administer our website, mobile applications and social media networksand personalize content for you;
    • for internal record keeping;
    • to provide direct or other marketing;
    • to record and update your marketing preferences;
    • to personalize offers, promotions and advertising provided to you based on our understanding of your browsing and shopping habits or purchase history;
    • to register you for certain features on our website;
    • to assess, improve and tailor our products and services to you; and
    • where necessary as part of any restructuring of Roots or sale of our business or assets.

    We may also use your personal information for other business purposes including management analysis, audit, forecasting, business planning and transactions, ensuring our compliance with applicable laws, regulatory requirements, and dealing with legal claims and related administrative activities and related records retention requirements. We may also use your personal information as required or permitted by law enforcement, other government agency requests or court orders.

    We may anonymise your personal information and use it as part of aggregated non personal information for research, statistical and other purposes (such as improving our website, products and services) or measuring the effectiveness of our advertising.

    In addition, we may hire service providers to perform services on our behalf, such as such as advertising and marketing, software, couriers and payment services. These service providers may use your personal information for the purposes set out in this Policy including, for example, to complete your order or enable offers, advertising or other promotional activity about our products and services to be provided to you, or to provide you with aftercare services. We will provide these service providers with only the information necessary for them to provide the services to Roots. Roots prohibits service providers from using or disclosing personal information for purposes other than to facilitate and carry out those services. We will strive to protect personal information disclosed to them by contractual agreements requiring that they adhere to applicable privacy laws, confidentiality and security procedures and protections that are, at a minimum, equivalent to those employed by Roots.

    4. With whom does Roots share your personal information?

    We may disclose your personal information to third parties as follows:

    • with your consent;
    • government authorities, law enforcement and regulatory authorities where required or permitted by law;
    • for debt collection purposes;
    • for loss and fraud prevention purposes; and
    • other entities (including actual or prospective buyers and our affiliates) in the event that Roots is involved in a bankruptcy, merger, reorganization or sale of any of its businesses and/or assets.

    5. Personalized banner/targeted advertising

    If you browse our website, you may receive personalised banner/targeted advertisements while browsing other websites. Through our advertising we try to provide you with information on products and offers which are relevant to you.. This service is provided by Roots via a reputable service provider, who uses 'cookies' or similar tools placed on your computer or other device (see further information on the use of cookies in the section below).

    It is worth noting that the social media networks who may provide advertising about our products and services to you may also process some of your personal information in their own capacity (for example when carrying out their own targeted advertising). Roots is not responsible for the processing of your personal information by any social media networks, when acting in their own capacity and not as a service provider to Roots. Therefore, please refer to the privacy policies of the relevant Social Media Channels for further details on how your personal information will be used by them.

    6. Use of Cookies

    We may use cookies and similar tools in order to provide a better service or identify which pages on our website and social media networks are of special interest. A cookie is a small piece of information which a website stores via your web browser on your computer or other device either during your visit to our website or which can later be retrieved on subsequent visits to our website. The main objective is to identify users and personalise their visit by customising web pages for them, for example, by remembering your log-in name or preferred language. Cookies cannot be read by a website other than the one for which it is set. Our cookies will never contain information that will enable anyone to contact you via telephone, e-mail, or any other means. As noted in the section above, third party websites may also use cookies to show you advertisements about our products on those third party sites. You can adjust your web browser settings to inform you when cookies are set and to prevent cookies from being set or used to track your browsing online. Depending on your browser, you may find those options under the browser’s menu tabs for tools, options, settings, preferences or similar tabs. Please note that although our website will respect your browser settings, Roots is not able to process requests to disable cookies on your device because we cannot control those settings.

    7. Marketing Choices

    From time to time, Roots will send you special offers and announcements by email, post, telephone, text message, through social media networks, or other means. You can unsubscribe from receiving these offers at any time by clicking on the Unsubscribe link in the message you’ve received or contacting onlineservice@roots.com.

    If you have asked us to stop sending marketing offers via e-mail or text message and this hasn't happened, it may be because the email address or phone number to which we are sending them is not the same as the address or number you sent your request from. Please check the address we are using and include this information in your request. The easiest way to do this is to return to us the whole of the unwanted email. If you still experience problems please contact the Roots Privacy Office.

    8. Withdrawing Consent

    You may choose to withdraw your consent to the collection, use and disclosure of your personal information at any time, unless legal or contractual reasons prevent you from doing so. However, if you withdraw your consent, we may be unable to offer or provide you with certain goods and services.

    If you would like to withdraw your consent or modify your preferences, please contact the Roots Privacy Office.

