Privacy Policy of Good Roots, Inc.

Last Updated: October 8, 2025

This privacy notice (“Privacy Notice”) is intended to provide you with specific details about how Good Roots, Inc., which owns and operates growgoodroots.com (“Good Roots,” “we,” and “us”), collects and processes your personal and personally identifiable information through your use of our website and our associated services including but not limited to a transaction or inquiry concerning our services (collectively, the “Services”).

You understand and agree that we may store and process your personal information on computers located outside of your jurisdiction, including, but not limited to, in the United States or the European Union. By using the Services, you agree to the collection and processing of your personal or personally identifiable information outside of your jurisdiction.

Before using the Services or providing information to us, please carefully review this Privacy Notice. By using or accessing the Services, you agree that we may collect and use your personal and personally identifiable information in accordance with this Privacy Notice, as revised from time to time. We may modify, amend, replace, or suspend this Privacy Notice at any time. If you have any questions or suggestions regarding our Privacy Notice, or if your personal information is not accurate or complete, please contact us at:

Good Roots, Inc.
Attn: Privacy Officer
2093 Philadelphia Pike #7122
Claymont, DE 19703-2424

Or email us at [email protected].    

By providing Good Roots with your personal or personally identifiable data and using the Services, you warrant that you are over the age of eighteen (18) or otherwise above the age of majority within your jurisdiction. If you are younger than eighteen (18) or the age of majority within your jurisdiction, please do not use the Good Roots Services and please do not provide personal information to us.

Our Services may include links to websites or may include the use of analytics tools that are owned, operated, and maintained by third parties. Good Roots does not exercise control over the privacy practices of such third-party websites or analytics tools, and you are encouraged to review the privacy practices of all such third-party websites or analytics tools disclosed within this Privacy Notice.

Our Data Practices

What Data We Collect, How and Why We Collect it, and How We Use and Secure it
What information do we collect and how do we use it? 

When you use the Services, we may collect personal or personally identifiable information from you (“PII”). PII may include any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual. It does not include anonymized data.

We may collect and process the following categories of PII about you:

  • Communication Data. Communication data includes any communication that you may send to us through the Services, email, telephone, SMS or other text, livechat, or social media. We process this data to communicate with you by email or other means, to provide you with customer support, to record logs of our communication, and to store information to respond to legal claims. Good Roots’ lawful ground for collecting and processing this PII is to respond to communications sent by you to us, to keep records of our communication, and to pursue or defend against legal claims.
  • User Data. User data includes data about how you use the Services and any data that you post to or authorize through the Services, such as your name, address, country, phone number, and email address. This includes data stored in persistent cookies when you login to the Services and analytics data that is collected when you use the Services. We collect and process this data to operate the Services, to authenticate you as a user of the Services, to ensure that timely and relevant content is provided to you, to secure the Services, to ensure that the Services operates in a fast and efficient manner, to maintain backups of the Services, and to assess and refine our marketing strategies. Good Roots’ lawful ground for processing this user data is its legitimate business interests in administering and offering the Services and to fulfill your orders made through the Services.
  • Technical Data. Technical data includes data about your use of the Services, such as your IP address, your login data, your phone number, your mobile device model, your operating system, your geolocation, and your time zone. We may collect this data from your use of the Services and from advertising IDs. Good Roots processes this data to analyze your use of the Services, to route Services traffic, to administer and secure the Services, to provide location-relevant content, and to troubleshoot problems with the Services. Good Roots’ lawful ground for collecting and processing this technical data is its legitimate interests in administering and offering the Services and to grow its business and marketing strategy.
  • Marketing Data. Marketing data includes data about your preferences in receiving and interacting with Good Roots’ advertisements or content on the Services or on third party websites or applications. We collect this data from your use of the Services and from third party advertising IDs created through advertising programs, such as Google Advertising IDs and Facebook Advertising IDs. Good Roots does not connect advertising identifiers to persistent device identifiers, such as MAC addresses or mobile device IDs. Good Roots’ lawful ground for collecting and processing this marketing data is its legitimate interests in administering and offering the Services and to grow its business and marketing strategy by providing advertisements, including remarketing advertisements, to you.

