Last updated: May 2026
This Privacy Policy explains how Roots Genealogy (Karen Lloyd, sole trader) collects, uses and protects any personal information you provide when using this website or engaging my services. I take your privacy seriously and am committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who I am
Roots Genealogy is operated by Karen Lloyd, a sole trader based in the United Kingdom. You can contact me at: karen@rootsgenealogy.co.uk
What information I collect
I collect personal information only when you choose to provide it. This may include:
- Your name and email address when you complete the contact form on this website
- Information you share about your family history research enquiry
- Your name and contact details when you commission research services
- Ancestral information you share during the course of a research project
- Payment information (processed securely via bank transfer — I do not store card details)
How I use your information
I use the information you provide to:
- Respond to your enquiries and provide the services you have requested
- Carry out genealogical research on your behalf
- Send you research reports and related documents
- Process payments for services rendered
- Comply with legal obligations
I will not use your personal information for marketing purposes without your explicit consent, and I will never sell or share your data with third parties for commercial purposes.
Legal basis for processing
I process your personal data on the following legal bases under UK GDPR:
- Contract: where processing is necessary to fulfil a service you have commissioned
- Legitimate interests: to respond to enquiries submitted via the contact form
- Legal obligation: where I am required to retain records for tax or legal purposes
How long I keep your data
I retain client records (including research correspondence and reports) for up to six years for accounting and legal purposes, in line with HMRC requirements. Contact form enquiries that do not result in a commission are deleted within 12 months. You may request deletion of your data at any time (subject to any legal retention obligations).
Cookies and website analytics
This website may use cookies to improve your browsing experience. Cookies are small text files stored on your device. You can control cookie settings through your browser. Currently, this website does not use Google Analytics or similar tracking services. If this changes, this policy will be updated and you will be notified via a cookie consent banner.
Third-party services
This website is hosted by GoDaddy. Their privacy practices are governed by their own privacy policy. I use WhatsApp for client communication where you initiate contact via that channel; WhatsApp is governed by Meta’s privacy policy.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data I hold about you
- Rectify any inaccurate or incomplete data
- Erase your personal data (the “right to be forgotten”), subject to legal retention requirements
- Object to processing based on legitimate interests
- Portability — receive your data in a portable format
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact me at karen@rootsgenealogy.co.uk. I will respond within one month.
Complaints
If you are unhappy with how I handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO) — the UK’s supervisory authority for data protection. You can contact the ICO at ico.org.uk or by telephone on 0303 123 1113.
Changes to this policy
I may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Please check back periodically.
If you have any questions about this policy, please contact me at karen@rootsgenealogy.co.uk.