Privacy policy

Introduction

Welcome to Penixy. Protecting customer privacy and maintaining the security of personal information are important priorities for our company. This Privacy Policy explains how Penixy collects, uses, stores, shares, and protects customer information when visitors access our website at penixy.myshopify.com, place orders, communicate with customer support, subscribe to updates, or interact with our services.

By using the Penixy website and services, customers acknowledge and agree to the practices outlined in this Privacy Policy. We encourage all customers to carefully review this page to understand how their information is managed and protected while shopping with our company throughout the United States.

This Privacy Policy is designed to comply with applicable federal privacy laws and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). California residents and other consumers have specific rights regarding their personal information, which are detailed below.

Information We Collect

Penixy collects various categories of personal and non-personal information from customers in order to operate efficiently, provide reliable services, process orders, and improve customer experience. The specific categories of information we collect include:

Information You Provide Directly

When customers create accounts, complete purchases, contact support, subscribe to newsletters, participate in promotions, or communicate with us, we may collect:

  • Identifiers: Customer names, email addresses, billing addresses, shipping addresses, phone numbers, and account credentials
  • Payment Information: Payment card details, billing information, and transaction history (processed securely through third-party payment processors)
  • Order and Purchase Information: Order history, product selections, purchase amounts, shipping preferences, and delivery instructions
  • Communications: Messages, inquiries, feedback, customer service correspondence, and any other information customers choose to provide when contacting us
  • Marketing Preferences: Newsletter subscriptions, communication preferences, and consent records

Information Collected Automatically

Certain technical and usage information is collected automatically when customers visit our website through cookies, analytics tools, and website technologies:

  • Device and Browser Information: Browser type and version, operating system, device identifiers, screen resolution, and language settings
  • Usage Data: IP addresses, browsing activity, pages visited, time spent on pages, clickstream data, search queries, referral sources, and interactions with website features
  • Location Information: General geographic location derived from IP address
  • Cookies and Tracking Data: Session information, user preferences, shopping cart contents, and website performance metrics

How We Use Customer Information

The information collected by Penixy is used to process transactions, fulfill orders, provide shipping updates, verify payments, improve website performance, personalize shopping experiences, respond to customer inquiries, maintain security, prevent fraudulent activity, and comply with legal obligations. Specifically, we use customer information for the following purposes:

Order Processing and Fulfillment

  • Processing and completing purchase transactions
  • Verifying payment information and preventing fraud
  • Preparing, packaging, and shipping orders to customer-specified addresses
  • Providing order confirmations, shipping notifications, and delivery updates
  • Managing returns, exchanges, and refunds in accordance with our 30-day return policy
  • Maintaining accurate order history and transaction records

Customer Service and Communication

  • Responding to customer inquiries, requests, and support issues
  • Providing product information, assistance, and troubleshooting
  • Sending transactional emails related to purchases, account activity, and policy changes
  • Communicating important updates regarding orders, shipping, or service changes

Website Operation and Improvement

  • Operating, maintaining, and improving website functionality and performance
  • Analyzing usage patterns and customer behavior to enhance user experience
  • Personalizing content, product recommendations, and shopping experiences
  • Testing new features, conducting research, and developing improvements
  • Troubleshooting technical issues and resolving website errors

Security and Fraud Prevention

  • Detecting, preventing, and investigating fraudulent transactions and unauthorized activity
  • Protecting against security threats, abuse, and illegal activity
  • Verifying customer identities and maintaining account security
  • Enforcing our terms of service and protecting company rights

Marketing and Promotions

Customer information may also be used to communicate promotional offers, special discounts, new product announcements, and marketing messages where permitted by law and consistent with customer preferences. Customers may opt out of marketing communications at any time using the unsubscribe mechanism provided in emails or by contacting us directly.

