Last updated: 20 August 2026

 

1. About this Privacy Policy

 

Rooted & Rested (“I”, “me”, “my” or “Rooted & Rested”) respects your privacy and is committed to protecting your personal information.

 

This Privacy Policy explains how I collect, use, store and protect your personal information when you:

• visit my website;

• contact me;

• book a discovery call;

• purchase or enquire about my services;

• complete a sleep questionnaire or other client form;

• participate in sleep coaching sessions; or

• communicate with me in connection with my services.

 

I operate as a sole trader in the UK and comply with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

2. Who is responsible for your information?

 

For the purposes of UK data protection legislation, Rooted & Rested is the data controller of the personal information I collect and process in connection with my business.

Business: Rooted & Rested

Business owner: Sophie Haselton-Viney

Email: sophie@rootedandrestedsleep.co.uk

Website: www.rootedandrestedsleep.co.uk

 

If you have any questions about this Privacy Policy or how I handle your personal information, please contact me using the details above.

 

3. What information do I collect?

 

The information I collect depends on how you interact with my business.

 

Information you provide to me

This may include:

• your name;

• email address;

• telephone number;

• address, where required;

• information provided through my website contact forms;

• booking and appointment information;

• information provided during a discovery call;

• information contained in sleep questionnaires and sleep logs;

• information provided during coaching sessions;

• details about your child's age, sleep, routines and circumstances;

• payment and transaction information;

• feedback and testimonials;

• correspondence and communications between you and me.

 

Information about your child

Because Rooted & Rested provides support relating to children's sleep, you may choose to provide information about your child.

This may include:

• name or initials;

• age or date of birth;

• sleep patterns and routines;

• settling and night-time behaviour;

• daytime routines and behaviour;

• feeding information;

• nursery or childcare routines;

• information about your child's general wellbeing;

• relevant family circumstances; and

• health, developmental or other information that you consider relevant to your child's sleep.

Please only provide information that is relevant to the sleep support you are seeking.

 

4. Special category information

 

Some information you choose to provide may constitute special category personal data, particularly information relating to health.

For example, you may choose to tell me about:

• medical conditions;

• medication;

• developmental circumstances;

• health-related factors affecting sleep; or

• other wellbeing information relating to you or your child.

 

I will only process this information where it is relevant to providing the service you have requested and where an appropriate lawful basis and special category condition under UK data protection law applies.

 

Where appropriate, I may ask for your explicit consent to process this information.

You are not generally required to provide health information. However, choosing not to provide information that is relevant to your circumstances may affect my ability to provide personalised sleep coaching.

 

Rooted & Rested provides holistic sleep coaching and is not a medical service. My services do not replace medical advice, diagnosis or treatment.

 

Where I believe a matter falls outside the scope of sleep coaching, I may recommend that you seek advice from an appropriate healthcare professional.

 

5. How I use your information

 

I may use your personal information to:

• respond to enquiries;

• arrange discovery calls;

• provide sleep coaching and support;

• understand your family's circumstances and sleep goals;

• develop personalised sleep support recommendations;

• communicate with you about your coaching package;

• arrange appointments and send reminders;

• process payments;

• maintain client records;

• provide customer service;

• request feedback about my services;

• provide testimonials and marketing communications where you have given appropriate permission;

• manage my accounts and business administration;

• improve my services and website;

• maintain the security of my systems;

• comply with legal and accounting obligations; and

• protect my business and clients against fraud, misuse or security threats.

 

I will only use your personal information where I have a lawful basis for doing so.

 

6. Lawful basis for processing

 

Depending on the circumstances, I may rely on the following lawful bases under UK data protection law.

 

Contract

I may process your information where this is necessary to provide the services you have purchased or to take steps at your request before entering into a contract.

 

Legitimate interests

I may process information where this is necessary for my legitimate business interests, provided that these interests do not override your rights and interests.

This may include managing enquiries, maintaining business records, improving my services and maintaining the security of my systems.

 

Legal obligation

I may process information where I am legally required to do so, including for tax and accounting purposes.

 

Consent

Where appropriate, I may rely on your consent, including for certain marketing activities or the processing of special category information.

Where processing is based on consent, you can withdraw your consent at any time.

 

7. Third-party services I use

 

I use trusted third-party services to operate Rooted & Rested and provide my services.

These providers may process personal information on my behalf or, depending on the service, act as independent data controllers.

 

Wix

My website is hosted and operated using Wix.

Wix may process information such as website visitor information, contact form submissions, bookings, account information and payment-related information.

Wix also provides certain website functionality, including bookings and email marketing.

 

Wix Payments

Payments for my services may be processed through Wix Payments.

I do not normally have access to or store your full payment card details.

Payment information is processed by Wix and relevant payment service providers in accordance with their applicable privacy policies and security arrangements.

 

Wix Bookings

Where you book a service directly through my website, your booking information may be processed through Wix Bookings.

This may include your name, email address, contact details, appointment information and information necessary to manage your booking.

 

Calendly

I may use Calendly to arrange discovery calls or other appointments.

If you book through Calendly, information such as your name, email address, booking details and any information you choose to provide through the booking form may be processed by Calendly.

 

Google Drive

I use Google Drive to securely store relevant business and client records.

These records may include information provided through questionnaires, sleep logs, consultation notes and other information required to provide my services.

