Privacy notice
Last updated 27 October 2026.
This page explains what happens to your name and email when you register an interest in a class. It is short because I collect very little.
Who is responsible
Sara Silva, trading as The Heritage Roots, Aberdare. Ask me on the contact form.
What I collect
Your name and your email address, and which class you asked about. If you choose to fill them in, where you are travelling from and any allergies or dietary needs — both optional, and used only to send you directions and an ingredient list. There is no phone field, no address field and no payment details anywhere on this site.
The only other thing that touches the server is a scrambled record of the connection a submission came from. It exists so a script cannot flood the form with fake sign-ups. It is a one-way hash, it cannot be turned back into an address, and it is gone within a day.
Why
To reply to you about the class you asked about, and to tell you when another date is announced.
The lawful basis
Consent. You give it when you press the button, and you take it back by asking me to delete your details.
How long
If you register for the class on 6 February 2027, your details are deleted on 6 February 2028. If you join the waiting list, they are deleted twelve months after your last submission, or twelve months after the spring class if one is set, whichever comes first. The job that deletes them runs by itself, every night, whether or not anyone remembers.
What I don't do
I don't sell your details or pass them to anyone else to use. There is no mailing list provider, no advertising pixel and no analytics script on this site.
Where it is kept
In a private database on a server we rent, which runs in the European Union. Only I and the person who maintains the site can reach it. The UK treats the EU as giving an adequate level of protection, so your details are protected there as they would be here. They are backed up on the same machine and the backup is deleted on the same schedule.
Traffic to this site passes through Cloudflare, which carries the site for us and so handles your details in transit, as any network operator does. It does not receive a list of them to use for its own purposes.
Cookies
None. This site sets no cookies, which is why there's no banner asking you about them.
How I know whether the page is working
The site counts visits and sign-ups itself, in aggregate, with no cookie and no identifier of any kind. It does not count people, only visits. If two people look once, that is two visits; if one person looks twice, that is two visits as well.
Your rights
Ask me for a copy of what I hold, ask me to correct it, or ask me to delete it, and I'll do it. Reply "remove me" to any email from me, or ask me on the contact form, and I'll remove you within seven days. If you think I've handled your details badly, you can complain to the Information Commissioner's Office at ico.org.uk. I'd rather you told me first.