Privacy Policy

1: Who we are

Mange The Pennies operates a course booking and payment platform, covering booking management, payment processing, live session delivery, an anonymous check-in feature, and cookie consent.
Data controller: Manage The Pennies (managethepennies.com). Contact: [email protected]

2: What we collect and why

2.1: When you book a course

When you submit a booking form we store:

• Full name
• Email address
• Mobile number (if provided)
• Any comments you add on the booking form
• The course booked, booking status (pending / confirmed / declined / cancelled), and timestamps
• A unique booking token (used in your confirmation/portal links)
• A system-generated portal password and PIN, used to access your course/Zoom materials

We use this to process your booking, confirm your place, communicate with you about the course, and give you access to session joining details.

2.2: When you pay (via Stripe)

We do not store your card details ourselves. Payment is handled by Stripe. We store:

• A record of each payment or instalment (amount, date, status, Stripe payment/subscription reference)
• Whether you chose full payment or an instalment plan, and the instalment schedule
• Your name and email are sent to Stripe to create/match a Stripe Customer record, so instalments and receipts work correctly

Stripe processes and stores your card details under its own privacy policy: https://stripe.com/gb/privacy

2.3: Joining a live session

For each weekly session you’re booked on, we generate:

• A one-time Zoom meeting (created via the Zoom API), including the join link and password
• A separate portal password and PIN issued per booking, per session, so each week’s access code is unique to you
• A record of whether your session reminder email has been sent

We use this solely to get you into the correct Zoom session and to send a reminder roughly an hour beforehand.

2.4: Debt & Savings check-in

This feature is deliberately built to be anonymous. When you submit a check-in, we store only:

• The session/meeting it relates to
• The debt amount and savings amount you enter
• A timestamp

We do not store your name, email, booking ID, or any other identifier alongside this submission — there is no way for us to trace a check-in back to you. Separately, we keep a one-way cryptographic hash of your unique submission link once it’s used, purely to stop the same link being submitted twice; this hash cannot be reversed to reveal the link or your identity, and is deleted once meeting totals have been sent.

2.5: Cookies

You can view and change your choice any time via the “Cookie Settings” tab in the bottom-left corner of any page. In short:

• Necessary cookies (always on) — needed for the site to function
• Functional cookies — only set if you accept them
• Analytics cookies only load if you accept them

Your cookie choice (accept/reject/categories) and the date you made it are stored in a cookie on your own device, not in our database.

3: Who we share data with

• Stripe — payment processing, card details, and your name/email for customer/receipt matching. See Stripe’s privacy policy above.
• Zoom — meeting topic (course name + week number) and start time, to create your session’s meeting. Zoom does not receive your name or email from us directly; the meeting itself is what you use to join.
• Analytics Services — only if you accept analytics cookies; used for aggregate website usage statistics.

We do not sell your personal data, and we do not share it with anyone else outside of running the course booking, payment, and session-delivery service described above.

4: How long we keep data

• Booking and payment records are kept for as long as needed to run the course, handle any refund or dispute, and meet our accounting/tax obligations, after which they can be deleted on request (see Section 6).
• Zoom portal credentials and meeting records are tied to your booking and deleted if the related course or booking is deleted.
• Debt & Savings check-in submissions are anonymous from the moment they’re submitted, so there is no “your data” to delete individually — the totals are kept for programme reporting.
• Used check-in tokens (the hash mentioned in 2.4) are automatically purged once the totals for that session have been sent out.

5: Your rights

Depending on where you live, you may have the right to access, correct, delete, or export the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these, contact us at [email protected].

If you’re in the UK and believe we haven’t handled your data properly, you also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

Because course bookings, refund history and Stripe payment records are also needed for our accounting and legal obligations, we may need to retain some records even after a deletion request — we’ll explain what and why if this applies.

6: Security

Portal passwords and PINs are randomly generated per booking/session rather than user-chosen, and check-in tokens are stored as one-way hashes, not in plain text.

Payment card data never touches our servers — it is handled entirely by Stripe.

7: Changes to this policy

We may update this policy as our systems and processes change. The “last updated” date at the top will always reflect the latest version.

8: Contact

Questions about this policy or your data: [email protected]