Get Started

Website Privacy Policy

Last updated: 7 September 2026

This Privacy Policy explains how Penney’s Finance School collects, uses and protects personal information obtained through the website:

https://penneysfinanceschool.co.uk/

This policy applies specifically to your use of this website and any forms, registrations, downloads or enquiries submitted through it.

1. Who we are

Penney’s Finance School is responsible for deciding how personal information collected through this website is used. For the purposes of UK data protection law, we are the data controller.

For questions about this Privacy Policy or how we handle your personal information, please contact:

Email: info@penneysfinanceschool.co.uk

2. Information we collect

We may collect the following information when you use this website:

  • Your name
  • Your email address
  • Your telephone number
  • Your business name
  • Information you provide through an enquiry, registration or contact form
  • Details relating to courses, events, resources or services in which you are interested
  • Marketing preferences and consent records
  • Payment and transaction information where you make a purchase
  • Technical information, including your IP address, browser type, device type and operating system
  • Information about how you use the website, including the pages you visit and how you interact with them
  • Any other information you voluntarily provide to us

Please do not submit sensitive personal information through the website unless we have specifically requested it.

3. How we collect your information

We may collect your information when you:

  • Submit a contact or enquiry form
  • Register for a course, workshop, webinar or event
  • Purchase a product, course or service
  • Create or access an online account
  • Download a guide, template or other resource
  • Subscribe to receive emails or updates
  • Contact us using the details provided on the website
  • Accept optional cookies through the cookie consent banner
  • Browse or interact with the website

Some technical information may be collected automatically through essential cookies and similar technologies.

4. How we use your information

We may use information collected through this website to:

  • Respond to your enquiries
  • Process registrations and purchases
  • Provide access to courses, events, resources or online content
  • Administer your account
  • Deliver the products or services you have requested
  • Process payments and maintain transaction records
  • Send important information about a booking, purchase or registration
  • Provide customer support
  • Send marketing communications where you have given consent or where otherwise permitted by law
  • Improve the performance, usability and security of the website
  • Understand how visitors use the website
  • Prevent fraud, misuse and unauthorised access
  • Maintain appropriate business and financial records
  • Meet our legal and regulatory obligations
  • Establish, exercise or defend legal claims

We will only use your information for the purposes for which it was collected, unless we reasonably consider that it is necessary to use it for a compatible purpose.

5. Our lawful bases for processing

Under the UK GDPR, we must have a lawful basis for processing personal information. Depending on the circumstances, we may rely on:

Consent

We may rely on your consent when you choose to receive marketing communications or accept optional cookies. You can withdraw your consent at any time.

Contract

We may process your information when it is necessary to provide a course, event, resource, product or service you have requested, or to take steps at your request before entering into a contract.

Legitimate interests

We may process information where it is necessary for our legitimate interests, provided those interests do not override your rights. These interests may include:

  • Responding to enquiries
  • Managing and improving the website
  • Understanding website usage
  • Providing customer support
  • Protecting the website against fraud and security threats
  • Maintaining appropriate records
  • Promoting relevant services to existing customers where permitted

Legal obligation

We may process information where necessary to comply with legal, tax, accounting or regulatory requirements.

6. Payments

If you make a payment through the website, the transaction may be processed by a third party payment provider.

We do not normally receive or store your complete payment card details. Payment providers process this information in accordance with their own privacy policies and security procedures.

We may retain details of the transaction, such as your name, contact details, purchase information, payment status and transaction reference, for accounting, customer service and legal purposes.

7. Marketing communications

We may send you information about courses, resources, events or services where:

  • You have given us permission to do so
  • You are an existing customer and the communication relates to similar services, where permitted by law

You can unsubscribe at any time by:

Unsubscribing from marketing will not prevent us from sending essential messages relating to a purchase, registration, account or service.

8. Cookies

This website uses cookies and similar technologies.

Cookies are small files placed on your device when you visit a website. They may be used to:

  • Enable essential website functions
  • Remember your preferences
  • Keep the website secure
  • Understand how visitors use the website
  • Measure website performance
  • Support embedded content or marketing features

Essential cookies may be placed without consent where they are necessary for the website to operate.

