Privacy Policy

Last updated: 8th December 2025

1. Who we are

Mrs Penny (“we”, “us” or “our”) is a financial consultancy for the legal sector.

If you wish to contact us about data protection or this policy, please email: hello@mrspenny.com

This privacy policy applies to data collected via our website at www.mrspenny.com (the “Site”) and any services we provide via the Site.

2. What data we collect

We collect and process only minimal personal data, specifically:

Information you provide voluntarily when you use our Contact Us form - typically name, email address, and any message or other information you include.
Standard website data collected automatically when you visit the Site, such as IP address, browser/device information, and cookies or similar technologies.

Mrs Penny acts as the Data Controller for all personal data collected through this website, including information submitted via our Contact Form and data collected through cookies or analytical tools. As the Data Controller, we determine the purpose and means of processing your data and ensure it is handled lawfully, transparently, and securely. If we work with carefully selected third-party service providers (such as website hosting or analytics providers), they may act as Data Processors on our behalf. These processors only process your data according to our instructions and are bound by strict confidentiality and data protection obligations.

3. Why we collect it & how we use it

We use your data for the following purposes:

To respond to your enquiries submitted via the Contact Us form (e.g. provide information, follow up, communicate).
To maintain and improve our website - for example via analytics or to remember site preferences (if cookies are used).
For security, spam prevention, and general administration of the Site.

Our lawful basis for processing contact-form data is your consent (i.e. when you submit the form), and for automatic website data, it is typically our legitimate interest in operating and improving the Site and protecting it from misuse.

4. Cookies and tracking technologies

Our Site may use cookies or similar technologies. Some of these are strictly necessary (e.g. to enable basic website functionality), while others may be used for analytics, performance, or to remember user preferences.

If non-essential cookies are used (e.g. analytics, tracking, third-party services), we will request your consent (for example, via a cookie consent banner) before deploying them.

You are free to disable or manage cookies at any time via your browser settings, but this might affect how the Site works for you.

5. How long we keep your data

We will keep any personal data submitted via the Contact Us form only for as long as necessary to respond to your enquiry or to comply with any legal or regulatory obligations.

Once the purpose has been fulfilled, personal data will be deleted or anonymised - unless there is a need to keep a record (e.g. for legal or compliance reasons).

Automatically collected website data (e.g. via cookies) is retained only for as long as is necessary for the purposes for which it was collected (for example, session cookies may be deleted when you close your browser; analytics cookies, as permitted under your consent mechanism).

6. Do we share your data with anyone?

We do not sell, trade, or otherwise share personal information collected from you with third parties, except:

where required by law (e.g. to comply with a legal obligation or respond to a lawful request from authorities), or
in rare cases where we may use third-party service providers (e.g. hosting or email services) that help us operate the Site, but only to the extent necessary, and under confidentiality safeguards.

7. Your rights

Under UK data protection law, you have a number of rights regarding your personal data. In particular, you have the right to:

Request a copy of the personal data we hold about you.
Ask us to correct any errors in your personal data.
Request we delete your personal data (subject to any legal or legitimate reasons we may need to retain it).
Withdraw your consent at any time (for example, by asking us not to use your data for marketing).
Object to or restrict certain processing, or request portability if applicable.

If you wish to exercise any of these rights, please contact us at hello@mrspenny.com

8. Security & data protection

We take reasonable technical and organisational measures to protect the personal data we hold, including protecting against unauthorised or unlawful processing, loss, destruction, or damage. However, no system can guarantee absolute security.

9. Links to third-party websites

Our Site may include links to external websites or services. Once you click on a third-party link, the relevant third party’s privacy policy will apply. We encourage you to check their policies before submitting any personal data.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time (for example, if legal or regulatory requirements change or if our data practices change). When we do, we will publish the updated version on this page and update the “Last updated” date.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

hello@mrspenny.com

12. Authority Information

UK GDPR requires us to inform you of your right to raise concerns with the national data protection authority. If you believe your data has not been handled in accordance with data protection laws, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

ICO Contact Details:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113
Website: ico.org.uk

Thank you for trusting Mrs Penny. We are committed to protecting your privacy and giving you peace of mind.