Effective Date: 01 August 2026

1. Introduction

Welcome to PennyHaul.Shop.

Your privacy is important to us. This Privacy Policy explains how YAF21 LIMITED, trading as PennyHaul.Shop, collects, uses, stores, shares, and protects your personal information when you visit our website, create an account, place an order, or otherwise interact with our services.

By using our website, you agree to the collection and use of your information in accordance with this Privacy Policy.

2. Who We Are

PennyHaul.Shop is operated by:

YAF21 LIMITED

Company Registration Number (CRN): 16056890

Registered Office

727 Barking Road, Suite 19
London E13 9ES
United Kingdom

Store Address

18 Plumstead Road
London SE18 7BZ
United Kingdom

Email:
support@pennyhaul.shop

Phone:
+44 7305 909769

Website:
https://pennyhaul.shop

For the purposes of UK GDPR, YAF21 LIMITED is the Data Controller of your personal information.

3. Information We Collect

Depending on how you use our website, we may collect the following information.

Personal Information

• Full name
• Email address
• Telephone number
• Billing address
• Shipping address

Order Information

• Products purchased
• Order history
• Payment status
• Delivery information

Please note that payment card details are processed securely by our payment providers and are not stored by PennyHaul.Shop.

Technical Information

When you visit our website, we may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Language preferences
• Time zone
• Referral source
• Pages viewed
• Time spent on pages
• Click behaviour

This information helps us improve our website and customer experience.

Cookies & Tracking Technologies

We use cookies and similar technologies to:

• remember your preferences;
• keep your shopping cart active;
• analyse website traffic;
• improve website performance;
• personalise your shopping experience;
• measure advertising performance.

Some cookies are essential for our website to function properly.

For more information, please refer to our Cookie Policy.

4. How We Collect Information

We collect information when you:

• visit our website;
• create an account;
• place an order;
• subscribe to our newsletter;
• contact Customer Support;
• leave a review;
• participate in promotions;
• communicate with us by email or social media.

We may also receive information from trusted third-party providers such as:

• Shopify
• Payment providers
• Shipping partners
• Google Analytics
• Meta (Facebook)
• Marketing platforms

5. How We Use Your Information

We use your personal information to:

• process and fulfil your orders;
• arrange shipping and delivery;
• provide customer support;
• communicate about your orders;
• prevent fraud;
• verify transactions;
• improve our website;
• personalise your shopping experience;
• send promotional emails (only where permitted or with your consent);
• comply with legal obligations.

We only collect information necessary to provide our services and operate our business lawfully.

6. Legal Basis for Processing Your Information

Under the UK General Data Protection Regulation (UK GDPR), we process your personal information only where we have a lawful basis to do so.

These legal bases include:

Performance of a Contract

We process your information to:

• process your orders;
• arrange delivery;
• provide customer support;
• manage returns and refunds.

Legal Obligation

We may process your information to comply with legal and regulatory obligations, including:

• tax requirements;
• accounting obligations;
• fraud prevention;
• law enforcement requests where required by law.

Legitimate Interests

We may process information where it is necessary for our legitimate business interests, including:

• improving our website;
• preventing fraud;
• analysing website performance;
• enhancing customer experience;
• maintaining website security.

We always balance our legitimate interests against your privacy rights.

Consent

Where required by law, we rely on your consent for activities such as:

• marketing emails;
• promotional newsletters;
• certain cookies;
• personalised advertising.

You may withdraw your consent at any time.

7. Sharing Your Information

We do not sell your personal information.

We only share information where necessary to operate PennyHaul.Shop.

Your information may be shared with trusted service providers, including:

• Shopify
• Payment providers
• Shipping and delivery companies
• Fraud prevention providers
• Marketing platforms
• Analytics providers
• Customer support providers
• Government authorities where legally required

These providers may process your information only for the services they perform on our behalf.

8. Shopify

PennyHaul.Shop is powered by Shopify.

When you use our website, Shopify processes certain personal information to provide hosting, checkout, payment processing, order management, and other eCommerce services.

Shopify processes information in accordance with its own Privacy Policy and applicable data protection laws.

9. Payment Providers

Payments are securely processed through trusted payment providers.

Depending on your chosen payment method, your payment information may be processed by:

• Shopify Payments
• PayPal
• Visa
• Mastercard
• American Express
• Apple Pay
• Google Pay
• Shop Pay

PennyHaul.Shop does not store your full payment card details.