Analytics, advertising and other optional cookies will only be used after you have provided consent through the website’s cookie consent banner.

You can use the cookie consent tool to accept, reject or manage optional cookies. You can also control cookies through your browser settings, although disabling essential cookies may affect how the website functions.

Further information about the specific cookies used should be available through the cookie consent banner or cookie settings tool.

9. Analytics and website monitoring

Where you consent to analytics cookies, we may use analytics services to understand:

  • How many people visit the website
  • Which pages are viewed
  • How visitors find the website
  • How visitors interact with its content
  • Whether technical or usability improvements are required

Analytics information may include your approximate location, IP address, device information and browsing activity.

Where possible, we use aggregated or anonymised information for reporting purposes.

10. Embedded content and external links

The website may contain embedded content, videos, social media features or links to third party websites.

Interacting with third party content may allow the relevant provider to collect information about you, particularly if you are signed into an account with that provider.

Third party websites and services operate under their own privacy policies. We are not responsible for the privacy practices, security or content of external websites.

11. Who we share your information with

We may share personal information with trusted providers that help us operate the website and deliver our services, including:

  • Website hosting and maintenance providers
  • Course and learning platform providers
  • Email and marketing service providers
  • Customer management systems
  • Payment processors
  • Analytics providers
  • IT support and security providers
  • Professional advisers, including accountants and legal advisers
  • Government bodies, regulators or law enforcement agencies where legally required

These providers may only use personal information for the agreed purpose and must protect it appropriately.

We do not sell your personal information.

12. International transfers

Some of the service providers used by this website may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure it remains protected. These measures may include:

  • Transferring information to a country recognised as providing an adequate level of protection
  • Using approved contractual safeguards
  • Applying another lawful transfer mechanism permitted under UK data protection law

You may contact us if you would like further information about the safeguards used for international transfers.

13. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods will depend on the nature of the information and our legal, contractual and operational obligations. For example:

  • Enquiry information is generally retained for as long as necessary to respond and manage any resulting relationship
  • Account, registration and course information may be retained while your account or access remains active
  • Transaction and financial records may be retained for up to six years after the relevant accounting period
  • Marketing information may be retained until you withdraw your consent or object to receiving marketing
  • Cookie consent records may be retained as evidence of your preferences
  • Technical and security records may be retained for a reasonable period to protect the website and investigate incidents

Information may be retained for longer where required by law or in connection with a dispute or legal claim.

14. How we protect your information

We use reasonable technical and organisational measures to protect personal information against:

  • Unauthorised access
  • Accidental loss
  • Misuse
  • Alteration
  • Disclosure
  • Destruction

These measures may include secure hosting, access controls, software updates, encryption and appropriate data handling procedures.

Although we take reasonable precautions, no internet transmission or electronic storage system can be guaranteed to be completely secure.

15. Your data protection rights

Depending on the circumstances, you may have the right to:

  • Request access to the personal information we hold about you
  • Ask us to correct inaccurate or incomplete information
  • Ask us to delete your personal information
  • Ask us to restrict how your information is used
  • Object to certain types of processing
  • Request the transfer of information you provided to us
  • Withdraw consent at any time
  • Complain about how your information has been handled

Some rights are subject to legal conditions and exemptions.

To exercise any of these rights, please email info@penneysfinanceschool.co.uk.

We may ask for information to confirm your identity before responding. We will normally respond within one month, although the law allows additional time in certain circumstances.

16. Complaints

If you have concerns about how your personal information has been handled, please contact us first so that we can investigate.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

17. Children’s information

This website and its services are not intended for children. We do not knowingly collect personal information from children through the website.

If you believe that a child has submitted personal information to us, please contact us so that we can investigate and take appropriate action.

18. Changes to this policy

We may update this Privacy Policy to reflect changes to the website, our data handling practices or legal requirements.

The latest version will be published on this page with an updated revision date. We encourage you to review this policy periodically.