Privacy Policy
Last Updated: September 2026
This Privacy Policy ("Policy") describes how Penninite ("Company," "we," "us," or "our") collects, uses, discloses, retains, and safeguards information when you access or use the penninite.info website located at penninite.info (the "Site") and any related applications, features, tools, or services we make available (collectively, the "Services"). This Policy applies to all visitors, registered users, account holders, and other individuals who interact with the Services. By accessing, browsing, or using the Services, you acknowledge that you have read, understood, and agree to be bound by the practices described in this Policy. If you do not agree with this Policy, you must immediately discontinue your use of the Services.
This Policy is intended to satisfy our disclosure obligations under applicable United States law, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA") and other applicable state privacy laws. Where a specific state law grants you rights that exceed those described below, those rights will apply to you to the extent required by that law. This Policy does not create any rights beyond those expressly provided by applicable law, and no provision of this Policy shall be construed as a waiver of any legal right, defense, or limitation of liability available to the Company.
1. Information We Collect
We collect information that you provide directly to us, information that is automatically collected when you interact with the Services, and information obtained from third parties. The categories of personal information we may collect include, but are not limited to: identifiers such as your name, email address, postal address, telephone number, account name, and Internet Protocol address; commercial information such as records of products or services purchased, obtained, or considered; internet or other electronic network activity information such as browsing history, search history, and information regarding your interaction with the Services; geolocation data; professional or employment-related information; and inferences drawn from any of the foregoing to create a profile reflecting your preferences, characteristics, or behavior.
When you create an account, subscribe to a plan, request a demonstration, submit a support ticket, respond to a survey, or otherwise communicate with us, we may collect contact details, billing information, authentication credentials, and the content of your communications. If you integrate third-party services with our Services, we may receive information from those providers in accordance with their authorization settings. We do not intentionally collect sensitive personal information such as government-issued identification numbers, precise financial account credentials (beyond payment processor tokens), racial or ethnic origin, religious beliefs, health information, or biometric data, except where necessary to provide a requested service or as required by law.
We may also collect information automatically through cookies, pixels, software development kits, log files, and similar technologies, as further described in Section 4 below. We may combine information collected from multiple sources and use it consistent with this Policy. Where we de-identify or aggregate information so that it cannot reasonably be linked to an identifiable individual or household, we may use and disclose such information for any lawful purpose without restriction, and we will maintain such information in de-identified form as required by applicable law.
You are never obligated to provide personal information to us; however, if you decline to provide information that is necessary for a particular feature or service, you may be unable to access or use that feature or service. You are responsible for ensuring that any information you submit is accurate, complete, and current, and for promptly updating such information through your account settings or by contacting us.
2. How We Use Your Information
We use the information we collect for legitimate business and operational purposes, including to: provide, maintain, operate, and improve the Services; create and administer user accounts; process transactions and send related confirmations, invoices, and receipts; provide customer support and respond to inquiries; personalize content, recommendations, and user experiences; monitor and analyze usage trends, performance, and feature adoption; detect, investigate, and prevent fraudulent, unauthorized, or illegal activity; and enforce our agreements, including our Terms and Conditions and Terms of Service.
We may also use your information to communicate with you about products, services, promotions, newsletters, product updates, and events that we believe may be of interest to you, subject to your marketing preferences and applicable law. You may opt out of receiving promotional communications at any time by following the unsubscribe instructions included in such communications or by contacting us using the details in Section 10. Please note that even if you opt out of marketing messages, we may continue to send you transactional and administrative communications relating to your account, your transactions, and changes to our policies, as these are necessary to administer our relationship with you.
We may use information for security purposes, including verifying identity, authenticating access, maintaining audit logs, conducting internal risk assessments, and protecting the rights, property, and safety of the Company, our users, and the public. We may also use information to comply with our legal, regulatory, tax, accounting, and reporting obligations, to respond to lawful requests from public authorities, and to establish, exercise, or defend legal claims.
Where we rely on automated processing, machine learning, or analytics to support the Services, we implement reasonable measures designed to promote accuracy and to mitigate risks of unlawful discrimination or harm. We do not use personal information for purposes that are materially different, unrelated, or incompatible with the purposes described in this Policy without first providing notice or obtaining consent where required by applicable law.
