Privacy Policy
Effective Date: 4th July 2025 | Last Reviewed: June 2026
Welcome to Penny Bennett Style Consultancy. We respect your privacy and are committed to protecting your personal data. This policy outlines how we look after your information when you visit our website, join our Style Club, or use our services — and tells you about your privacy rights under UK law.
1. Who We Are
This website (https://penny-bennett.com) and its associated subdomains (including the Style Club) are operated by Penny Bennett Style Consultancy, a UK-based personal style consultancy.
Under UK data protection law, we are the Data Controller responsible for your personal information.
Contact Details
Email: penny@penny-bennett.com
2. What This Policy Covers
This policy explains:
- What personal data we collect and why we use it
- Our lawful bases for processing your information
- How we store, protect, and share your data
- Your legal rights and how to exercise them
We process all personal data in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
3. The Data We Collect & Why We Use It
| Type of Information | Purpose for Collection |
|---|---|
| Identity & Contact (Name, email address) | To respond to enquiries, deliver newsletters, manage your membership, or provide style services. |
| Transactional (Postal address, phone number) | For booking confirmations, administrative updates, invoicing, or shipping physical materials if required. |
| Financial (Payment details) | Processed securely via our third-party payment gateways (e.g. Stripe, PayPal, Kajabi). We do not store your card details on our servers. |
| Technical & Usage (Cookies, IP address, browsing activity) | To monitor site performance, enhance your user experience, and ensure security. |
| Engagement Data (Email opens and clicks) | To understand what style content resonates with you, allowing us to improve our communications. |
4. Lawful Basis for Processing
- Consent: When you voluntarily sign up for our style newsletters or accept optional cookies. You can withdraw this consent at any time.
- Performance of a Contract: Where we need to process your data to deliver a service you have purchased or requested.
- Legal Obligation: Where we must keep records for tax, accounting, or regulatory compliance.
- Legitimate Interests: For our justifiable business interests in operating, securing, and marketing Penny Bennett Style Consultancy, provided your fundamental rights do not override those interests.
5. Marketing Communications
If you choose to join our email list, you will receive curated style advice, news, event invitations, and exclusive offers.
Our Privacy Promise: We do not sell, rent, or trade your personal data with third parties for marketing purposes. Ever.
You can opt out at any time by clicking the "unsubscribe" link in any email, or by emailing penny@penny-bennett.com.
6. Third-Party Services & International Transfers
We use trusted third-party providers to help run our business (including website hosting, email marketing platforms, membership portals like Kajabi, and payment processors). These providers only handle your data under our strict instructions and are legally bound to keep it secure.
Some of our external partners are based outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK-approved Standard Contractual Clauses or adequacy regulations.
Appointment booking is managed via Moxie. Clicking any booking link will redirect you to Moxie's own platform. Any data you submit is processed under Moxie's privacy policy.
7. How Long We Retain Your Data
- Enquiry & Contact Forms: Up to 12 months from our last interaction.
- Newsletter & Marketing Lists: Until you choose to unsubscribe or request erasure.
- Client & Transactional Records: Up to 6 years following the end of the financial year in which the transaction occurred.
8. Cookies & Tracking Technology
Our website uses cookies and similar tracking technologies to ensure our site functions correctly, analyse performance, and personalise your experience.
When you first visit our site, a cookie consent banner allows you to accept, decline, or customise your cookie preferences. You can also manage or block cookies at any time via your browser settings. To learn more, visit allaboutcookies.org.
Analytics Cookies
These only fire after you have given consent via our cookie banner.
| Cookie ID | Domain | Duration | Purpose |
|---|---|---|---|
| _ga_* | .penny-bennett.com | 1 year, 1 month | Google Analytics: Stores and counts page views. |
| _ga | .penny-bennett.com | 1 year, 1 month | Google Analytics: Calculates visitor, session, and campaign data. Recognises unique visitors anonymously. |
Necessary & Functional Cookies
These cookies are essential for core functionality and security. They do not store personally identifiable information and do not require consent to operate.
| Cookie ID | Domain | Duration | Purpose |
|---|---|---|---|
| __cf_bm | .styleclub.penny-bennett.com | 1 hour | Cloudflare: Bot management and site protection. |
| _cfuvid | .styleclub.penny-bennett.com | Session | Cloudflare: Session optimisation and connection consistency. |
| _kjb_session | .styleclub.penny-bennett.com | 1 day | Kajabi: Tracks active member sessions to avoid repeated logins. |
| wpEmojiSettingsSupports | penny-bennett.com | Session | WordPress: Checks browser emoji compatibility. |
| nevercache-b39818 | penny-bennett.com | Session | SiteGround: Temporary server-side cache management. Expires immediately. |
| AWSALBTG | .styleclub.penny-bennett.com | 7 days | Amazon Web Services: Server load balancing for reliable site performance. |
| AWSALBTGCORS | .styleclub.penny-bennett.com | 7 days | Amazon Web Services: Load balancing across cross-origin requests. |
| _csrf_token | .styleclub.penny-bennett.com | 1 year | Security: Prevents Cross-Site Request Forgery attacks on forms. |
| wp_consent_preferences | penny-bennett.com | 1 month | WP Consent API: Saves your cookie consent choices. |
| wp_consent_statistics | penny-bennett.com | 1 month | WP Consent API: Remembers your analytics preferences. |
| wp_consent_statistics-anonymous | penny-bennett.com | 1 month | WP Consent API: Ensures anonymous tracking respects your privacy selections. |
| wp_consent_functional | penny-bennett.com | 1 month | WP Consent API: Saves your functional cookie preferences. |
| wp_consent_marketing | penny-bennett.com | 1 month | WP Consent API: Records your marketing cookie preferences. |
| cookieyes-* | penny-bennett.com | 1 year | CookieYes: Powers the cookie consent banner. |
9. Your Legal Rights
Under UK GDPR, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete information.
- Erasure: Request deletion of your data in certain circumstances.
- Restriction: Request that we limit how we process your data.
- Data Portability: Request transfer of your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests or direct marketing.
- Withdraw Consent: Withdraw consent at any time where we rely on it to process your data.
To exercise any of these rights, email penny@penny-bennett.com. We aim to respond within one calendar month.
If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). We would appreciate the chance to resolve your concerns directly first.
10. Changes to This Policy
We may update this policy from time to time. The most current version will always be posted on this page, and we will notify email subscribers of any significant updates.