Good Roots will only use your PII for the purpose for which it was collected. If Good Roots needs to use your PII for an unrelated, new purpose, Good Roots will provide you with notice of this new use and will explain the lawful ground for such processing. Good Roots may process your PII without your knowledge or consent where required or permitted by law. Where consent is required by applicable law, we will request and rely on your affirmative consent before collecting or using your data for marketing or tracking purposes.

How do we collect this information?

We collect PII from you through a variety of different means:

  • Direct Collection. We may collect PII from you when you sign up for our consulting services, contact us through our website or other website, via live chat, social media, SMS or other text, telephone, email, or otherwise, respond to a survey, participate in a contest, submit a review or feedback with or without photos, or when you opt-in to receive marketing emails, or mailings from us.
  • Third Party Tracking Tools. We use third party tracking tools, such as pixels, web beacons, and cookies, to automatically collect PII from you when you open, view, or click pages or links, emails, or advertisements. We disclose these third-party tracking tools below in this Privacy Notice in our disclosure of PII that we collect from third parties.
  • Business Partners and Service Providers. We may, from time to time, obtain PII from our business partners or service providers. When we obtain PII from our business partners and service providers, we ensure that all such business partners and service providers have obtained consent from you to transfer all such PII to us for its intended uses.
  • Social Media Networks and Other Platforms. We may obtain PII from you when you interact with our social media accounts or content posted on other third-party platforms, such as Facebook, X, or YouTube. For more information on how your PII may be disclosed by a particular social media network or platform, you are encouraged to review the privacy notices and policies of those platforms.
  • Analytics Providers. We may also obtain PII from you through our use of third-party analytics providers, such as Google Analytics. See below for a complete list of analytics services we partner with. We may create user profiles based on PII obtained through our use of PII from third-party analytics providers to better understand your wants and needs as a customer.  

What information do we collect from third parties and how do we use it?

Good Roots may collect data about you through cookies and other technologies. This helps Good Roots understand how you use the Services and to understand any patterns that may be associated with your use of the Services. This aids Good Roots in developing or improving its Services and marketing communications in response to your needs or wants.

Good Roots may use session or persistent cookies. Session cookies are only stored on your computer or mobile device during your use of the Services and are automatically deleted when you close your web browser. Session cookies may be used to direct internet traffic to a server that is closer to you or to allow us to identify you as you move between pages of the Services. Persistent cookies are stored as a file on your computer or mobile device that remains on your computer or mobile device even after you close your web browser. Persistent cookies can be read by the Services that created the cookie when you revisit it again. Good Roots may use persistent cookies to authenticate you when you return to the Services so that you do not have to login again or when it utilizes Google Analytics or other analytics providers, which is intended to track the origin and behavior of traffic to the Services. Good Roots may use the following analytics providers, and you are directed to review their cookie policies: 

Facebook – https://www.facebook.com/privacy/policy/ 
Google – https://www.google.com/intl/en/policies/privacy/
Salesforce (Pardot) – https://www.salesforce.com/company/legal/privacy/ 
You may opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout

Good Roots may also receive data from third parties including analytics providers or advertising networks such as Google, Facebook, TikTok, or Apple. These third parties may be based outside of your jurisdiction.

We also use some or all of the following third party platforms when responding to inquiries or providing our services to a client in a paid engagement (this list is not exclusive):

Zoom – https://www.zoom.com/en/trust/privacy/privacy-statement/ 
QuickBooks and other Intuit products – https://quickbooks.intuit.com/hk/privacy/ 
SurveyMonkey – https://www.surveymonkey.com/mp/legal/privacy/ 
Kantata – https://www.kantata.com/privacy-policy 

Do we use your information for training large language models? 