    9. What do we do to safeguard personal information?

    We have instituted safeguards to check that our internal procedures meet our stated policies. We also use all efforts reasonably necessary to be sure that our service providers agree to protect personal information that they must access in order to provide those services. Internally, we limit access to personal information about you to only those employees who need that information to provide products or services to you or in order to do their jobs.

    Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone, not to reuse passwords for different accounts, and to notify us if you believe your password has been compromised.

    Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our website and/or social medial channels. Any transmission is at your own risk. Once we have received your personal information, we will use strict procedures and security features to try to prevent unauthorised access.

    10. Storage of US data in the US

    The website is operated in the United States. If you are located outside of the United States, you should be aware that we will collect, process, and maintain your information in the United States. By using the website, accessing the website or providing any information through the website, you consent to the transfer of your information to the United States, which may not offer the same level of privacy protection that would be required by your home country, and to the processing and maintaining of that information as described in this Privacy Policy.

    11. How do we retain your personal information?

    We may retain your personal information and any anonymized information, as well as any other information, including but not only, any content you may have provided to us, in our internal databases and systems, but subject to the terms and conditions of this Privacy Policy. Even so, we have no obligation to you to retain any information about you or any of your content.

    You agree that we are not liable to you in any way for removing, retaining, or failing to remove or retain any of your information or content and, to the fullest extent permitted by law, you waive all claims against us and release us from all liability in connection with any of our acts or omissions in regard to your information and content.

    12. Links to other Websites

    We may offer links to third party websites. However, we are not responsible for the content or information collection policies of third party websites. If you visit a third party website, we advise you to review their privacy and other policies. We do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to the third party websites.

    13. Changes to this Policy

    We review and update our policies and procedures as required to keep current with rules and regulations, new technologies, standards and customer concerns. Our Privacy Policy may therefore change from time to time; the current version of the Roots Privacy Policy will always be posted on our website.

    14. Access to your personal information

    We respect your right to access and correct your personal information. If you wish to update your personal information, please contact the Roots Privacy Office.

    CALIFORNIA RESIDENTS

    If you are a California resident and have an established business relationship with us, you can request a notice disclosing the categories of personal information we have shared with third parties, for the third parties’ direct marketing purposes, during the preceding calendar year. To request a notice, please submit your request to Roots, Attn: Roots Privacy Office, 1400 Castlefield Avenue, Toronto ON M6B 4C4 Canada. Please allow 30 days for a response.

    If you are a California resident under 18 years old and you have registered for an account through the Website, you can request that we remove content or information that you have posted to our Websites. Note that fulfilment of the request may not ensure complete or comprehensive removal (e.g., if the content or information has been reposted by another user). To request removal of content or information, please email privacy@roots.com or call +1 416 781 3574.

    15. Concerns or Questions

    If you have any questions, wish to access, update or delete information, wish to opt out of receiving future communications, or have questions about this Policy, please contact us online at privacy@roots.com, or at Roots Canada 1400 Castlefield Avenue, Toronto, ON M6B 4C4 attn: Roots Privacy Office.

  • EU Privacy Policy

    Updated: October 9, 2018

    Roots Corporation takes our relationship with all our customers seriously, and this includes how we handle your personal information. Roots is committed to meeting the requirements of all relevant European laws regarding privacy.

    This Policy sets out the ways we collect, use and share your personal information. If you would prefer your personal data was not used in the manner described in this policy, you should not use our websites or services.

    This Policy sets out the ways we collect, use and share your personal information.

    This Policy addresses:

    1. 1. What is personal information?
    2. 2. How do we collect your personal information?
    3. 3. How do we use information about you?
    4. 4. With whom does Roots share your personal information?
    5. 5. Legal basis for processing your personal data
    6. 6. Your rights
    7. 7. Personalized banner / targeted advertising
    8. 8. Use of Cookies
    9. 9. Withdrawing consent
    10. 10. What do we do to safeguard personal information?
    11. 11. Storage of personal data
    12. 12. How do we retain your personal information?
    13. 13. Links to other websites
    14. 14. Changes to this Policy
    15. 15. Updating your personal information
    16. 16. Concerns or questions

    1. What is personal information?

    Personal information is information about you, that can be used to identify you. When you interact with Roots, in store or online at Roots.com (the “Website”) and via Roots branded social media channels, we may collect personal information such as:

    • your full name, age, date of birth and gender;
    • your billing and delivery postal addresses, phone (including mobile phone) and e-mail details;
    • where you have chosen to register a user account with us, your user name and password;
    • your communication and shopping preferences;
    • details regarding your browsing on our website and shopping activities;
    • your interests, feedback and survey responses;
    • information about the device on which you have accessed our website, including your IP address, operating system and browser type;
    • your location;
    • any other correspondence with us; and
    • other personal information (such as suggestions, inquiries, feedback, photographs, messages or other materials) ("User Content") that you post, e-mail, share, reproduce or otherwise make available to us.

