Privacy Policy
Privacy Policy
Last updated: 2 June 2026
This Privacy Policy explains how Root Health Lab ("Root", "we", "us", "our") collects, uses, and protects your personal information when you use our website at roothealthlab.com and our symptom check service.
We take your privacy seriously. This policy is written in plain English. If anything is unclear, contact us at hello@roothealthlab.com.
Who we are
Root Health Lab is an evidence-based functional health service operating in the United Kingdom. We provide a free symptom check that generates a personalised report identifying possible root causes of common health concerns, alongside curated recommendations for supplements and tests.
For the purposes of UK GDPR, the data controller is:
Alexander Stokes 6 Clarendon Place, Royal Leamington Spa, CV32 5QN Contact: hello@roothealthlab.com
What information we collect
When you use our symptom check, we collect:
Your email address
Your responses to the symptom check questions (including symptoms, duration, when they occur, lifestyle factors, things you have tried, age range, and sex assigned at birth)
Your marketing preferences (whether you opted in to receive emails from Root)
Technical information such as your IP address, browser type, and pages visited, collected automatically by our hosting and analytics providers
We do not collect:
Your full name
Your address
Payment information (we do not process payments)
Health records, identity documents, or other sensitive identifiers
How we use your information
We use your information to:
Generate your personalised symptom report
Send your report to your email address
If you opted in, send you occasional Root emails covering root cause notes, gentle recommendations, and updates from the Root Project
Improve our service by analysing patterns across submissions in an anonymised way
Comply with our legal obligations
Legal basis for processing
Under UK GDPR, we rely on the following legal bases:
Explicit consent — for processing health-related information to generate your report, and for sending you marketing emails where you have opted in.
Legitimate interest — for improving our service and protecting it from misuse.
Legal obligation — where we are required to retain or share data by law.
You can withdraw your consent at any time by emailing hello@roothealthlab.com or unsubscribing via the link in any marketing email.
How your information is processed
To deliver your report, your information passes through the following services:
Tally — collects your initial responses. See tally.so/privacy.
Make — passes your data securely between systems. See make.com/en/privacy-notice.
Anthropic — generates your personalised report using Claude, an AI model. Anthropic processes your data to deliver this service and does not use it to train their AI models. See anthropic.com/legal/privacy.
[Email provider] — delivers your report to your inbox.
Framer — hosts our website. See framer.com/legal/privacy-policy.
These services act as data processors on our behalf and process your information only as instructed by us.
International transfers
Some of our service providers — notably Anthropic, which is based in the United States — process your data outside the UK and the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms approved by the UK Information Commissioner's Office.
Data retention
We retain your information for the following periods:
Symptom check responses and reports — 24 months from submission, after which they are deleted unless you have an active relationship with us (such as an ongoing marketing subscription).
Email address and marketing preferences — for as long as you remain subscribed, plus 12 months after you unsubscribe for record-keeping.
Anonymised analytical data — retained indefinitely for service improvement.
You can request earlier deletion at any time (see "Your rights" below).
Your rights under UK GDPR
You have the following rights:
Access — request a copy of the information we hold about you.
Rectification — ask us to correct anything that is inaccurate.
Erasure — ask us to delete your information ("right to be forgotten").
Restriction — ask us to limit how we use your information.
Portability — receive your information in a structured, machine-readable format.
Objection — object to our processing of your information, including for marketing.
Withdraw consent — withdraw any consent you have given us at any time.
To exercise any of these rights, email us at hello@roothealthlab.com. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office:
Website: ico.org.uk
Phone: 0303 123 1113
Cookies and similar technologies
Our website uses minimal cookies for essential functionality and basic analytics. We do not use advertising or tracking cookies. You can control cookies through your browser settings.
Security
We take reasonable steps to protect your information, including:
Secure HTTPS connections across our website
Trusted third-party service providers with their own security standards
Limited internal access to your data on a need-to-know basis
However, no system is completely secure, and we cannot guarantee absolute security of information transmitted online.
Marketing emails
If you opted in, we will send you occasional emails covering Root's root cause notes, gentle recommendations, and updates from the Root Project. You can unsubscribe at any time using the link in every email, or by emailing us directly.
Affiliate disclosure
Some of the supplements and tests we recommend are linked through affiliate partners, which means we may earn a commission if you purchase through our links. This does not affect what we recommend — our picks are chosen on merit. The cost to you is unchanged.
Children
Root's service is intended for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe we have collected information from a child, contact us immediately so we can delete it.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will indicate when changes were made. Material changes will be communicated to subscribed users by email.