I take reasonable steps to restrict access to client information and ensure that client records are only accessible to me or authorised individuals where appropriate.

 

Google Meet

I use Google Meet to conduct online consultations and sleep coaching sessions.

Where you participate in a Google Meet call, Google may process certain technical and account information in accordance with its own privacy terms.

I will not record coaching sessions unless this is specifically agreed with you in advance and an appropriate lawful basis has been established.

During consultations and discovery calls on Google Meet, transcript notes will be taken automatically unless you specifically request that this is turned off.

 

Wix Email Marketing

I may use Wix Email Marketing to send newsletters, resources, updates, offers and other marketing communications.

You can unsubscribe from marketing communications at any time using the unsubscribe link provided in marketing emails.

 

8. Marketing communications

 

If you choose to subscribe to my email marketing, I may use your name and email address to send you:

• sleep-related information;

• tips and resources;

• newsletters;

• information about Rooted & Rested;

• offers and promotions;

• workshops or events; and

• information about my services.

 

You can unsubscribe at any time by clicking the unsubscribe link in my emails or contacting me directly.

 

If you unsubscribe, I may retain limited information to ensure that I do not inadvertently send you further marketing communications.

 

9. Payments

 

When you purchase a service from Rooted & Rested, payment will be processed through Wix Payments or Monzo Business Banking.

I do not normally store your full debit or credit card details.

I may retain information such as the amount paid, date of payment and transaction reference for accounting, administrative and legal purposes.

 

10. Cookies and website analytics

 

My website may use cookies and similar technologies.

Some cookies are necessary for the website to operate. Other cookies may be used for purposes such as analytics, understanding website usage or marketing.

Where required by law, I will obtain your consent before using non-essential cookies.

You can manage your cookie preferences through the cookie settings available on my website.

Further information about the cookies used by my website is provided in my Cookie Policy.

 

11. Testimonials and reviews

 

I may ask clients to provide feedback or testimonials about their experience with Rooted & Rested. Anonymous testimonials and client transformation stories will be shared on my website and social media platforms. including Instagram and Facebook.

I will ask for your permission before publishing a testimonial that identifies you.

 

I will not publicly share identifiable information about your child without appropriate permission.

 

12. Who I share your information with

 

I do not sell or rent your personal information.

I may share relevant information with third-party service providers where this is necessary to operate my business or provide my services, including:

• Wix;

• Wix Payments;

• Calendly;

• Google Workspace/Google Drive;

• Google Meet;

• professional advisers;

• accounting or bookkeeping providers; and

• government bodies, regulators or law enforcement where legally required.

I will only share information that is reasonably necessary for the relevant purpose.

Where third-party providers process information on my behalf, I will take reasonable steps to ensure that appropriate data protection arrangements are in place.

 

13. International transfers

 

Some of the third-party services I use may process or store personal information outside the UK.

Where personal information is transferred outside the UK, I will take appropriate steps to ensure that the information continues to receive an appropriate level of protection in accordance with UK data protection law.

This may include relying on an adequacy decision or appropriate contractual safeguards where applicable.

 

14. How long I keep your information

 

I will only keep your personal information for as long as it is reasonably necessary for the purposes for which it was collected.

Different information may be retained for different periods.

Client information will generally be retained for an appropriate period after your coaching support has ended so that I can manage my business records, deal with any queries or complaints and meet relevant legal, accounting or insurance requirements.

Financial and accounting records will be retained for the period required by applicable law.

Marketing information will generally be retained until you unsubscribe or it is no longer necessary for the relevant purpose.

I will periodically review the information I hold and securely delete or anonymise information that I no longer need.

 

15. How I protect your information

 

I take reasonable technical and organisational measures to protect your personal information against:

• unauthorised access;

• accidental loss;

• misuse;

• alteration;

• unauthorised disclosure; and

• destruction.

Client records stored through Google Drive will be protected using appropriate account security measures, including strong passwords and, where available, multi-factor authentication.

I limit access to personal information to those who need it for legitimate business purposes.

However, no online storage or transmission system can be guaranteed to be completely secure.

 

16. Your rights

 

Under UK data protection law, you may have the right to:

• ask for access to the personal information I hold about you;

• ask me to correct inaccurate or incomplete information;

• ask me to delete your information in certain circumstances;

• ask me to restrict processing in certain circumstances;

• object to certain types of processing;

• request portability of your information in certain circumstances; and

• withdraw consent where processing is based on consent.

These rights are subject to certain legal exceptions and may not apply in every situation.

If you wish to exercise any of these rights, please contact me using the details below.

 

17. How to contact me

 

If you have any questions about this Privacy Policy, how I use your information or wish to exercise your data protection rights, please contact:

Rooted & Rested

Sophie Haselton-Viney

Email: sophie@rootedandrestedsleep.co.uk

Website: rootedandrestedsleep.co.uk

 

18. Complaints

 

If you have concerns about how I have handled your personal information, please contact me in the first instance so that I can try to resolve the matter.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Information about making a complaint is available from the ICO.

​

19. Changes to this Privacy Policy

​

I may update this Privacy Policy from time to time to reflect changes to my business, services, technology or legal requirements.

The latest version will be published on my website and will include the date it was last updated.

Last updated: 20 August 2026