    2. How do we collect your personal information?

    Submitted Information

    This is personal information which you provide to us. Personal information is primarily collected directly from you, such as information provided to us through our website, mobile applications, social media channels or in store, and other means of communication.

    Personal information which you provide to us will (depending on the circumstances) include:

    • contact details (such as your name, address, email address and telephone number);
    • demographic information (such as age and/or other information that may identify you as an individual);
    • password and other authentication information;
    • responses to any customer satisfaction surveys or market research and other User Content (unless these are provided anonymously);
    • financial and credit card information; and
    • your marketing preferences

    Additional Information

    We may also collect personal information about you in the following ways.

    • Information transmitted on the Website. When you visit our Website, we may also collect information from you automatically, for example using cookies and other similar technologies. A cookie is a small file of letters and numbers that we may set on your device. You can find more information about the individual cookies we use and the purposes for which we use them in under the section 8 (Use of Cookies) below. This type of information may include the following:
      • information about your device, operating system and IP address;
      • your login information;
      • browser type and version;
      • information about your visit, including URL, clickstream (i.e. your journey to, through and from our site), length of visits to certain pages, and page interaction information;
    • Information from other Roots’ websites and social media channels. From your use of other Roots websites, social media networks (Facebook, Instagram, Pinterest, Twitter, YouTube, Yelp, Snapchat and Google) you participate in; For example, you may also choose to participate in a third party application or feature (such as one of our Facebook or Twitter applications or a similar application or feature on a third party website) through which you allow us to collect (or the third party to share) information about you, such as details of your friends/connections, "likes", comments you have shared, groups and location. In addition, we may receive information about you if other users of a third party website give us access to their profiles and your personal information is accessible through your friends'/connections´ web page, profile page, or similar page on a Social Media Channel or other third party website or interactive service.
    • Third party service providers. From such third party service providers we used to deliver our Website and services;
    • Government or regulators. From government, tax or law enforcement agencies and , where applicable, fraud detection agencies.
    • Referrals. From individuals who have indicated you have agreed for them to provide your personal information. For example, if you are on another website and you opt-in to receive information from Roots, that website may submit to us your email address and other information about you so that we may contact you as requested.
    • From other customers. We sometimes receive personal information about other individuals from customers who wish to send our products as gifts. In these circumstances, we will use and store that personal information for the purpose of completing the customer’s order.

    The Website is not intended for children under the age of 13 and Roots does not knowingly collect personal information from children in this age group.

    We will indicate where any personal information we have requested is mandatory or optional. We will also explain the consequences should you decide not to provide information which we have indicated is mandatory. In some cases, this may mean we are unable to provide you with a certain service or product.

    3. How do we use information about you?

    Roots will use your personal information for the purposes described in this policy or explained to you at the time it is collected. If we want to use your personal information for new or additional purposes, we will provide you with notice of these purposes and give you an opportunity to provide or withdraw your consent.

    We may use your personal information in connection with the purposes for which you have provided it. This may include:

    • to provide you with the information, products and services you have requested when you make purchases or returns on our website, mobile applications, over the telephone or in-store;
    • to respond and/or deal with your request or enquiry, including as a result of searches on our website;
    • to enter you in contests and notify you of results if you have agreed to participate in such contests;
    • to administer our website, mobile applications and social media networksand personalize content for you;
    • for internal record keeping;
    • to provide direct or other marketing, provided that we have the requisite permission to do so, including combing your personal data with third party analytics data to inform our marketing strategy;
    • to record and update your marketing preferences;
    • to personalize offers, promotions and advertising provided to you based on our understanding of your browsing and shopping habits or purchase history;
    • to register you for certain features on our website;
    • to assess, improve and tailor our products and services to you;
    • to improve our products and services (for example to speed up your searches, recognise you when you return to our websites, respond to your feedback, respond to problems, and tailor what we do to suit your requirements further);
    • in relation to User Content, on our websites, social media channels and marketing communications to promote our products, provided in each case we have your permission;
    • where necessary as part of any restructuring of Roots or sale of our business or assets.

    We may also use your personal information for other business purposes including management analysis, audit, forecasting, business planning and transactions, ensuring our compliance with applicable laws, regulatory requirements, and dealing with legal claims and related administrative activities and related records retention requirements. We may also use your personal information as required or permitted by law enforcement, other government agency requests or court orders.

