This Privacy Policy explains how Penna Software Ltd (“Penna”, “we”, “us”) collects, uses and protects personal data when you visit usepenna.com or use our service. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018.
1. Data controller
The data controller is Penna Software Ltd, 86-90 Paul Street, London EC2A 4NE, UK. For any privacy request, contact contact@usepenna.com.
2. What we collect
- Account & enquiry data: name, work email, studio/website and team size.
- Service data: the projects, clients, files and invoices you store in Penna.
- Payment data: processed securely by our payment provider (Stripe); we do not store card numbers.
- Technical data: basic, aggregated analytics such as pages viewed, where enabled.
3. Why we use it & legal basis
- To provide and operate the service — performance of a contract.
- To respond to enquiries and set up trials — legitimate interest / pre-contract steps.
- To improve the product and measure usage — consent, where required.
- To meet legal, tax and accounting duties — legal obligation.
4. How long we keep it
Account data is kept while your account is active and for up to 12 months after closure. Enquiry data is kept for up to 3 years. Records required for tax are kept for up to 7 years. After these periods data is deleted or anonymised.
5. Sharing & processors
We never sell your data. We share it only with trusted processors (e.g. hosting, email and Stripe for payments) under contract, to operate the service. Where data is transferred outside the UK, we rely on approved safeguards such as the UK International Data Transfer Agreement or adequacy regulations.
6. Cookies
We use essential cookies to run the site and app. Any analytics cookies are set only with your consent, which you can withdraw at any time in your browser.
7. Your rights
Under the UK GDPR you have the right to:
- access, correct or erase your personal data;
- restrict or object to processing;
- data portability;
- withdraw consent at any time;
- complain to the UK regulator, the Information Commissioner's Office (ICO).
To exercise these rights, email contact@usepenna.com. We respond within one month.
8. Changes
We may update this policy from time to time. The “last updated” date above reflects the current version.