Legal Compliance

  • Complying with applicable laws, regulations, and legal obligations
  • Responding to lawful requests from government authorities, law enforcement, or courts
  • Protecting legal rights, privacy, safety, and property of Penixy, our customers, or others

Our company works to ensure that customer information is used responsibly and only for legitimate business purposes necessary to support operations and improve service quality.

How We Share Customer Information

Penixy does not sell customer personal information to third parties. However, we may share certain information with trusted service providers, business partners, and other entities as described below to operate our business, fulfill customer requests, and provide our services effectively.

Service Providers and Business Partners

We share customer information with third-party service providers who perform services on our behalf, including:

  • E-commerce Platform: Shopify and related hosting services that power our online store and provide website infrastructure
  • Payment Processors: Secure payment gateways and financial institutions that process transactions and verify payment information
  • Shipping Carriers: Delivery and logistics companies (such as USPS, UPS, FedEx, and regional carriers) that fulfill and ship orders to customers. Free shipping is provided within the United States, with delivery typically occurring within 3-5 working days
  • Analytics Providers: Services such as Google Analytics that help us understand website usage, traffic patterns, and customer behavior
  • Marketing and Communication Tools: Email service providers, marketing platforms, and customer relationship management systems that facilitate communications with customers
  • Fraud Prevention Services: Security providers that help detect and prevent fraudulent transactions and unauthorized access
  • Cloud Storage and IT Services: Technology providers that support data storage, backup, security, and technical infrastructure

Information shared with third-party providers is limited to what is reasonably necessary to complete transactions, improve services, maintain website operations, and fulfill customer requests. These service providers are expected to maintain confidentiality and implement reasonable security standards regarding customer information, and they are contractually restricted from using personal information for purposes other than providing services to Penixy.

Legal Obligations and Protection of Rights

We may disclose customer information when required by law or when we believe disclosure is necessary to:

  • Comply with legal obligations, court orders, subpoenas, or lawful government requests
  • Enforce our terms of service, policies, and agreements
  • Protect the rights, property, safety, and security of Penixy, our customers, or the public
  • Detect, prevent, or address fraud, security issues, or technical problems
  • Respond to claims that content violates the rights of third parties

Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other business transaction involving Penixy, customer information may be transferred to successor entities or acquiring parties as part of the transaction, subject to continued protection under this Privacy Policy or an equivalent privacy notice.

Aggregate and De-Identified Information

We may share aggregate, de-identified, or anonymized information that does not directly identify individual customers for research, analytics, marketing, or other business purposes. Such information is not considered personal information under applicable privacy laws.

Cookies and Tracking Technologies

Penixy uses cookies, analytics services, tracking technologies, and similar tools to improve website functionality, enhance customer experience, analyze traffic patterns, and personalize content. This section explains how these technologies work and how customers can manage their preferences.

What Are Cookies?

Cookies are small text files stored on a customer's device (computer, smartphone, or tablet) when they visit our website. Cookies help websites recognize user preferences, remember login information, maintain shopping cart contents, improve navigation, and analyze how visitors interact with the site.

Types of Cookies We Use

Our website may use several types of cookies and tracking technologies:

  • Essential Cookies: Necessary for basic website functionality, including account access, shopping cart operation, checkout processes, and security features. These cookies are required for the website to function properly and cannot be disabled without affecting site performance.
  • Performance and Analytics Cookies: Collect information about how visitors use our website, including pages visited, time spent on site, navigation paths, and error messages. This data helps us understand user behavior and improve website performance. We may use services such as Google Analytics for this purpose.
  • Functionality Cookies: Remember user preferences, settings, and choices (such as language preferences, display options, or previously entered information) to provide a more personalized experience during future visits.
  • Marketing and Advertising Cookies: Track browsing activity across websites to deliver relevant advertisements, measure campaign effectiveness, and limit ad frequency. These cookies may be set by our advertising partners and social media platforms.

