Contact Us

Privacy Policy

Last updated: 29 December 2025

This Privacy Policy describes how Pennies Haberdashery LTD (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit or make a purchase from https://romantic-boyd.87-106-143-36.plesk.page.

We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Pennies Haberdashery LTD
3 Shaws Walk
Andover
Hampshire
SP10 1LJ
United Kingdom

Email: hello@penniesandover.co.uk
Telephone: 01264 333 662
Website: https://romantic-boyd.87-106-143-36.plesk.page

We are the “data controller” for the purposes of data protection law.

Personal Data We Collect

When you use our website or shop with us, we collect the following information:

Information you provide to us

  • Name

  • Billing address

  • Shipping address

  • Email address

  • Telephone number

  • Order details and purchase history

  • Account login details (if you create an account)

  • Messages and enquiries sent to us

We do not store full payment card information.
Payments are processed securely by our payment service providers.

Information collected automatically

When you browse our website, we may collect:

  • IP address

  • Browser and device type

  • Pages viewed and links clicked

  • Date and time of visits

  • Cookie data

Some of this data is collected using cookies and similar technologies.

How We Use WooCommerce

Our store is powered by WooCommerce, which stores data necessary to:

  • Process orders

  • Provide checkout and basket functionality

  • Manage customer accounts

  • Detect and prevent fraud

  • Keep transaction records

Your information is stored securely on our website hosting platform.

Email Delivery (Office 365 & FluentSMTP)

We use Microsoft Office 365 together with FluentSMTP to securely send:

  • Order confirmations

  • Enquiry responses

  • Account notifications

  • Operational emails

This means your email address and relevant message content will be processed through Microsoft’s secure email servers.

Order Delivery (Royal Mail)

All customer orders are shipped using Royal Mail.

To arrange delivery of your purchases, we share the following details with Royal Mail:

  • Recipient name

  • Delivery address

  • Contact details (if required for delivery reference)

  • Order reference or parcel information

Royal Mail processes this information solely for the purpose of delivering your order.

Other Plugins & Services We Use

We use a number of tools to operate and improve our website, including:

  • Search & filtering tools

  • Reporting & analytics tools

  • Cookie management tools (Complianz)

  • Security & performance tools

  • POS software for in-store transactions

  • Google services via Site Kit

These tools may process anonymised or pseudonymised usage data.
Personal data is only shared where necessary and lawful.

We do not sell your personal data.

How We Use Your Information

We process your personal information to:

  • Process and deliver your orders

  • Manage payments and refunds

  • Provide customer service

  • Communicate with you

  • Operate and improve our website

  • Prevent fraud and misuse

  • Meet legal, accounting, and tax obligations

  • Send marketing communications (only with permission)

Legal Bases for Processing

We rely on the following lawful bases under UK GDPR:

  • Contract – to fulfil and manage orders

  • Legal obligation – accounting and compliance

  • Legitimate interests – running and improving our business

  • Consent – for marketing and certain cookies

You may withdraw consent at any time.

Sharing Your Data

We may share your data with:

  • Payment processors

  • Royal Mail (for all order deliveries)

  • Email hosting and SMTP services (Microsoft Office 365)

  • Website hosting & IT service providers

  • Accountants and advisers

  • Law enforcement where legally required

Some services may transfer data outside the UK.
Where this occurs, we ensure appropriate safeguards are used.

Data Retention

We retain your data only as long as necessary:

  • Order & transaction records — up to 7 years (legal requirement)

  • Customer accounts — until deleted or inactive for a reasonable time

  • Marketing data — until you unsubscribe

  • Enquiry records — for a reasonable period

Your Rights

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion (in certain cases)

  • Restrict processing

  • Object to processing

  • Withdraw consent

  • Request data portability

To exercise your rights, contact us at:
hello@penniesandover.co.uk

Complaints

You may also contact the Information Commissioner’s Office (ICO):
https://ico.org.uk

Cookies

We use cookies to:

  • Operate the website and checkout

  • Remember preferences

  • Improve performance

  • Analyse traffic

  • Support marketing activity (where permitted)

Cookie preferences are managed using Complianz GDPR/CCPA Cookie Consent.
You can change your preferences at any time.

Security

We take appropriate technical and organisational measures to protect your data and restrict access to authorised persons only.

Children

Our website is not intended for children under 16.

Changes to This Policy

We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated “Last updated” date.

Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact:

Pennies Haberdashery LTD
3 Shaws Walk
Andover
Hampshire
SP10 1LJ
United Kingdom

Email: hello@penniesandover.co.uk
Telephone: 01264 333 662

0