Privacy Policy
Last updated: 13 June 2026
This policy explains what personal data The Pen House collects when you place an order, why we collect it, and what your rights are. We keep things deliberately simple: we only use your data to take payment for and deliver your order. We do not use analytics, advertising or social-media tracking, and we never sell your data to anyone.
Who we are
The Pen House (“we”, “us”) is the data controller for the personal data you provide. If you have any questions about this policy or your data, contact us at hello@thepenhouse.co.uk.
What we collect
When you place an order, we collect and hold:
- your name;
- your email address;
- your delivery address;
- the details of what you ordered.
We do not see or store your card details. Payment is handled entirely by Stripe on their own secure systems — your card number never touches our website.
Why we use it, and our lawful basis
We process your data to fulfil your order — to take payment, print and dispatch your Pen House, send you order updates, and deal with any returns or problems. Our lawful basis for this is performance of a contract with you. We also keep basic order and payment records to meet our legal obligations, such as tax and accounting law.
Who we share it with
We only share your data with the service providers we need in order to fulfil your order:
- Stripe — to process your payment securely;
- Postmark — to send your order confirmation email;
- our delivery carrier (e.g. Royal Mail) — to post your order to you.
Each of these only receives the data they need to do their part. We do not sell or share your data for marketing or any other purpose.
How long we keep it
We keep order and payment records for as long as we are legally required to (generally six years for UK tax purposes), after which they are deleted or anonymised. If you ask us to delete your data, we will do so except where we are legally required to retain it.
Cookies and tracking
Our site does not use analytics, advertising or social-media tracking cookies. To make the basket work, we store your basket contents in your browser’s local storage on your own device — this never leaves your browser and is not used to track you. When you pay, Stripe’s checkout pages may set their own cookies that are necessary to process the payment securely.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct anything that is wrong;
- ask us to delete your data (where we are not legally required to keep it);
- object to or restrict how we use your data.
To exercise any of these, just email us at hello@thepenhouse.co.uk. If you are unhappy with how we have handled your data, you can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Changes to this policy
If we change how we handle your data, we will update this page and the “last updated” date above.