Privacy Policy

How we collect, use, and protect your personal data.

Join My Blog. Join My Journey. You are most Welcome (It's FREE!).

1. Introduction

Welcome to Root to Fruit. We respect your privacy and are committed to protecting your personal data. This Privacy Policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you, in compliance with the General Data Protection Regulation (GDPR).

2. Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data: includes first name, last name, or username.
Contact Data: includes email address.
Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location.
Usage Data: includes information about how you use our website.

3. How We Collect Your Data

We use different methods to collect data from and about you including through:

Direct interactions: You may give us your Identity and Contact Data by filling in forms. This includes personal data you provide when you:
- Subscribe to our newsletter or automated blog updates.
- Leave a comment on a blog post or Bible verse.
Automated technologies or interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

To send you our newsletter and automated blog updates (if you have opted in via our website forms).
To display and moderate your public comments on the site.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

5. Data Processors & Third-Party Services

To operate our website, we share your data with trusted third-party processors who comply with GDPR regulations:

OpenAI: When you use our interactive "Ask Scripture" AI tool, your theological questions are securely processed by OpenAI to provide pastoral answers. We may permanently store these questions anonymously (without your name, email, or identifying data) to generate public blog articles that help others.
Sendy & Amazon SES: Used securely for managing our newsletter subscriber lists and sending email campaigns.
Vercel Postgres (Neon): Our secure, serverless database used to store public comments, prayers, and commenter information on the website.
Vercel Speed Insights: Used to monitor and optimise website loading speeds and Core Web Vitals performance. Speed Insights operates without tracking cookies and collects aggregated, anonymized technical telemetry (such as page load times, device and browser type, and approximate region) to help us ensure an accessible, responsive experience for all visitors.
Vercel Web Analytics: Used to understand overall website traffic and visitor engagement trends (such as page visits, referring domains, device operating systems, and approximate country-level location). Vercel Web Analytics is cookieless, does not collect personal identifiers or track users across external sites, and processes data in full compliance with GDPR.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. All comments and newsletter subscriptions are securely routed through our Next.js API before being stored in our backend databases.

7. Your Legal Rights

Under the GDPR, you have rights under data protection laws in relation to your personal data, including the right to:

Request access to your personal data.
Request correction of your personal data.
Request erasure of your personal data (the "right to be forgotten").
Object to processing of your personal data.
Request restriction of processing your personal data.
Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us.

8. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us via our website or respond directly to any newsletter email you receive from us.