Effective Date: 15 June 2026

Last Updated: 15 June 2026

Bitroot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and disclose your information when you visit our website bitroot.space ("Website"). This policy complies with the UK GDPR and the Data (Use and Access) Act 2025.

1. Information We Collect
   
   • Personal Information: We may collect your name, email address, or other personal details only if you voluntarily provide them (e.g., via contact forms).
   • Non-Personal Information: We may collect technical data such as IP addresses, browser type, and device information to ensure website security and functionality.
2. Lawful Basis for Processing
   Under UK GDPR, we process your data based on the following lawful bases:
   • Legitimate Interests: To respond to your inquiries, maintain website security, and analyze usage for improvements.
   • Consent: For any optional communications or non-essential cookies where you have explicitly opted in.
3. How We Use Your Information
   We use your data strictly for the following purposes:
   • To provide, operate, and maintain the Website.
   • To respond to your inquiries or support requests.
   • To analyze Website usage and improve our content (using anonymized data where possible).
   • To comply with legal obligations and protect our rights.
4. Data Retention
   We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal requirements. Typically, inquiry data is retained for 12 months after our last communication, after which it is securely deleted unless a longer period is required by law.
5. Sharing Your Information
   We do not sell, rent, or trade your personal information. We may share your data only in the following cases:
   • If required by law, regulation, or legal process.
   • With trusted third-party service providers (e.g., hosting, email services) who assist in Website operations and are bound by confidentiality obligations. Some of these providers may be located outside the UK; we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.
6. Cookies and Tracking Technologies
   Our Website uses strictly necessary cookies to function. Any non-essential cookies (e.g., for analytics) are only placed on your device after you have provided explicit consent via our cookie banner. You can manage or withdraw your cookie settings at any time through your browser or our cookie preference center.
7. Third-Party Links
   The Website may contain links to external content or third-party platforms. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies.
8. Security
   We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Your Rights
   Under UK GDPR, you have the following rights regarding your personal data:
   • The right to access your data.
   • The right to rectify inaccurate data.
   • The right to erasure ("right to be forgotten").
   • The right to restrict processing.
   • The right to data portability.
   • The right to object to processing.
   • The right to withdraw consent at any time (where processing is based on consent).
   To exercise these rights, please contact us at bitroot-mentor@proton.me. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
10. Changes to This Policy
    We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated date will be posted at the top of this page. Your continued use of the Website after changes constitutes acceptance of the revised policy.