    We may anonymise your personal information and use it as part of aggregated non personal information for research, statistical and other purposes (such as improving our website, products and services) or measuring the effectiveness of our advertising.

    4. Legal Basis for processing your personal data

    We will only process your personal information where we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and use your personal information. In almost every case the legal basis will be one of the following:

    • Consent: For example, where you have provided your consent to receive certain marketing from us. You can withdraw your consent at any time, including by clicking on the "unsubscribe" link at the bottom of any marketing email we send you.
    • Our legitimate business interests: Where it is necessary for us to understand our customers, promote our services and operate effectively as a premium manufacturer and retailer provided in each case that this is done in a legitimate way which does not unduly affect your privacy and other rights. For example, we will rely on this legal basis when we conduct certain market analysis to understand our customers in sufficient detail so we can create new services and improve the profile of our brand.
    • Performance of a contract with you: For example, where you have purchased goods from our website and we need to use your contact details and payment information in order to process your order and send the goods to you.
    • Compliance with law: Where we are subject to a legal obligation and need to use your personal information in order to comply with that obligation.

    5. With whom does Roots share your personal information?

    Our service providers. We may share your personal information with third party companies who are our suppliers, business partners and service providers (such as advertising and marketing agencies, social media agencies and platforms, software providers and service providers such as couriers, customer services and payment service providers) for the purposes set out in this Policy including for example to complete your order, to facilitate your experience of our websites, enable offers, advertising or other promotional activity or materials about our products and services to be provided to you, to operate recognition or reward programmes, respond to your queries and / or to provide you with certain services such as aftercare services. We will provide these service providers with only the information necessary for them to provide the services to Roots. Roots prohibits service providers from using or disclosing personal information for purposes other than to facilitate and carry out those services. We will strive to protect personal information disclosed to them by contractual agreements requiring that they adhere to applicable privacy laws, confidentiality and security procedures and protections that are, at a minimum, equivalent to those employed by Roots.

    Other third parties. We may also share your information to other third parties as follows:

    • any selected third party that you consent to our sharing your information with for marketing purposes;
    • government authorities, law enforcement and regulatory authorities where required or permitted by law;
    • for debt collection purposes;
    • for loss and fraud prevention purposes; and
    • other entities (including actual or prospective buyers and our affiliates) in the event that Roots is involved in a bankruptcy, merger, reorganization or sale of any of its businesses and/or assets.

    6. Your rights

    You have certain rights in relation to your personal information. These include: the right to object to the processing of your information for certain purposes, the right to access your personal information, and the ability to erase, restrict or receive a machine-readable copy of your personal information.

    We will handle any request to exercise your rights in accordance with applicable law and any relevant legal exemptions. If you wish to exercise any of these rights please contact us using the contact details below.

    You may also have the right to complain to a data protection authority if you think we have processed your personal information in a manner which is unlawful or breaches your rights. If you have such concerns we request that you initially contact us (using the contact details below) so that we can investigate, and hopefully resolve, your concerns.

    7. Personalized banner/targeted advertising

    If you browse our website, you may receive personalised banner/targeted advertisements while browsing other websites. Through our advertising we try to provide you with information on products and offers which are relevant to you. This service is provided by Roots via a reputable service provider, who uses 'cookies' or similar tools placed on your computer or other device (see further information on the use of cookies in the section below).

    It is worth noting that the social media networks who may provide advertising about our products and services to you may also process some of your personal information in their own capacity (for example when carrying out their own targeted advertising). Roots is not responsible for the processing of your personal information by any social media networks, when acting in their own capacity and not as a service provider to Roots. Therefore, please refer to the privacy policies of the relevant Social Media Channels for further details on how your personal information will be used by them.

    8. Use of Cookies

    We use cookies and similar tools in order to provide a better service or identify which pages on our website and social media networks are of special interest. A cookie is a small piece of information which a website stores via your web browser on your computer or other device either during your visit to our website or which can later be retrieved on subsequent visits to our website. The main objective is to identify users and personalise their visit by customising web pages for them, for example, by remembering your log-in name or preferred language. Cookies cannot be read by a website other than the one for which it is set. Our cookies will never contain information that will enable anyone to contact you via telephone, e-mail, or any other means. As noted in the section above, third party websites may also use cookies to show you advertisements about our products on those third party sites. You can adjust your web browser settings to inform you when cookies are set and to prevent cookies from being set or used to track your browsing online. Depending on your browser, you may find those options under the browser’s menu tabs for tools, options, settings, preferences or similar tabs. Please note that although our website will respect your browser settings, Roots is not able to process requests to disable cookies on your device because we cannot control those settings. For more information about how to reject cookies using your internet browser settings please consult the “Help” section of your internet browser (or alternatively visit http://www.aboutcookies.org).