3. Information Sharing
We may disclose personal information to our service providers, contractors, and vendors that perform functions on our behalf, such as hosting, cloud infrastructure, payment processing, analytics, customer support, marketing, email delivery, fraud prevention, and professional advisory services. These entities are contractually obligated to use personal information only for the purposes for which it was disclosed, to protect it with reasonable security measures, and to comply with applicable law. We do not authorize our service providers to use personal information for their own independent marketing purposes.
We may disclose personal information to our affiliates, subsidiaries, and corporate partners that are under common control with the Company, and to third parties in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar corporate transaction, including during due diligence. In such circumstances, we will use reasonable efforts to ensure that the acquiring entity is bound by terms consistent with this Policy, or we will provide notice of any material change in the treatment of personal information.
We may also disclose personal information where we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our agreements and policies; to protect against legal liability; to detect or prevent fraud or security incidents; or to protect the rights, property, and safety of the Company, our users, or others. We may disclose aggregated or de-identified information that cannot reasonably be linked to you without restriction.
The Company does not sell personal information for monetary consideration. However, certain uses of third-party advertising, analytics, and tracking technologies may constitute a "sale" or "sharing" of personal information under the CCPA/CPRA or "processing for targeted advertising" under other applicable state privacy laws. In such cases, you have the right to opt out as described in Section 5. Any transfer of personal information to a third party that constitutes a sale or share under applicable law will be subject to your opt-out rights, and we will honor opt-out requests as required.
4. Cookies and Tracking
We and our third-party partners use cookies, web beacons, pixels, local storage, and similar tracking technologies to collect information about your device, browser, and activity on the Services. Cookies are small text files stored on your device that enable functionality, remember your preferences, measure the effectiveness of our content, and support analytics and advertising. We use strictly necessary cookies to operate the Services, functional cookies to remember settings, performance and analytics cookies to understand how users interact with the Services, and advertising cookies where applicable.
Under the CCPA/CPRA, certain activities involving cross-context behavioral advertising may constitute a "sale" or "share" of personal information, and you have the right to opt out of such sale or sharing. You may exercise this right by using the "Do Not Sell or Share My Personal Information" link made available on the Site, by enabling a recognized opt-out preference signal such as the Global Privacy Control (GPC) in a supporting browser or extension, or by contacting us using the details in Section 10. Where we detect a valid opt-out preference signal, we will treat it as a request to opt out of sale and sharing for the browser or device used, as required by applicable law.
You can also manage cookies through your browser settings, which typically allow you to block or delete cookies. Please note that blocking or deleting certain cookies may impair the functionality of the Services and may prevent you from accessing some features. Because there is no universally accepted standard for "Do Not Track" signals, we do not currently respond to browser-based Do Not Track signals unless required by applicable law. For more detailed information about the specific cookies we use, their purposes, and how to manage them, please review our Cookie Policy.
5. Your Rights and Choices
If you are a resident of California or another state with an applicable comprehensive privacy law, you may have the following rights, subject to verification and legal exceptions: the right to know what categories and specific pieces of personal information we have collected, used, disclosed, or sold or shared, and the sources and purposes of such processing; the right to request deletion of personal information we have collected from you; the right to request correction of inaccurate personal information; the right to opt out of the sale or sharing of personal information and of targeted advertising; the right to limit the use and disclosure of sensitive personal information where applicable; and the right to not be discriminated against for exercising your privacy rights.
To exercise any of these rights, please submit a request by email to [email protected] or by telephone at +18435550112. You may also submit a request by mail to 200 Meeting Street, Suite 350, Charleston, SC 29401. We will acknowledge receipt of your request and will respond within the timeframes required by applicable law, generally within forty-five (45) days, subject to extension where reasonably necessary. We may need to verify your identity before processing your request, which may require you to provide information such as your name, email address, account details, or a signed declaration under penalty of perjury, depending on the sensitivity of the information requested.
You may designate an authorized agent to submit a request on your behalf. We may require proof that you have authorized the agent to act for you and may require you to verify your own identity directly with us, except where applicable law provides otherwise. If you are a parent or guardian submitting a request on behalf of a minor, we may require evidence of your relationship to the minor.
