Privacy policy

What we collect

• When you order: your name, mobile number, delivery address, district, optional email and delivery notes, and what you bought.
• When you ask us to notify you: your mobile number and what you’d like to hear about (for example the Club or new books).
• To stop spam: a scrambled form of your internet address, kept for at most a day, and a check by Cloudflare Turnstile that you’re a person.
• If you allow analytics cookies: which pages you visit and what you add to your cart, through Google Analytics. We never send Google your name, number or address.

Your cart and your reading tracker are saved only in your own browser.

Why we use it

• To deliver your order, take payment and contact you about it.
• To send the updates you asked for. Each message tells you how to stop them.
• To protect the shop from fake orders.
• To understand which pages help parents, if you allowed analytics.

We don’t sell your details or use them for advertising.

Who else sees it

• Our delivery partner gets your name, number and address to bring you your box.
• Supabase stores our orders and sign-ups. Cloudflare hosts the website and runs the spam check.
• Google Analytics receives anonymous browsing data, only if you allow it.

How long we keep it

We keep order records for 6 years for our accounts. We keep notify sign-ups until you ask us to stop or the thing you signed up for has launched.

Your choices

You can ask us to show, correct or delete the details we hold about you, or to stop messaging you. Contact us at hello@readroots.lk or 07X XXX XXXX and we’ll reply within 14 days.

You can change your analytics choice at any time: analytics is currently off.

Questions

See how to reach us.