Last updated: October 27, 2026
This Privacy Policy explains how Gentle Root LLC ("Gentle Root", "we", "us" or "our") collects, uses and shares personal information when you visit gentlerootbaby.com (the "Site"), buy from us or contact us. We are a Delaware limited liability company at 8 The Green, Ste A, Dover, DE 19901, USA.
1. Information we collect
Information you give us
- Contact and order details: name, email address, phone number, shipping and billing address, and order history.
- Payment details: handled directly by our payment processors. We do not store your full card number.
- Account details: login email and password if you create an account.
- Information about your child's stage: we do not ask for your child's age or name. If you choose to tell us your child's age or stage, for example in an email, we use it only to answer you and recommend products.
- Messages: what you send us by email or through our contact form, including photos.
- Reviews and surveys: if you choose to send them.
Information collected automatically
- Device and usage data: IP address, browser and device type, pages viewed, links clicked, referring site, and approximate location based on IP.
- Cookies, pixels and similar technologies: see Section 4.
Information from others
We may receive information from our service providers (for example payment, shipping and fraud prevention partners) and from advertising platforms about how you interacted with our ads.
2. How we use your information
- To process and ship your orders, handle returns and refunds, and send order and shipping updates.
- To answer your questions and provide customer support.
- To contact you about product safety notices or recalls.
- To send marketing emails if you have agreed to receive them (see Section 5).
- To show you relevant ads and measure how our ads perform (see Section 4).
- To improve the Site, our products and our services.
- To prevent fraud, keep the Site secure, and comply with our legal obligations.
3. How we share your information
We do not sell your personal information for money. We share it only as described here:
- Shopify: our store runs on Shopify, which hosts the Site and processes your order data on our behalf. You can read Shopify's Privacy Policy.
- Payment processors: to process your payment. We use Shopify Payments (cards, Apple Pay, Google Pay and Shop Pay) and PayPal.
- Shipping and fulfillment partners: to deliver your order: our U.S. warehouse and tracked carriers such as USPS, UPS and DHL.
- Email and customer service tools: to send messages and handle support. We send emails with Shopify Email.
- Advertising and analytics partners: such as Meta (Facebook and Instagram) and Google (see Section 4).
- Legal and safety reasons: when required by law, to respond to legal requests, or to protect the rights, property or safety of our customers, our business or others.
- Business transfers: if our business is sold or reorganized, personal information may be transferred as part of that transaction.
4. Cookies, pixels and advertising
We and our partners use cookies, pixels and similar technologies to keep your cart working, remember your preferences, understand how the Site is used, and show and measure ads. These include:
- Shopify cookies: needed for the store, cart and checkout to work.
- Analytics: such as Google Analytics and Shopify analytics, to understand traffic and improve the Site.
- Advertising pixels: such as the Meta Pixel and Conversions API, and Google Ads tags. These let Meta and Google see that you visited our Site or made a purchase so they can show you relevant ads and tell us how our ads perform.
Under some state laws, sharing data with advertising partners for cross-context behavioral advertising may be considered a "sale" or "sharing" of personal information. You can opt out at any time on our Do Not Sell or Share My Personal Information page. We also honor Global Privacy Control (GPC) signals sent by your browser as a request to opt out. Our cookie banner and these choices are managed with Shopify's consent tools.
You can also control cookies in your browser settings, and manage ad preferences in your Meta and Google account settings. Blocking some cookies may affect how the Site works.
5. Email and text messages
Email: we send transactional emails about your orders. With your consent, we also send marketing emails. You can unsubscribe at any time using the link in any marketing email.
Text messages (SMS): we do not send marketing text messages at this time.
6. Children's privacy
Our products are made for babies and toddlers, but the Site is meant for adults. We do not knowingly collect personal information from children under 13, and the Site is not directed to children. Information about a child's age or stage is provided by a parent or caregiver and is used only to answer you and recommend products. If you believe a child under 13 has given us personal information, please contact us and we will delete it.
7. Your privacy rights
Depending on where you live, including California and other states with consumer privacy laws (such as Colorado, Connecticut, Virginia, Texas, Oregon and others), you may have the right to:
- Know and access the personal information we have about you, and get a copy.
- Delete personal information we have collected from you.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of your personal information and of targeted advertising, using our Do Not Sell or Share page or a GPC signal.
- Limit the use of sensitive personal information, where it applies. We do not use sensitive personal information to infer characteristics about you.
- Appeal our decision on your request, where your state provides that right.
- Not be discriminated against for exercising your rights.
United Kingdom, European Union and other countries: if you live in the UK, the EU or another country with data protection laws, you may have rights under those laws, for example to access, correct or delete your personal information, to object to or restrict some uses, to receive a copy in a portable format, to withdraw consent, and to complain to your local data protection authority. You can make these requests in the same way described below.
How to make a request: email gentle.root.project@gmail.com with the subject "Privacy request" and tell us which right you want to use. We will verify your request by matching information you give us with the information we have, and respond within the time required by law (usually 45 days). You may use an authorized agent, who must show us your written permission. To appeal a decision, reply to our response with the subject "Privacy appeal".
Categories under California law: in the last 12 months we have collected identifiers, customer records, commercial information, internet or network activity, approximate geolocation, and inferences about product preferences, from the sources and for the purposes described above. We have disclosed identifiers, commercial information and internet activity to advertising and analytics partners in a way that may be a "sale" or "sharing". We do not knowingly sell or share the personal information of consumers under 16.
8. How long we keep information
We keep personal information for as long as we need it for the purposes in this policy: we keep order records for 7 years for tax and accounting purposes, and marketing data until you unsubscribe or ask us to delete it. When we no longer need it, we delete or anonymize it.
9. Security
We use reasonable technical and organizational measures to protect your personal information, and our payment processors are responsible for securing card data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. International transfers
We sell to customers in the United States, the United Kingdom, the European Union and the other countries listed in our Shipping Policy. We are based in the United States, so if you order from another country, your information may be transferred to and processed in the United States. Our service providers may also process information in other countries where they or their subprocessors operate, and our team may access it from outside the United States. Where required, we rely on standard contractual clauses for these transfers. When information is transferred, we take steps to keep it protected as described in this policy.
11. Third-party links
The Site may link to other websites, such as official safety resources. We are not responsible for their privacy practices, so please read their policies.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page with a new "Last updated" date, and if changes are significant we will let you know by email or a notice on the Site.
13. Contact us
Gentle Root LLC
8 The Green, Ste A, Dover, DE 19901, USA
Email: gentle.root.project@gmail.com