Where permitted by law, we will provide the requested information free of charge, unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act. We will inform you of the reasons for any denial and, where required by applicable law, provide an opportunity to appeal the decision. Exercising your privacy rights will not result in denial of goods or services, discriminatory pricing, or a lower quality of service, though certain features or offerings may require the processing of personal information in ways you have limited.
6. Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration, or misuse. These safeguards include encryption in transit, access controls, authentication requirements, network monitoring, employee training, and vendor risk management procedures. We periodically review and update our security practices in light of evolving threats and legal requirements.
Notwithstanding these measures, no method of transmission over the Internet, no method of electronic storage, and no security program can guarantee absolute security. You acknowledge and agree that you provide personal information to us at your own risk and that we cannot and do not guarantee the security of any information you transmit to or through the Services.
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to comply with legal, tax, and accounting obligations, to resolve disputes, and to enforce our agreements. Retention periods vary depending on the nature of the information and the context of processing. When personal information is no longer needed, we will delete, de-identify, or aggregate it in accordance with applicable law and our internal retention schedules, unless a longer retention period is required or permitted by law.
7. International Data Transfers
The Services are operated in the United States and are intended for users located in the United States. Personal information we collect is generally stored and processed in the United States. If you access the Services from outside the United States, you understand and agree that your information may be transferred to, stored in, and processed in the United States and in other jurisdictions where our service providers operate.
Those jurisdictions may have data protection laws that differ from, and may provide less protection than, the laws of your country. By using the Services or providing information to us, you consent to the transfer of your information to the United States and to the processing of that information in accordance with this Policy. Where required by applicable law, we will implement appropriate safeguards for cross-border transfers.
The Company makes no representation that the Services or this Policy comply with the laws of any jurisdiction outside the United States. Users who access the Services from other jurisdictions do so on their own initiative and are solely responsible for compliance with local law.
8. Children's Privacy
The Services are not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children under thirteen (13) in violation of the Children's Online Privacy Protection Act ("COPPA"). If you are under thirteen (13), you must not use the Services or provide any personal information to us. If we learn that we have inadvertently collected personal information from a child under thirteen (13), we will take reasonable steps to delete that information promptly.
Under the CCPA/CPRA, we do not sell or share the personal information of consumers under sixteen (16) years of age without affirmative authorization. Where required, consumers between thirteen (13) and sixteen (16) years of age may authorize the sale or sharing of their personal information themselves, and a parent or guardian must authorize such sale or sharing for consumers under thirteen (13). We do not knowingly permit the use of our Services by minors for commercial purposes.
If you are a parent or guardian and believe that your child has provided personal information to us, please contact us at [email protected] so that we can investigate and take appropriate action.
9. Changes to Policy
We reserve the right to modify, amend, or replace this Policy at any time and at our sole discretion. When we make material changes, we will update the "Last Updated" date above and, where appropriate or required by law, provide additional notice through the Services, by email, or by other reasonable means. Your continued use of the Services after any change becomes effective constitutes your acceptance of the revised Policy.
If we intend to use previously collected personal information for a materially different purpose, we will provide notice and, where required by law, obtain your consent or provide an opportunity to opt out before such use. We encourage you to review this Policy periodically to stay informed about our data practices.
This Policy, together with our Cookie Policy, Terms and Conditions, and Terms of Service, constitutes the entire understanding between you and the Company regarding the subject matter herein and supersedes all prior or contemporaneous agreements, communications, and proposals relating thereto.
10. Contact Information
If you have questions, concerns, or complaints regarding this Policy, our data practices, or your privacy rights, or if you wish to exercise any of the rights described in Section 5, please contact us using the details below. We will endeavor to respond to your inquiry in a timely manner and in accordance with applicable law.
- Company: Penninite
- Email: [email protected]
- Telephone: +18435550112
- Mailing Address: 200 Meeting Street, Suite 350, Charleston, SC 29401
You may also have the right to lodge a complaint with your state Attorney General or another competent regulatory authority. We ask that you contact us first so that we have an opportunity to address your concerns directly. This Policy is governed by the laws of the United States and the applicable state of the Company's principal place of business, without regard to conflict of law principles, and any dispute arising out of or relating to this Policy shall be subject to the exclusive jurisdiction and venue of the courts located therein, except where applicable law provides otherwise.