Other Tracking Technologies

In addition to cookies, we may use:

  • Web Beacons and Pixels: Small graphic images embedded in emails or web pages that help us track email opens, clicks, and website interactions
  • Local Storage: Browser-based storage technologies that retain data on your device for improved functionality
  • Session Storage: Temporary data storage that expires when you close your browser

Managing Cookie Preferences

Customers may choose to disable or restrict cookies through browser settings, although some website functions may not operate properly if cookies are restricted or disabled completely. Most web browsers automatically accept cookies, but you can usually modify browser settings to decline cookies or alert you when cookies are being sent.

To manage cookies, please consult your browser's help documentation or visit the browser manufacturer's website. Please note that disabling essential cookies may prevent you from using certain features of our website, including account login, shopping cart functionality, and checkout processes.

Third-Party Cookies and Do Not Track

Some cookies may be set by third-party service providers, such as analytics platforms, advertising networks, and social media companies. We do not control these third-party cookies, and customers should review the privacy policies of these third parties to understand their data practices.

Our website does not currently respond to "Do Not Track" (DNT) browser signals, as there is no universal standard for how websites should interpret and respond to DNT requests. However, customers may use browser settings and privacy tools to limit tracking as described above.

California Consumer Privacy Rights (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). This section describes these rights and how California consumers may exercise them.

Right to Know

California consumers have the right to request that Penixy disclose:

  • The categories of personal information we have collected about them
  • The categories of sources from which personal information was collected
  • The business or commercial purposes for collecting, selling, or sharing personal information
  • The categories of third parties to whom we disclose personal information
  • The specific pieces of personal information we have collected about them

You may submit a verifiable request to know by contacting us using the methods described in the "How to Exercise Your Privacy Rights" section below. We will respond to verified requests within the timeframes required by law, typically within 45 days, and may extend this period by an additional 45 days when reasonably necessary with notice to you.

Right to Delete

California consumers have the right to request deletion of personal information that Penixy has collected, subject to certain exceptions. Upon receiving a verifiable deletion request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may retain certain information when necessary to:

  • Complete transactions, provide requested goods or services, or fulfill contractual obligations
  • Detect and resolve security incidents, protect against fraud, or prevent illegal activity
  • Debug and repair errors that impair website functionality
  • Exercise free speech rights or comply with legal obligations
  • Engage in research in the public interest that adheres to applicable ethics and privacy laws
  • Use information internally in a lawful manner compatible with the context in which it was provided

Right to Correct

California consumers have the right to request correction of inaccurate personal information that we maintain about them. Upon receiving a verifiable request to correct, we will use commercially reasonable efforts to correct the inaccurate information as directed, taking into account the nature of the information and the purposes for which it is processed.

Right to Opt-Out of Sale or Sharing

California consumers have the right to opt out of the "sale" or "sharing" of their personal information as those terms are defined under California law. Please see the "Do Not Sell or Share My Personal Information" section below for detailed information about this right.

Right to Limit Use of Sensitive Personal Information

Under the CPRA, California consumers have the right to limit the use and disclosure of sensitive personal information to purposes necessary to perform services or provide goods reasonably expected by consumers. Penixy does not use or disclose sensitive personal information for purposes other than those permitted under CPRA exceptions, so no separate opt-out mechanism is currently required.

Right to Non-Discrimination

California consumers have the right not to receive discriminatory treatment for exercising their CCPA/CPRA privacy rights. Penixy will not:

  • Deny goods or services to you
  • Charge different prices or rates for goods or services, including through granting discounts or other benefits or imposing penalties
  • Provide a different level or quality of goods or services
  • Suggest that you may receive a different price, rate, level, or quality of goods or services

However, we may offer financial incentives permitted by law, and we may charge different prices or provide different levels of service if the difference is reasonably related to the value provided by your personal information.

Authorized Agents

California consumers may designate an authorized agent to submit requests on their behalf. To designate an authorized agent, please provide written authorization signed by you and the agent, or a valid power of attorney. We may require verification of both your identity and the agent's authority before processing the request