We may use data collected on this Website, including text input, interaction logs, and usage statistics, to improve the accuracy, reliability, and quality of our services, which we may use to help improve our customer service interactions and to assist us in answering common questions we receive from our users. We may use enterprise-grade AI-assisted tools such as ChatGPT, Gemini, and similar technologies to do so, to deliver Services, or to support related business operations. These AI tools are configured under provider terms that prohibit the use of customer data for model training. We do not upload personally identifiable or sensitive client information into consumer-grade AI platforms. All AI-assisted outputs are reviewed and approved by Good Roots team members before being shared with clients or being used in subsequent work.

How We Use Pixels on Our Site

We want to be upfront with you about how we collect and use data when you visit our website. Like many other websites, we use tracking technologies, identified above, which include the Meta Pixel (formerly Facebook Pixel). These technologies help us understand how visitors interact with our site and how to improve our marketing efforts. We may also use other tracking technologies, including other pixels, in the future. If we do, we will notify users by updating this Privacy Notice. 

What are Meta Pixels?

A pixel is a small piece of code that we’ve added to our site. When you visit, this code helps us track actions you take on our site, such as clicking on a link, viewing a page, or making a purchase. The pixels send this information back to Meta (Facebook and Instagram), which helps us:

  • Show you more relevant ads on Meta’s platforms.
  • Measure the effectiveness of our ads by seeing if people who click on them actually engage with our site.
  • Improve your experience by understanding what content and features are most useful to our visitors.

These pixels do not collect personal details like your name, email, or phone number; instead, they track actions and behaviors using cookies and other identifiers.

You can learn more about how Meta collects and processes data here: https://www.facebook.com/privacy/policies. 

Your Consent

By using our website, you consent to the use of the Meta pixels as described above. If you don’t want these pixels to track your activity, you can:

  • Adjust your privacy settings on Meta to limit ad tracking.
  • Use browser settings or extensions that block tracking technologies.
  • Opt-out of certain tracking through Digital Advertising Alliance or your device’s privacy settings.

Opting Out

We respect your privacy, and if you have any concerns or questions, feel free to contact us at [email protected]. 


How do we use your information for marketing communications? 

As stated above, Good Roots’ lawful ground for sending you marketing communications is either consent or its legitimate business interests, such as to grow its business by advertising products and services to you. Good Roots may send you marketing communications if you have asked for information concerning its goods or services or if you have agreed to, and have not opted out from, receiving marketing communications. You may ask Good Roots to stop sending you marketing messages at any time by following the opt-out link in any marketing message sent to you. If you opt out of receiving marketing communications, your opt-out does not extend to PII provided for other purposes.

When do we disclose your information?

Good Roots may share your PII with the following parties:

  • Service providers that provide Good Roots with information technology, software as a service, cloud storage, or other administrative services;
  • Good Roots’ accountants, auditors, insurers, or attorneys; 
  • Law enforcement agencies upon the receipt of a subpoena or court order or where necessary to protect Good Roots’ personnel or property; and
  • Government bodies that require Good Roots to report its processing activities.

Good Roots may also transfer PII to third parties when it sells, transfers, or merges any part of its business or assets. 


How do we protect your information? 

We implement a variety of security measures to maintain the safety of your personal information. However, no security measures are impenetrable and there are always security risks. We will notify you and any regulatory body of any breach of your PII or our security measures if we are legally required to do so. Good Roots allows access to your PII only by employees and service providers who have a need to know or access your PII on our instructions.

Do we use cookies? 

Yes, as stated above, we may use persistent and session cookies. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your web browser (if you allow) that enables the sites or service providers systems to recognize your browser and capture and remember certain information.

We may use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

We never use cookies to store sensitive customer information such as names, addresses, passwords, or credit card information. 

For how long do we retain your data?

