---
title: "Privacy policy | RootWright"
description: "How RootWright handles personal data on rootwright.com, and why your students’ data never leaves your own WordPress site."
canonical: "https://staging2.rootwrightlms.com/privacy/"
last_modified: "2026-11-04T10:38:39+00:00"
---

# Privacy policy

What we collect on this site and in the beta, why, for how long, and how to get it deleted.

Last updated [date]

**Draft** Written in plain English as a starting point. Have a lawyer review it before it goes live. Every [bracket] is a decision or fact we need from you.

## Who we are

RootWright [legal entity name], [registered address], is the controller of personal data collected on rootwrightlms.com and in the beta programme. Contact: [privacy@rootwrightlms.com].

## What we collect

- **Beta applications:** name, email, what you teach, the LMS you use, your role, and optionally your website and how you heard about us.
- **Contact messages:** name, email, topic and message.
- **During the beta:** your check-in and feedback answers, bug reports, your licence key and site address, and recordings of feedback calls if you agree to one being recorded.
- **Newsletter:** your email, and the date and wording of the consent you gave, including the double opt-in confirmation.
- **Server logs:** IP address and browser details, kept for [30 days] for security.
- **Site analytics:** page views counted without cookies and without identifying you. [Confirm tool, for example Plausible.]

## Why, and on what legal basis

- **Running the beta and replying to you:** to take steps you asked for before entering an agreement (GDPR Article 6(1)(b)).
- **Product news and launch offers:** only with your consent (Article 6(1)(a)). Unticked by default; withdraw any time.
- **Feedback calls:** only with your separate consent.
- **Keeping the site secure:** our legitimate interest (Article 6(1)(f)).

## How long we keep it

- Applications: [12 months] after the beta ends.
- Declined applications: [6 months], unless you ask to stay on the waitlist.
- Contact messages: [12 months].
- Newsletter: until you unsubscribe, plus a record of consent for [3 years].

## Who we share it with

Only the services we use to run the beta, each under a data processing agreement: [email service], [CRM], [form tool], [hosting provider]. We never sell or rent your data.

Where a provider is outside the UK or EEA, transfers use [Standard Contractual Clauses or an adequacy decision].

## Your rights

You can ask to see, correct, delete, restrict or export your data, object to how we use it, and withdraw consent at any time. Write to [privacy@rootwrightlms.com]; we reply within one month. You can also complain to your data protection authority.

## Cookies

We don’t use tracking or advertising cookies. The site remembers your day or night setting in your own browser’s storage, which never leaves your device. [Confirm no other cookies are set by the theme or plugins.]

## The plugin itself

RootWright LMS runs on your server. Your courses and your students’ data stay in your database, and you are the controller for them. [Confirm: the plugin sends no usage data unless you opt in, as WordPress.org requires.]

## Changes to this policy

We’ll date every change at the top of this page and email beta testers about anything that affects them.