Privacy Policy

Last updated: October 9, 2026

The Pennyfy (“we”, “us”) runs thepennyfy.com. This policy explains what personal data we collect, why we collect it and what rights you have. You can contact us at contact@thepennyfy.com.

1. Data we collect

  • Server logs. Our hosting provider records technical data such as your IP address, browser type, device information, the pages you request and the time of the request. This is used to run and secure the site.
  • Search and site performance data. We use Google Search Console and Google Site Kit to see aggregated information about how people find the site and how pages perform.
  • Messages you send us. If you email us or use a contact form, we receive your name, email address and the content of your message.
  • Cookies. The site may use cookies or similar technologies. We do not currently run advertising. If we add analytics or advertising cookies, we will update this policy and ask for your consent where the law requires it.

Please do not send us account numbers, passwords or other sensitive financial details.

2. Why we use your data and our legal basis (UK and EU GDPR)

  • To run and secure the website: legitimate interests.
  • To reply to your messages: legitimate interests, or taking steps at your request.
  • To meet legal obligations: legal obligation.
  • For any non-essential cookies in the future: your consent.

3. Sharing your data

We share data only with service providers that help us run the site, such as our hosting provider, Google (Search Console and Site Kit) and the email delivery service used to send and receive messages. We do not sell your personal data.

4. International transfers

Some of these providers process data outside the UK or the European Economic Area, including in the United States. Where the law requires it, they rely on approved safeguards for those transfers.

5. How long we keep data

We keep messages only as long as needed to reply and keep a reasonable record. Server logs are kept for the period set by our hosting provider.

6. Your rights

If you are in the UK or the EU, you can ask to access, correct or delete your personal data, restrict or object to its use, ask for a copy in a portable format and withdraw consent at any time. You can also complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority. If you are a California resident, you have the right to know what personal information we collect, to ask us to delete or correct it and to opt out of its sale or sharing. We do not sell personal information. To make a request, email contact@thepennyfy.com. We aim to respond within one month.

7. Children

This site is not aimed at children under 13 and we do not knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.

8. Security

We use reasonable technical and organisational measures to protect data. No online service is completely secure.

9. Changes to this policy

We will update the date at the top of this page when this policy changes.

10. Contact

Questions about this policy: contact@thepennyfy.com.