Privacy Policy

This policy explains how Roots of Wonder (Amy Byrne, sole trader, Ireland) processes personal data in line with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

1. Who is the data controller?

Amy Byrne, trading as Roots of Wonder, is the data controller. You can contact us at hello@rootsofwonder.ie or 083 881 3982.

2. What data we collect

• Contact details — name, email address, phone number.
• Booking details — the workshop you booked, setting, group size, dietary or accessibility needs you choose to share.
• Payment information — processed directly by our payment provider; we do not store card details.
• Correspondence — the messages you send us.
• Website analytics — limited technical data (see our Cookie Policy).

3. Why we use it (lawful bases)

• Contract — to arrange, deliver and follow up on the workshop you booked.
• Legal obligation — for accounting, tax and child-safeguarding duties under the Children First Act 2015.
• Legitimate interests — running and improving our services and website.
• Consent — for optional emails, photography, or non-essential cookies. You can withdraw consent at any time.

4. Who we share it with

We only share personal data with trusted service providers who help us run the business:

• Calendly (scheduling) — see calendly.com/privacy.
• Our email, hosting and payment providers.
• Regulators or authorities where legally required.

We never sell your personal data. Where a provider is based outside the EEA, we rely on adequacy decisions or Standard Contractual Clauses to protect your data.

5. How long we keep it

Booking and financial records are kept for 6 years to meet Revenue requirements. General enquiries are deleted after 2 years of inactivity. You can ask us to delete your data sooner where we're not legally required to keep it.

6. Your rights under the GDPR

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased where possible;
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time;
• lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.

To exercise any right, email hello@rootsofwonder.ie.

7. Children's data

Workshops are aimed at adults. Where a child's information is shared with us (e.g. by a parent or educator) we only process it for the purpose it was shared and with the consent of a parent or guardian.

8. Security

We use reasonable technical and organisational measures to protect your data, including strong passwords, encrypted providers and limited access.

9. Changes

We may update this notice occasionally; the latest version will always live on this page.