We will only retain your PII for so long as necessary to fulfill the purposes for which it is collected under this Privacy Notice or for the purposes of satisfying any legal, accounting, or reporting requirements. With respect to location data, technical data, usage and interaction data, and marketing data, we may retain this data for so long as it is relevant to the uses disclosed in this Privacy Notice. If you are a client who has paid for our services, we may retain account data, public data, and communications data for so long as you continue to work with our services, and we may retain this data for longer periods where there is a need to retain this data to comply with Good Roots’ legal obligations, such as the preservation of electronic evidence or compliance with a preservation order. 

YOUR PRIVACY CHOICES

Right of Access, Rectification, Correction, Erasure, Transfer, and Withdrawal

Under the law, you may have a right to request access to your PII for rectification, correction, erasure, transfer, or restriction, or to object to its processing or withdraw your consent. If you wish to exercise any of these rights, please contact our Privacy Officer as disclosed in this Privacy Notice. 

You do not need to pay a fee to access your PII or to exercise your rights. However, we may charge a reasonable fee if your request is unreasonable or excessive.

To confirm your request, we may need to request specific information from you as a security measure to ensure that PII is not disclosed to an unauthorized third party. We will attempt to respond to all legitimate requests within thirty (30) days.

Rights of European Citizens

Good Roots adheres to the EU-U.S. Data Privacy Framework (“DPF”) Principles, including the DPF’s Supplemental Principles, and while we are not compliance certified under the DPF, we follow the Principles in handling all data from EU-citizens. We are subject to the enforcement powers of the United States Federal Trade Commission (“FTC”) in relation to its handling of user data. 

If you are a European citizen, you are entitled to certain rights regarding the protection of your Personally Identifiable Information and Personal Data, which are subject to limitations set forth in the EU GDPR and its applicable case law. These rights are:

  • The right to access and correct the information that Good Roots processes about you;
  • The right to transfer all or a part of the information collected about you to another data controller, where it is technically feasible;
  • The right to the erasure of data concerning you, subject to Good Roots’ rights of retention under the law;
  • The right to object to the processing of Personally Identifiable Information and Personal Data where you dispute the accuracy of the data, the processing is not lawful, Good Roots no longer needs the information for the purposes of processing, or you have raised an objection for personal reasons;
  • The right to revoke your consent to data processing;
  • The right to object to the processing of your Personally Identifiable Information and Personal Data for marketing purposes;
  • The right to object to the processing of Personally Identifiable Information and Personal Data for direct marketing or for personal reasons that arise from your particular situation; and
  • The right to file a complaint with a data protection authority.

To exercise these rights, you may either opt out of receiving communications from us by unsubscribing to its e-mails or by emailing us at [email protected]. You do not need to pay a fee to exercise these rights, however, we reserve the right to charge a reasonable fee if your request is unreasonable or excessive. To confirm your request, we may need to request specific information from you as a security measure to ensure that personal data is not disclosed to an unauthorized third party. We will attempt to respond to all legitimate requests within thirty (30) days.

For further information regarding your privacy rights as a citizen of the EU, please visit the U.S. Department of Commerce’s Services at https://www.commerce.gov/ and the DPF overview webpage at https://www.dataprivacyframework.gov/s/program-overview. 

You can find a list of DPF certified organizations here: https://www.dataprivacyframework.gov/s/

As a citizen of the EU, you may, under certain conditions, invoke binding arbitration against Good Roots, and we may be held liable in cases of onward data transfers to third parties as described more fully in DPF overview page linked above. We may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. 

California Privacy Rights

The following rules apply solely to visitors, users, and others who are residents of the State of California. California residents have the right to be notified which categories of PII are being collected and the purposes for which the PII is being used. In particular, we collected the following categories of PII (A, B, D, F, and G) as defined in the California Consumer Privacy Act within the last twelve months. Our uses of this PII are detailed above in this Privacy Notice:

