last updated 7 October 2026

Your email, kept simple.

This page is about the Roots email list on roots.pepsecanell.com. It's written in plain English on purpose. If anything here is unclear, write to me at pep@roots.pepsecanell.com.

Who's behind it

Me, Pep Secanell, in Spain. I run Roots on my own and I'm the one who reads the replies.

What I keep when you sign up

• Your email address.
• When you signed up, and whether you clicked the confirmation link.
• Which page the form was on (the home page or the free guide page).
• The exact words of the box you ticked, and which version of them, so I can show you agreed.
• How many of the 7 emails you've had.
• A short record of which emails went out (by number, like "email 4"), so nobody gets the same one twice. Each record is deleted after 60 days.

What I don't keep

No name, no IP address, no location, no device details. I never ask about your health, and you never need to tell me anything about it. My emails have no tracking pixels and the links aren't tracked, so I can't see if you opened anything. The site sets no cookies of its own and has no analytics.

If you reply to an email and tell me about your own health, that stays in my inbox, I only use it to answer you, and I delete it if you ask.

Why

Only to send you what you asked for: the Roots Guide, the 7 emails, and after them my occasional notes from Roots. The legal basis is your consent (GDPR article 6.1.a), and you can take it back at any time. I never sell your address or share it with anyone for their own use.

Who helps me run it

• Cloudflare runs the website and the database, which is stored in the EU. Its spam check, Turnstile, looks at your browser to tell people from bots. To stop abuse, Cloudflare also counts signups per IP address for one minute, in memory. That count isn't saved by me.
• Resend delivers the emails. It receives your address and the email so it can deliver it.

Both have their own privacy policies for the data they handle. Both may process data outside the EU, under the safeguards the GDPR requires (standard contractual clauses).

How long

• If you never click the confirmation link, your address is deleted after 7 days.
• If you confirm, I keep it until you leave.
• When you leave, your address stays on the list marked "unsubscribed", only so I never email you again by mistake. If you want it gone completely, write to me and I delete it.

How to leave

Every email has a link at the bottom. One click and you're out, no login, no questions. Many email apps also show an "Unsubscribe" button at the top, which does the same thing.

Your rights

You can ask me what I have about you, ask me to correct it or delete it, and take your consent back at any time. Just reply to any email or write to pep@roots.pepsecanell.com. If you think I've handled your data badly, you can also complain to a data protection authority. In Spain that's the AEPD (aepd.es).

Not medical advice

Roots, the guide and the emails share my own experience and general information. None of it is medical advice, a diagnosis or a treatment plan. For your own health, talk to your doctor.

Changes

If this page changes in a way that matters, the date at the top changes too, and if it affects how I use your email, I'll tell you by email first.