10. Shipping Partners

To deliver your orders, we share only the information necessary with our shipping and logistics partners, including:

• your name;
• delivery address;
• telephone number (where required);
• order reference.

This information is used solely for order fulfilment and delivery.

11. Marketing & Analytics

We may use trusted third-party services to improve our website and marketing performance.

These may include:

• Google Analytics
• Google Ads
• Google Merchant Center
• Google & YouTube
• Meta (Facebook & Instagram)
• Microsoft Advertising
• Email marketing platforms
• Shopify Marketing tools

These services may use cookies and similar technologies to understand website usage and advertising performance.

12. International Data Transfers

Some of our service providers operate outside the United Kingdom.

Where your information is transferred internationally, we take appropriate safeguards to ensure that your personal data remains protected in accordance with UK GDPR.

Such safeguards may include:

• Standard Contractual Clauses (SCCs);
• adequacy decisions;
• other legally approved transfer mechanisms.

13. Data Security

We take appropriate technical and organisational measures to protect your personal information against:

• unauthorised access;
• accidental loss;
• misuse;
• alteration;
• disclosure;
• destruction.

These measures include:

• SSL encryption;
• secure payment processing;
• restricted system access;
• fraud monitoring;
• secure hosting provided by Shopify.

While we strive to protect your information, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

14. Data Retention

We retain your personal information only for as long as necessary to:

• fulfil your orders;
• provide customer support;
• comply with legal obligations;
• resolve disputes;
• enforce our agreements.

When your information is no longer required, it will be securely deleted or anonymised in accordance with applicable law.

15. Your Privacy Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your personal information.

Subject to applicable law, you may request to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Request deletion of your personal information where legally permitted.
• Restrict or object to certain types of processing.
• Receive a copy of your personal information in a portable format.
• Withdraw your consent where processing is based on consent.
• Lodge a complaint with the relevant supervisory authority.

To exercise any of these rights, please contact us using the details provided at the end of this Privacy Policy.

We may request proof of identity before responding to your request.

16. Marketing Communications

If you choose to subscribe to our newsletter or promotional emails, we may send you updates regarding:

• New product launches
• Special offers
• Exclusive promotions
• Seasonal sales
• Company news

You may unsubscribe from marketing emails at any time by:

• Clicking the "Unsubscribe" link included in our emails, or
• Contacting us directly at support@pennyhaul.shop.

Please note that even if you opt out of marketing communications, we may still send you important service-related emails, such as order confirmations, shipping updates, and customer support communications.

17. Children's Privacy

PennyHaul.Shop is intended for individuals aged 18 years or older.

We do not knowingly collect personal information from children under the age of 13.

If we become aware that personal information has been collected from a child without appropriate parental consent, we will take reasonable steps to delete that information as soon as possible.

Parents or guardians who believe that a child has provided personal information should contact us immediately.

18. Cookies

Our website uses cookies and similar technologies to improve your browsing experience.

Cookies help us:

• Keep your shopping cart active
• Remember your preferences
• Improve website performance
• Analyse visitor behaviour
• Provide relevant advertising
• Enhance website security

You can control or disable cookies through your browser settings.

Please note that disabling certain cookies may affect the functionality of our website.

For more information, please refer to our Cookie Policy.

19. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, content, or security of those external websites.

We encourage you to review the privacy policies of any third-party websites you visit.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our business operations
• Changes in applicable laws
• Improvements to our services
• Updates to our technologies

Any revised version will be published on this page with an updated Effective Date.

Your continued use of PennyHaul.Shop after any updates constitutes acceptance of the revised Privacy Policy.

21. Contact Us

If you have any questions about this Privacy Policy or how we process your personal information, please contact us.

PennyHaul.Shop

Operated by:
YAF21 LIMITED

Company Registration Number (CRN):
16056890

Registered Office:
727 Barking Road, Suite 19
London, E13 9ES
United Kingdom

Store Address:
18 Plumstead Road
London, SE18 7BZ
United Kingdom

Customer Support Email:
support@pennyhaul.shop

Telephone:
+44 7305 909769

Website:
https://pennyhaul.shop

22. Complaints

If you believe that we have not handled your personal information in accordance with applicable data protection laws, we encourage you to contact us first so that we can attempt to resolve your concerns promptly and fairly.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection.

Effective Date

This Privacy Policy is effective from the date it is published on PennyHaul.Shop and remains in effect until updated or replaced.