Privacy Policy

What we collect

• Contact form submissions — your name, email address, brand/company name (optional), and whatever message you send us.
• Newsletter signups — your email address.
• Chat assistant (Penny the CatBot) — what you type in the chat box, and your email address if you leave a message. Penny is a scripted assistant, not AI; your messages stay on our web host, aren't sent to any other company or AI service, and are deleted after 30 days. If you rate Penny with a face, the rating is saved with your chat so we can fix wrong answers, and it's deleted with the chat.
• Shop purchases — checkout and payment is handled entirely by Hostinger's ecommerce platform, not by us directly. We don't see or store your card details. Hostinger's own privacy practices apply to that part of the process.
• Tools Studio accounts and files — see Tools Studio accounts below.
• Basic technical data — standard server logs (IP address, browser type, pages visited) generated automatically by our hosting provider, the same as almost any website.

Why we collect it

• To reply to your inquiries and quote or deliver on projects you've asked about.
• To send newsletter updates, if you've signed up for them — you can unsubscribe anytime.
• To process and fulfill orders placed through the shop.
• To run Tools Studio accounts, exports, hosting and support.
• To keep the site secure and understand how it's being used.

Where it's stored

Contact form, chat, newsletter and Tools Studio data is stored in databases on our web host (Hostinger). We don't sell your information, and we don't share it with third parties except the service providers required to run our sites and tools: Hostinger (hosting and shop checkout), Stripe (Tools Studio payments), Google (analytics and fonts), Meta (ad measurement on our campaign pages) and Hostinger Reach (newsletter). Some of these providers process information outside Canada.

Cookies and third-party services

Our shopping cart uses your browser's local storage to remember what's in your cart — that data stays on your device and isn't sent to us. This site also loads a typeface from Google Fonts, which may log basic request information (like your IP address) as part of serving that font file. We also use Google Analytics on this site and on Tools Studio to understand how they're used; you can opt out with Google's opt-out browser add-on or your browser's settings. Our advertising landing pages also use the Meta Pixel, which tells Meta (Facebook and Instagram) when someone visits one of those pages or sends us their details, so we can measure how our ads perform. When you send us your details on one of those pages, the Meta Pixel also shares your name and email address with Meta in scrambled (hashed) form, so Meta can match the visit to a Facebook or Instagram account. You can control this in your Facebook or Instagram ad settings. Tools Studio also uses a sign-in cookie, described below.

Tools Studio accounts

If you create an account on Tools Studio (tools.penichecomms.ca), we collect your name, email address and password (stored in scrambled form, so we can't read it), and optionally your business name. We also record when you agreed to our Terms. We store the documents you create and the logos and images you upload, so you can come back to them. We use this information to run your account, let you build and export documents, take payment, send account and purchase emails (like password resets), and give support. We don't sell your information or use your documents for anything else.

• Payments — purchases on Tools Studio are processed by Stripe. We never see or store your card number. We keep a record of what you bought and your credit balance.
• Hosting orders — if you buy hosting, we collect your name, email, phone, business name, billing address and domain so we can set the site up.
• Copies we receive — when you export a site from Website Builder, or use "Send to Peniche" in Page Editor, we receive a copy of the site or design you sent so we can help you. We don't receive copies of your other exports.
• Two-step sign-in — if you turn it on, we store your authenticator key in encrypted form and your backup codes in scrambled form, so we can check the codes you enter.
• Newsletter images — images you use in a newsletter get a public link that works for that one image, so email apps can show them to your readers.
• Packages — if you put documents in a package, we store those PDFs until you remove them or delete the package. Anyone with the package's private link can view and download them, without an account; you can turn the link off at any time. If you email a package from Tools Studio, we send the link to the addresses you enter, on your behalf, and replies go to you. We keep those addresses with the package so you can see who it went to and so we can limit how many emails are sent. We don't add them to any mailing list or use them for anything else.
• Media folder — images you upload stay in your account's media folder, so you can reuse them, until you delete them there (deleting a document doesn't delete its images).
• Calendar links — if you import key dates from a Google Calendar, Outlook or iCloud link, Tools Studio reads that calendar to find the dates. We keep only the dates you choose to import, not the calendar itself.
• Publish to my site — if we host your site and you publish from Page Editor, your site's files are sent to your website on our web host (Hostinger). We keep a copy of each published version so you can put an earlier one back.
• Listings we build for clients — when we build course or event listings for a client's site, we store the spreadsheet they send us so we can update the listing. How we handle it is covered by our agreement with that client.
• Newsletter box — if you use the newsletter box on Tools Studio, your email goes to the same mailing list as this site (see above).
• Sign-in cookie — Tools Studio uses one cookie to keep you signed in (up to 30 days). It's needed for the account to work.

Your rights

You can ask us what information we have about you, ask us to correct it, or ask us to delete it, at any time. Just email us and we'll take care of it. For Tools Studio, ask us to delete your account and we'll delete it, along with your documents and uploaded files, within 30 days, except payment records we must keep for tax reasons.

Misuse and legal requests

We may review, keep and disclose information, including account details and the content involved, when we reasonably believe it's needed to enforce our Usage policy, to investigate misuse, to respond to a lawful request from a court, police or another authority, or to protect the rights and safety of others. We limit what we share to what's needed, and where we can lawfully do so, we'll tell you.

Security and breaches

We store passwords in scrambled form and limit who can access personal information. If a security incident creates a real risk of significant harm to you, we'll tell you and the privacy commissioner as the law requires.

Children

Our services are not for anyone under 16, and we don't knowingly collect information from children.

Questions?

Reach out at contact@penichecomms.ca and we'll sort it out.