Last updated: March 2026
Who is responsible for your data?
The data controller is Tracey Strange, operating as The Root of the Root, a holistic therapy practice based in Paris, France.
Email: tracey@rootoftheroot.com
Phone: +33 7 72 01 18 33
What data is collected?
When you submit the booking request form on this website, the following information may be collected:
- First and last name
- Email address
- Phone number (optional)
- Preferred service, session type, date, and time
- Any personal details you choose to share in the message field
No payment information, special category data, or data from minors is collected via this website.
Why is this data collected?
Your data is collected solely to respond to your booking request and arrange your appointment. It is used for no other purpose — no marketing, no profiling, no automated decision-making.
The legal basis for processing is your freely given consent, in accordance with Article 6(1)(a) of the GDPR.
How is your data stored?
Booking requests are submitted via Formspree (formspree.io), a secure form processing service. Formspree acts as a data processor on behalf of The Root of the Root and handles your submission in accordance with their own privacy policy and GDPR commitments. Your data is transmitted securely over HTTPS.
Tracey receives your details by email and stores them only as long as necessary to manage your appointment and any follow-up care. Data is not stored in any third-party CRM or database.
How long is your data kept?
Your personal data is kept for no longer than 12 months after your last contact or appointment. After this period, it is deleted. You may request earlier deletion at any time (see below).
Is your data shared with third parties?
Your data is never sold, rented, or shared with third parties for commercial purposes. The only third party involved in processing your booking request is Formspree, acting solely as a technical intermediary to deliver your message. No other parties have access to your personal information.
Your rights under GDPR
As a data subject under the GDPR, you have the following rights:
- Right of access — you may request a copy of the data held about you
- Right to rectification — you may request correction of inaccurate data
- Right to erasure — you may request that your data be deleted
- Right to restrict processing — you may ask that use of your data be limited
- Right to data portability — you may request your data in a portable format
- Right to object — you may object to the processing of your data
- Right to withdraw consent — you may withdraw consent at any time without affecting prior processing
To exercise any of these rights, please contact Tracey directly at tracey@rootoftheroot.com. Requests will be responded to within 30 days.
Right to lodge a complaint
If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr.
Changes to this policy
This policy may be updated from time to time. The date at the top of this page reflects when it was last revised. Continued use of the booking form constitutes acceptance of the current policy.