Privacy policy

DraftWritten in plain English as a starting point. Have a lawyer review it before it goes live. Every [bracket] is a decision or fact we need from you.

Who we are

RootWright [legal entity name], [registered address], is the controller of personal data collected on rootwrightlms.com and in the beta programme. Contact: [[email protected]].

What we collect

• Beta applications: name, email, what you teach, the LMS you use, your role, and optionally your website and how you heard about us.
• Contact messages: name, email, topic and message.
• During the beta: your check-in and feedback answers, bug reports, your licence key and site address, and recordings of feedback calls if you agree to one being recorded.
• Newsletter: your email, and the date and wording of the consent you gave, including the double opt-in confirmation.
• Server logs: IP address and browser details, kept for [30 days] for security.
• Site analytics: page views counted without cookies and without identifying you. [Confirm tool, for example Plausible.]

Why, and on what legal basis

• Running the beta and replying to you: to take steps you asked for before entering an agreement (GDPR Article 6(1)(b)).
• Product news and launch offers: only with your consent (Article 6(1)(a)). Unticked by default; withdraw any time.
• Feedback calls: only with your separate consent.
• Keeping the site secure: our legitimate interest (Article 6(1)(f)).

How long we keep it

• Applications: [12 months] after the beta ends.
• Declined applications: [6 months], unless you ask to stay on the waitlist.
• Contact messages: [12 months].
• Newsletter: until you unsubscribe, plus a record of consent for [3 years].

Who we share it with

Only the services we use to run the beta, each under a data processing agreement: [email service], [CRM], [form tool], [hosting provider]. We never sell or rent your data.

Where a provider is outside the UK or EEA, transfers use [Standard Contractual Clauses or an adequacy decision].

Your rights

You can ask to see, correct, delete, restrict or export your data, object to how we use it, and withdraw consent at any time. Write to [[email protected]]; we reply within one month. You can also complain to your data protection authority.

Cookies

We don’t use tracking or advertising cookies. The site remembers your day or night setting in your own browser’s storage, which never leaves your device. [Confirm no other cookies are set by the theme or plugins.]

The plugin itself

RootWright LMS runs on your server. Your courses and your students’ data stay in your database, and you are the controller for them. [Confirm: the plugin sends no usage data unless you opt in, as WordPress.org requires.]

Changes to this policy

We’ll date every change at the top of this page and email beta testers about anything that affects them.