Last updated: 3 August 2026
Root'd Waves Consultancy ("we", "us", "our") operates rootedwavesconsultancy.com. This policy explains what personal information we collect through this website, why we collect it, who we share it with, and the choices you have. It is written to meet the California Online Privacy Protection Act (CalOPPA) and reflects the rights California residents hold under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
We are a business consultancy based in Santa Clarita, California, serving clients across greater Los Angeles and internationally. We do not sell personal information, and we never have.
We only collect information you choose to give us, together with limited technical data collected automatically when you browse.
We do not collect sensitive personal information as defined by the CPRA. We do not knowingly collect information from anyone under 16. We do not process payments through this website.
We do not use your information for automated decision making or profiling, and we do not use it to build advertising audiences.
We do not sell or rent your personal information. We share it only with the service providers we need in order to run the website and respond to you. Each processes data on our instructions.
We may also disclose information where required by law, to enforce our terms, or to protect the rights and safety of our clients or others. If the business is ever sold or restructured, information may transfer as part of that transaction, and we would tell you first.
California residents have the following rights under the CCPA as amended. We extend these rights to everyone who contacts us, wherever you live.
To exercise any of these, email iryna@rootedwavesconsultancy.com with the request. We will confirm receipt within 10 business days and respond within 45 days, extendable once by a further 45 days where necessary. We may need to verify your identity before acting, usually by confirming details we already hold. An authorised agent may act for you with written permission.
We work with international clients. If you are in the United Kingdom or European Economic Area, you also hold rights under the UK GDPR and EU GDPR, including access, rectification, erasure, restriction, portability and objection. Our lawful bases are your consent for the newsletter, and legitimate interests or steps taken prior to entering a contract for enquiries and consultations. You may withdraw consent at any time and may complain to your local supervisory authority, which in the UK is the Information Commissioner's Office. Information you send us is processed in the United States, which may not offer the same protections as your home country.
This site uses cookies set by Google Analytics to measure traffic. We do not use advertising, retargeting or social media tracking cookies. You can block or delete cookies through your browser settings, or install the Google Analytics opt out add on. Blocking them will not affect your ability to use this site.
Some browsers send a Do Not Track signal or a Global Privacy Control signal. Because we do not sell or share personal information or track you across other websites, there is no sale or sharing for these signals to stop. We do not currently alter our behaviour in response to them.
This site is served over HTTPS, and we use reputable providers who apply their own safeguards. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you as required by California Civil Code section 1798.82.
Our site links to other websites, including Instagram, LinkedIn and Google Drive. We are not responsible for their privacy practices, and we encourage you to read their policies before sharing information with them.
We may update this policy as our practices or the law change. The date at the top always shows the current version. Material changes will be announced on this page, and where we hold your email address for the newsletter we will tell you directly. Please review it periodically.
Questions, requests or complaints about this policy or your information can be sent to iryna@rootedwavesconsultancy.com, or by post to Root'd Waves Consultancy, Santa Clarita, CA 91350, United States.
This policy describes our actual practices in plain language. It is not legal advice. If your business circumstances change, for example if you begin taking payments through the site, run advertising pixels, or grow past the CCPA revenue and volume thresholds, this policy should be reviewed by a qualified attorney.