Who we are

This site is operated by Penned Connections Pty Ltd (ABN 45 641 965 559), based on the Sunshine Coast, Queensland, Australia ("Penned", "we", "us"). We are responsible for personal information collected through penned.co and handle it in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You can contact us at hello@penned.co.

When we produce and post letters on behalf of a business client, we act as a data processor for the recipient data that client provides, and process it only on their instructions under our service agreement.

The information we collect

  • Information you give us — when you request a sample pack or contact us: your name, company, work email, phone number, postal address, and the details of your enquiry or message.
  • Recipient data (as processor) — names and addresses our clients provide so we can write and post their letters, processed on their instructions.
  • Information collected automatically — with your consent, analytics data about how you use the site (pages viewed, device and browser, approximate location) via cookies. See our cookie policy.

How we use it, and our lawful bases

  • To respond to your enquiry and provide a sample pack — our legitimate interests, and taking steps at your request before entering a contract.
  • To provide and administer our service — performance of a contract.
  • To send marketing, where you've asked us to — your consent.
  • Analytics and advertising measurement — your consent (managed via the cookie banner).
  • To meet legal, accounting and regulatory obligations — legal obligation.

Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf under appropriate agreements, including: Google (analytics and advertising), Zoho (email), Twilio SendGrid (email delivery), Vercel (website hosting), Cloudflare (DNS and security) and MongoDB (database). We may also disclose data where required by law.

International transfers

Some of our providers are based overseas. Where personal information is disclosed outside Australia, we take reasonable steps under Australian Privacy Principle 8 to ensure it is handled consistently with the Privacy Act and protected by appropriate contractual safeguards.

How long we keep it

We keep personal data only for as long as necessary for the purposes above, to run our business, and to meet legal or accounting requirements, after which it is securely deleted.

Your rights

Under the Australian Privacy Act you have the right to access and correct the personal information we hold about you, and to withdraw consent to marketing at any time. To exercise any of these, email hello@penned.co. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Cookies

How we use cookies, and your choices, are set out in our cookie policy.

Changes

We may update this policy from time to time; changes will appear here with a revised date.

Contact

Email hello@penned.co.