Privacy Policy

Introduction

At Penseru, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and purchase our curated British artisan gift collections.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

Information We Collect

Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Create an account
• Place an order
• Subscribe to our newsletter
• Contact us with enquiries

This information may include:

• Name
• Email address
• Phone number
• Billing address
• Delivery address(es) for gift recipients
• Payment information (processed securely by Stripe)

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Device type
• Pages visited and time spent on pages
• Referring website

How We Use Your Information

We use the information we collect to:

• Process your orders: Including payment processing, order fulfilment, and delivery to your specified gift recipients
• Communicate with you: Order confirmations, delivery updates, and customer support
• Improve our services: Understand how customers use our site and identify areas for improvement
• Send marketing communications: With your consent, we may send you information about new collections and special offers (you can opt out at any time)
• Prevent fraud: Detect and prevent fraudulent transactions and protect our customers
• Comply with legal obligations: Meet legal and regulatory requirements

How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information with:

Service Providers

• Payment Processing: Stripe (PCI-DSS compliant payment processor) for secure payment processing
• Database Services: Supabase for secure data storage and management
• Email Services: Migadu for transactional emails (order confirmations, delivery notifications)
• Delivery Partners: Courier services for delivering your gift collections

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure payment processing via Stripe (we never store your full card details)
• Regular security audits and updates
• Access controls limiting who can view personal data
• Encrypted database storage via Supabase

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

Your Data Protection Rights (GDPR)

If you are a resident of the European Economic Area (EEA) or United Kingdom, you have the following rights:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (subject to legal obligations)
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request transfer of your data to another service
• Right to object: Object to our processing of your personal data
• Right to withdraw consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, please contact us at privacy@penseru.com. We will respond to your request within 30 days.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors are coming from. For detailed information about the cookies we use, please see our Cookie Policy.

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our website.

Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this privacy policy
• Comply with legal, accounting, or reporting requirements
• Resolve disputes and enforce our agreements

Typically, we retain order information for 7 years for tax and accounting purposes. Marketing data is retained until you unsubscribe or request deletion.

Third-Party Websites

Our website may contain links to third-party websites (such as our artisan partners' sites). We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last updated" date.

We encourage you to review this privacy policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@penseru.com
• Post: Penseru Ltd, Hare House, 732 Whittingham Lane, Preston, PR3 2JJ

For general enquiries, please visit our Contact page.