Table T.1

CategoryExamplesCollected
A. IdentifiersReal name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.YES
B. Personal information categories listed in the California Consumer Records statute (Cal. Civ. Code § 1798.80(e))Name, signature, address, telephone number, bank account number, credit card number, debit card number, or any other financial information. YES
C. Characteristics of protected classifications under State or federal lawReligious affiliation, ethnicity, etc.NO
D. CommercialRecords of products/content or services purchased.YES
E. Biometric DataFingerprints or footprints. NO
F. Internet or other similar network activityBrowsing history, search history, information on a consumer’s interaction with a Services, application, or advertisement.YES
G. Geolocation dataPhysical location or movements.YES
H. Audio, electronic, visual, thermal, olfactory, or similar informationIf provided to us via Zoom, phone call, or other communication platform: Meeting recordings, voicemails, voice memos, etc.YES
I. Professional or employment-related informationIf provided to us: Current and past employers, roles, and experience; off-farm employment, etc. YES
J. Educational information If provided to us: Formal credentials, education history, schools attended, level of education achieved, programs participated in, etc.YES

We obtain the categories of PII marked “YES” in the above table directly from California residents when they complete forms through our Services or provide it to us as a part of a transaction or inquiry concerning our Services. We also obtain these categories of PII indirectly from California residents while observing their actions on our Services and from third parties or service providers that they have authorized to receive and share PII.

California residents have a right to request that we disclose what PII we collect from you and whether, and how, we disclose or sell that PII. California residents may also request that we delete any personal information collected or maintained by us from you. 

We do not sell user or client data, and the following disclosure is required by law.

California residents may also have the right to opt out of the sale of their personal information by contacting us or, where available, by clicking a link or icon associated with an advertisement. Specifically, this link or icon may state “Do Not Sell My Personal Information.” By selecting this link or icon, you “Opt Out,” which means that you have opted out of the sale of your personal information as set forth in the California Consumer Privacy Act. However, even though you may have opted out, you may still see interest-based advertisements. To learn more about interest-based advertising across websites and additional opt-out choices, you can visit http://optout.aboutads.info. If you opt-out of the sale of your personal information but do not opt out of interest-based advertising more generally, you may still receive ads tailored to your interests based on PII that was not sold by us, personal information that was sold to downstream participants at least 90 days before you opted out, or personal information that was sold by other sources from which you have not opted out.

To submit a request for a list of the categories of personal information collected from you or to request that we delete your personal information, please send a letter to us at the following address:

Good Roots, Inc.
Attn: Privacy Officer
2093 Philadelphia Pike #7122
Claymont, DE 19703-2424

Or email us at [email protected].     

To verify your request, we may request certain information from you to confirm that you are a Good Roots user, such as your phone number, username, email address, city, state, or geographic location. You may also designate an authorized agent to make a request to Good Roots to disclose or delete your personal information. To do so, you must provide us with proof that the individual or business has been appointed as your agent, such as by providing a signed power of attorney form and provide accurate responses to any information requested by us that may be necessary to confirm that you are a Good Roots user, such as your phone number, username, email address, city, state, or geographic location. California residents have a right not to receive discriminatory treatment by Good Roots for their exercise of these rights conferred under California law.

Colorado Residents

Good Roots does not conduct business in Colorado, control or process the personal data of 100,000 or more consumers during a calendar year, or derive revenue or receive a discount on the price of goods or services from the sale of personal data.

Connecticut Residents

During the preceding calendar year, Good Roots did not control or process the personal data of at least 100,000 consumers or derive more than 25% of our gross revenue from the sale of personal data.

Florida Residents

Good Roots does not control or process the personal data of 100,000 or more Florida residents during a calendar year, nor do we derive 50% or more of our gross annual revenue from the sale of personal data. As a result, the Florida Digital Bill of Rights does not apply to our data practices. 

Montana Residents

Good Roots does not control or process the personal data of 50,000 or more Montana residents during a calendar year or derive over 25% of its revenues from the sale of personal data and control or processing of personal data of 25,000 or more Montana residents. Therefore, the Montana Consumer Data Privacy Act does not apply to our collection or use of PII.

