Privacy Policy

Last updated: 10 August 2026

This policy explains what personal data this website collects, why, and what rights you have over it. It applies to pennykingsley.com.

Who is responsible for your data
The data controller for this website is Penny Kingsley (“we”, “us”, “our”). You can reach us about anything in this policy, including any request relating to your data, by email at penny@PennyKingsley.com. We deal with data enquiries by email only.

_______________________________
What we collect, and why

Mailing list and waiting list. If you register your name and email address to be notified about new books or the limited box sets, we store that name and email in order to send you those updates. Our lawful basis is your consent, which you give when you submit the form. You can withdraw it at any time (see “Your choices” below).

Orders (merchandise). If you buy an item such as a hoodie, we collect the information needed to fulfil your order: your name, delivery address, email, and order details. Payment card details are handled directly by our payment provider and are not stored by us. Our lawful basis is performance of our contract with you, and compliance with our legal obligations (for example, tax and accounting records).

Technical and usage data. Like most websites, our host and systems may automatically log basic technical information such as IP address, browser type and pages visited, to keep the site secure and working. Where this involves non-essential cookies, we rely on your consent.

We do not sell your data, and we do not use it to build advertising profiles.


Who processes your data on our behalf
We use trusted third parties to run the site. Each only receives the data needed for its role, and each is bound to protect it:

Brevo — email and mailing-list delivery (stores your name and email to send the updates you asked for).

Stripe — payment processing for merchandise orders (handles your card details securely; we never see or store the full card number).
WooCommerce and our website host** — to run the shop and store order records.

Purchases of the books themselves are made on Amazon, under Amazon’s own privacy policy, not ours.

Some of these providers may process data outside the UK. Where they do, they are covered by appropriate safeguards (such as UK-approved transfer mechanisms).

How long we keep it
We keep mailing-list data until you unsubscribe or ask us to delete it. We keep order and transaction records for as long as the law requires (generally up to six years for tax and accounting), then delete them.

Your choices and your rights
You can unsubscribe from any marketing email using the link in that email, at any time.

Under UK data protection law you have the right to: access the data we hold about you; have it corrected; have it erased; restrict or object to how we use it; receive a copy in a portable format; and withdraw consent at any time. To exercise any of these, email penny@PennyKingsley.com and we will respond within the statutory timeframe.

If you believe we have handled your data improperly, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies
We use essential cookies needed for the site and shop to function, and, only with your consent, non-essential cookies (for example basic analytics). You can control cookies through your browser settings and through any cookie banner shown on the site.

Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.