    The names of the cookies used on our website and the purposes for which these cookies are used are set out in the table below:

    Cookie Name Purpose Duration
    SiteID Stores user preferred site, and redirects user to preferred store as long as this cookie is present Ranges from session to 7 days.
    emailHopUpUS Stores user preferred site, and redirects user to preferred store as long as this cookie is present Ranges from 7 days to 365 days
    emailHopUpCA Restricts users from seeing email hop in CA site, until this cookie is removed. Ranges from 7 days to 365 days
    exitIntent Restricts users from seeing email hop in CA site, until this cookie is removed. Ranges from 7 days to 365 days
    viewedPromo Will be created once user opens promo notification tab on header dropdown, and then restricts user from seeing notification count until cookie is removed or fresh promos are loaded. 30 days
    latitude Temporarily stores user latitude until it is moved to session storage's userLocation variable. session
    longtitude Temporarily stores user longitude until it is moved to session storage's userLocation variable. session
    linkshareCookie To store date of affiliation and site ID. session

    9. Withdrawing Consent

    You may choose to withdraw your consent to the collection, use and disclosure of your personal information at any time, unless legal or contractual reasons prevent you from doing so. However, if you withdraw your consent, we may be unable to offer or provide you with certain goods and services.

    If you would like to withdraw your consent or modify your preferences, please contact the Roots Privacy Office.

    10. What do we do to safeguard personal information?

    We have instituted safeguards to check that our internal procedures meet our stated policies. We also use all efforts reasonably necessary to be sure that our service providers agree to protect personal information that they must access in order to provide those services. We use appropriate technological and operational security measures to protect your information against any unauthorised access or unlawful use, such as:

    • ensuring the physical security of our offices, warehouses or other sites;
    • ensuring the physical and digital security of our equipment and devices by using appropriate password protection [and encryption];
    • maintaining a data protection policy for, and delivering data protection training to, our employees; and
    • limiting access to your personal information to those in our company who need to use it in the course of their work.

    Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone, not to reuse passwords for different accounts, and to notify us if you believe your password has been compromised.

    Any payment transactions will be encrypted using SSL technology.

    Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our website and/or social medial channels. Any transmission is at your own risk. Once we have received your personal information, we will use strict procedures and security features to try to prevent unauthorised access.

    11. Storage of personal data

    The website is operated in Canada and the United States. If you are located in the European Economic Area (the “EEA”), you should be aware that we will collect, process, and maintain your information in Canada and the United States.

    Personal data may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

    Whenever we transfer information as described in the paragraph above, we will take steps which are reasonably necessary to ensure that adequate safeguards are in place to protect your personal information and to make sure it is treated securely and in accordance with this Policy. In these cases, we rely on approved data transfer mechanisms (such as the EU "Standard Contractual Clauses" and the EU-US "Privacy Shield") to ensure your information is subject to adequate safeguards in the recipient country.

    12. How do we retain your personal information?

    We take steps to ensure that the personal information that you provide is retained for only as long as it is necessary for the purpose for which it was collected. After this period it will be deleted or in some cases anonymised. For example, where you have made a purchase with us, we will keep a record of your purchase for the period necessary for invoicing, tax and warranty purposes. We may also keep a record of correspondence with you (for example if you have made a complaint) for as long as is necessary to protect us from a legal claim.

    We may retain your personal information and any anonymized information, as well as any other information, including but not only, any content you may have provided to us, in our internal databases and systems, but subject to the terms and conditions of this Privacy Policy. Even so, we have no obligation to you to retain any information about you or any of your content.

    Where we have collected the personal information based on your consent and we have no other lawful basis to continue with that processing, if you subsequently withdraw your consent then we will delete your personal information.

    13. Links to other Websites

    We may offer links to third party websites. However, we are not responsible for the content or information collection policies of third party websites. If you visit a third party website, we advise you to review their privacy and other policies. We do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to the third party websites.

    14. Changes to this Policy

    We review and update our policies and procedures as required to keep current with rules and regulations, new technologies, standards and customer concerns. Our Privacy Policy may therefore change from time to time; the current version of the Roots Privacy Policy will always be posted on our website.

    15. Updating your personal information

    It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. If you wish to update your personal information, please contact the Roots Privacy Office.

    16. Concerns or Questions

    If you have any questions, wish to access, update or delete information, wish to opt out of receiving future communications, or have questions about this Policy, please contact us online at privacy@roots.com, or at Roots Canada 1400 Castlefield Avenue, Toronto, ON M6B 4C4 attn: Roots Privacy Office.