Nevada Residents

If you are a resident of Nevada, you may provide notice to us to limit the sale of your PII to third parties for resale or licensing purposes. However, we do not sell your PII for such use. To notify us that you wish to limit the sale of your PII to third parties for resale or licensing purposes, you may contact us at [email protected] and include in the message field, “Nevada Do Not Sell Request,” along with your name, address, and user account information.

Oregon Residents

Good Roots does not control or process the personal data of 100,000 or more Oregon residents during a calendar year or derive over 25% of its gross revenue from the sale of personal data. Therefore, the Oregon Consumer Privacy Act (OCPA) does not apply to our collection or use of PII. 

Tennessee Residents

Good Roots does not exceed $25 million in annual revenue, control or process the personal information of 175,000 or more Tennessee consumers, or control or process the data of 25,000 consumers while deriving more than 50% of its gross revenue from the sale of personal information.

Texas Residents

Good Roots is considered a small business as defined by the Small Business Administration and, therefore, is exempt from the Texas Data Privacy and Security Act. However, we generally collect and process PII only to the extent that it is adequate, relevant, and reasonably necessary for the purposes disclosed in this Privacy Policy. The categories of PII collected by Good Roots are disclosed within this Privacy Policy, in particular in Table T.1 above, and Texas residents may request, free of charge, information of the PII collected from them twice annually. 

Utah Residents

Good Roots does not have annual revenues of $25,000,000 or more and control or process the PII of 100,000 or more consumers. Therefore, the Utah Consumer Privacy Act does not apply to our collection and use of PII.

Virginia Residents

Good Roots does not control or process the personal data of at least 100,000 Virginia residents or control or process the personal data of at least 25,000 Virginia residents and derive more than 50% of its gross revenue from the sale of personal data. For these reasons, the Virginia Consumer Data Protection Act (VCDPA) does not apply to Good Roots’ collection and use of PII.

If Good Roots becomes subject to one or more of the above State’s privacy laws other than California’s privacy laws, we will update this Privacy Notice to reflect your rights under those laws.

Third Party Links

Good Roots’ Services may include links to third-party websites and applications. By clicking on third party links, you may allow third parties to collect or share data about you. Good Roots does not control these third-party links and you are advised to review their respective privacy policies.

Responding to Do Not Track Signals

You can generally opt-out of receiving personalized ads from third party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) or who follow the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising by visiting the opt-out pages on the NAI Services and DAA Services. We respect Do Not Track (DNT) signals from browsers. If you enable DNT, we will not track your activity for targeted advertising or analytics.

You can opt out of targeted advertising by using the links below: 

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at http://optout.aboutads.info/.

Global Privacy Controls

We recognize and honor Global Privacy Control (GPC) signals, which are browser-based settings that communicate your privacy preferences to websites. When GPC is enabled in your browser, we will interpret this as a valid opt-out request under applicable U.S. state privacy laws, such as the California Consumer Privacy Act (CCPA), for purposes of data sharing and targeted advertising.

Please note that opting out via GPC does not affect our ability to process your personal information:

  • To fulfill your orders or otherwise perform a contract with you;
  • To comply with legal obligations;
  • For internal business purposes, such as fraud prevention, security, or analytics;
  • Where data is processed solely by our service providers acting on our behalf and not sold or shared for their own use.

To enable GPC, you can visit https://globalprivacycontrol.org and follow instructions for your browser.

Children’s Online Privacy Protection Act Compliance

We comply with the requirements of COPPA (Children’s Online Privacy Protection Act). We do not knowingly collect any information from anyone under 13 years of age, and our products and services are aimed at individuals 13 years of age or older. If you believe that we have collected PII from someone under the age of 13, you are directed to notify us immediately at [email protected]. 


Changes to our Privacy Notice 

Whenever we change our Privacy Notice, we will post those changes to this Privacy Notice on the Services and other places that we deem appropriate. Your use of our Services following these changes indicates your consent to the practices described in the revised Privacy Notice.

Contacting Us 

If you have any questions about this Privacy Notice or the manner by which we collect or use Personal Information about you, contact us at [email protected].