Contact
For any questions about this policy or your information:
Email: hello@roothealthlab.com 6 Clarendon Place, Royal Leamington Spa, CV32 5QN
This Privacy Policy explains how Root Health Lab ("Root", "we", "us", "our") collects, uses, and protects your personal information when you use our website at roothealthlab.com and our symptom check service.
We take your privacy seriously. This policy is written in plain English. If anything is unclear, contact us at hello@roothealthlab.com.
Who we are
Root Health Lab is an evidence-based functional health service operating in the United Kingdom. We provide a free symptom check that generates a personalised report identifying possible root causes of common health concerns, alongside curated recommendations for supplements and tests.
For the purposes of UK GDPR, the data controller is:
Alexander Stokes 6 Clarendon Place, Royal Leamington Spa, CV32 5QN Contact: hello@roothealthlab.com
What information we collect
When you use our symptom check, we collect:
Your email address
Your responses to the symptom check questions (including symptoms, duration, when they occur, lifestyle factors, things you have tried, age range, and sex assigned at birth)
Your marketing preferences (whether you opted in to receive emails from Root)
Technical information such as your IP address, browser type, and pages visited, collected automatically by our hosting and analytics providers
We do not collect:
Your full name
Your address
Payment information (we do not process payments)
Health records, identity documents, or other sensitive identifiers
How we use your information
We use your information to:
Generate your personalised symptom report
Send your report to your email address
If you opted in, send you occasional Root emails covering root cause notes, gentle recommendations, and updates from the Root Project
Improve our service by analysing patterns across submissions in an anonymised way
Comply with our legal obligations
Legal basis for processing
Under UK GDPR, we rely on the following legal bases:
Explicit consent — for processing health-related information to generate your report, and for sending you marketing emails where you have opted in.
Legitimate interest — for improving our service and protecting it from misuse.
Legal obligation — where we are required to retain or share data by law.
You can withdraw your consent at any time by emailing hello@roothealthlab.com or unsubscribing via the link in any marketing email.
How your information is processed
To deliver your report, your information passes through the following services:
Tally — collects your initial responses. See tally.so/privacy.
Make — passes your data securely between systems. See make.com/en/privacy-notice.
Anthropic — generates your personalised report using Claude, an AI model. Anthropic processes your data to deliver this service and does not use it to train their AI models. See anthropic.com/legal/privacy.
[MailerLite] — delivers your report to your inbox.
Framer — hosts our website. See framer.com/legal/privacy-policy.
These services act as data processors on our behalf and process your information only as instructed by us.
International transfers
Some of our service providers — notably Anthropic, which is based in the United States — process your data outside the UK and the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms approved by the UK Information Commissioner's Office.
Data retention
We retain your information for the following periods:
Symptom check responses and reports — 24 months from submission, after which they are deleted unless you have an active relationship with us (such as an ongoing marketing subscription).
Email address and marketing preferences — for as long as you remain subscribed, plus 12 months after you unsubscribe for record-keeping.
Anonymised analytical data — retained indefinitely for service improvement.
You can request earlier deletion at any time (see "Your rights" below).
Your rights under UK GDPR
You have the following rights:
Access — request a copy of the information we hold about you.
Rectification — ask us to correct anything that is inaccurate.
Erasure — ask us to delete your information ("right to be forgotten").
Restriction — ask us to limit how we use your information.
Portability — receive your information in a structured, machine-readable format.
Objection — object to our processing of your information, including for marketing.
Withdraw consent — withdraw any consent you have given us at any time.
To exercise any of these rights, email us at hello@roothealthlab.com. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office:
Website: ico.org.uk
Phone: 0303 123 1113
Cookies and similar technologies
Our website uses minimal cookies for essential functionality and basic analytics. We do not use advertising or tracking cookies. You can control cookies through your browser settings.
Security
We take reasonable steps to protect your information, including:
Secure HTTPS connections across our website
Trusted third-party service providers with their own security standards
Limited internal access to your data on a need-to-know basis
However, no system is completely secure, and we cannot guarantee absolute security of information transmitted online.
Marketing emails
If you opted in, we will send you occasional emails covering Root's root cause notes, gentle recommendations, and updates from the Root Project. You can unsubscribe at any time using the link in every email, or by emailing us directly.
Affiliate disclosure
Some of the supplements and tests we recommend are linked through affiliate partners, which means we may earn a commission if you purchase through our links. This does not affect what we recommend — our picks are chosen on merit. The cost to you is unchanged.
Children
Root's service is intended for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe we have collected information from a child, contact us immediately so we can delete it.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will indicate when changes were made. Material changes will be communicated to subscribed users by email.
Contact
For any questions about this policy or your information:
Email: hello@roothealthlab.com 6 Clarendon Place, Royal Leamington Spa, CV32 5QN
