Privacy Policy

This Privacy Policy applies to penworthy.com (the "Store") and any orders placed through it. The Store is operated by Penworthy Co. ("Penworthy", "we", "us"). Our online store runs on WooCommerce, and we work with a small number of trusted providers to process payments, ship orders, and keep the site running.

By using the Store or placing an order, you agree to the practices described here. If you do not agree, please do not use the Store.

Information you give us

• Account & contact details — your name, email address, phone number, and a password when you create an account.
• Order & shipping information — billing and delivery addresses, the kits you order, and any delivery notes.
• Payment information — handled by our payment processors. We receive a confirmation and the last four digits and card type, but we never see or store your full card number.
• Communications — messages you send to support, product reviews, and your email subscription preferences.

Information collected automatically

• Device & usage data — IP address, browser type, pages viewed, and referring links, collected through cookies and similar technologies.
• Cart & session data — WooCommerce uses functional cookies to remember the contents of your cart and keep you signed in as you move between pages.

We use the information we collect to:

• Process, fulfill, and deliver your orders, and send order and shipping confirmations.
• Provide customer support and respond to your questions.
• Manage your account and saved addresses.
• Process payments and prevent fraud.
• Send marketing emails about new kits and offers, where you have opted in. You can unsubscribe at any time.
• Improve the Store, understand which kits are popular, and keep the site secure.
• Meet our legal, tax, and accounting obligations.

Cookies are small files stored on your device. We use them to keep the Store working and to understand how it is used.

• Strictly necessary — WooCommerce cookies that power your cart, checkout, and signed-in session. The Store cannot function without these.
• Preferences — remember choices such as your region or recently viewed kits.
• Analytics — help us count visits and see which pages are useful. These are only set with your consent where required.

Card payments are processed securely by our PCI-compliant payment providers (such as Stripe and PayPal). Card details are sent directly to the processor over an encrypted connection and are not stored on our servers.

If you pay with education or program funds through an approved funds platform, your order details and amount are shared with that platform and, where applicable, your program administrator so the purchase can be reviewed and approved. We receive the approval status and payment confirmation in return.

We do not sell your personal information. We share it only as needed to run the Store:

• Service providers — payment processors, hosting, email delivery, and analytics partners who act on our behalf.
• Shipping carriers — your name and delivery address, so your kits can reach you.
• Funds platforms & program administrators — for orders paid with education funds, to enable approval and payment.
• Legal & safety — when required by law, or to protect the rights, safety, and property of Penworthy and our customers.

Many of our kits are designed for children, but the Store is intended for use by adults — parents, caregivers, and educators. We do not knowingly collect personal information from children under 13.

If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and request a copy.
• Correct information that is inaccurate or out of date.
• Request deletion of your information, subject to legal retention requirements.
• Opt out of marketing emails using the unsubscribe link or your account settings.
• Object to or restrict certain processing of your information.

To exercise any of these rights, email privacy@penworthy.com. We respond within the timeframe required by applicable law.

We keep your information for as long as your account is active and as needed to fulfill orders, comply with tax and legal obligations, resolve disputes, and enforce our agreements.

We protect your information with encryption in transit, access controls, and regular security reviews. No method of transmission over the internet is completely secure, but we work hard to safeguard your data.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or a notice on the Store.