Privacy
Last updated 23 August 2026
The short version. Your nonconformance records never leave your own device. The only personal data reaching us is what you deliberately type into the enquiry form or send by email.
RootLog is a product of Toolwright. For anything about this notice, or to ask what is held about you, email joe@rootlog.co.uk.
RootLog runs entirely inside your web browser. Everything you log — events, root causes, corrective actions, cost figures, supplier names, and the owner initials, employee number or email you choose to enter — is stored only in that browser's local storage, on that device.
There is no server, no database and no account system behind RootLog, so there is nowhere else for that information to go. Nobody but someone using the same browser on the same device can see it. That includes us: we cannot read your register, and we could not produce a copy of it if asked.
RootLog deliberately asks for owner initials and an employee number rather than a full name, to keep the amount of personal data in the register to a minimum.
The same is true of the free demo and the free ISO 9001 gap checker. Your demo entries and your gap checker answers stay in your browser.
Export. The Export tab downloads everything as a file, at any time, without asking us.
Delete. "Clear all data on this device" in the Export tab permanently erases everything RootLog has stored in that browser. Because nothing is held anywhere else, that erasure is complete — there is no separate copy on a server to also ask us to remove.
The enquiry form. If you fill in the form on the home page, the email address, company and message you type are sent to us and stored by our hosting provider, Netlify, so we can reply. We keep it only to answer you and to follow up about RootLog, and we delete it on request. Ask by emailing joe@rootlog.co.uk.
The gap checker results form. If you choose to have your gap checker results emailed to you, the same applies to the address and score you submit.
Hosting. This site is hosted by Netlify, which keeps standard server logs including IP addresses as a normal part of serving web pages.
Fonts. Some pages load typefaces from Google's font service, which may log your IP address as part of serving that file. Nothing else is shared with Google.
The "Chase" buttons in RootLog. These open your own device's email app with a message already filled in. RootLog does not send that email itself and never sees your email account or its contents.
There is no analytics, no advertising, no tracking cookie and no other third-party script on this site.
Under UK data protection law you can ask what personal data we hold about you, ask for it to be corrected or deleted, and object to us using it. In practice that will only ever concern an enquiry you sent us, since we hold nothing else. Email joe@rootlog.co.uk and we will respond within one month.
If you are not satisfied with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk.
If a future version of RootLog introduces optional shared or cloud storage — for multi-user use, for example — this notice will be updated first, and moving your data off your device will always be something you choose rather than something that happens automatically.