FoundrKit is the trading name of Penara Group Limited, a company registered in England and Wales (Company No. 17338576). Our correspondence address is 124 City Road, London, EC1V 2NX.
Depending on how you interact with our website, we may collect:
Contact information: your name, email address and company name, where provided.
Purchase information: details of the products you purchase, order references, transaction status and information needed to fulfil your order.
Payment information: payments are processed through our payment provider. We do not intend to collect or store full payment card details ourselves.
Newsletter and marketing information: your email address, marketing preferences, consent records and whether you unsubscribe.
Enquiry information: information you provide when contacting us or requesting support.
Website usage information: information about how you use our website, including pages visited, referral sources, interactions, browser or device information and approximate location derived from your IP address, where collected by our analytics tools.
Advertising and measurement information: where enabled and permitted, information used to measure advertising performance, such as whether a website visit or purchase followed an advertisement.
We do not intentionally collect more personal information than is reasonably necessary for these purposes.
3. How We Use Your Information
We use your personal information to:
4. Newsletter and Marketing Communications
If you subscribe to our newsletter or otherwise choose to receive marketing communications, we may use your contact details to send relevant HR guidance, resources, product information and promotional offers.
We may use an email marketing provider to manage subscriptions, send emails and record marketing preferences.
You can unsubscribe at any time using the unsubscribe link included in our marketing emails or by contacting hello@foundrkit.co.uk.
We will respect your marketing preferences and retain appropriate records of consent and withdrawals.
Where required, we will obtain your consent before sending electronic marketing communications. We will not add you to marketing lists simply because you have purchased a product or contacted us with a support enquiry.
5. Cookies, Analytics and Advertising Technologies
Our website may use cookies and similar technologies to operate the website, understand how visitors use it and measure marketing performance.
Depending on the tools enabled on our website, these technologies may include:
Essential technologies
These support functions necessary to provide the website or a service you have requested, such as security or checkout functionality.
Analytics technologies
We may use Google Analytics 4 (GA4) to understand website traffic, visitor interactions, referral sources and conversions. This helps us understand which pages and marketing channels are effective.
Advertising and conversion measurement
We may use Google Ads conversion tracking to measure actions such as purchases following an advertisement. If enabled, advertising technologies may process information about your interaction with our website and advertising campaigns.
We will obtain consent before using non-essential cookies or similar technologies where required by applicable law. Where consent is required, analytics and advertising technologies will not be activated before the relevant consent is given.
You will be able to manage your cookie preferences through the consent controls provided on our website, where available. You can also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.
For more information about Google's data practices, please see Google's Privacy Policy at https://policies.google.com/privacy.
6. Third-Party Service Providers
We may share personal information with trusted providers where necessary to operate FoundrKit and deliver our services. These may include:
Framer: website hosting and website functionality.
Payment providers, such as Stripe: processing payments and supporting transactions.
Brevo: managing newsletter subscriptions and sending marketing emails, if implemented.
Google Analytics and Google Ads: website analytics, advertising measurement and campaign optimisation, if implemented.
Other technical providers: services used for website maintenance, security, customer support and order fulfilment.
These providers may process personal information on our behalf or, depending on the service, act as independent controllers for particular processing activities.
We do not sell your personal information to third parties.
We may also disclose information where required by law, to protect our legal rights or in connection with a business transaction.
7. Legal Basis for Processing
We process your personal data on the following legal bases:
Contract: processing necessary to complete your purchase or provide a service you request.
Consent: processing where you have given valid consent, including marketing emails and non-essential cookies where consent is required.
Legitimate interests: processing necessary for legitimate business purposes, such as website security, service improvement or certain business administration activities, where those interests are not overridden by your rights.
Legal obligation: processing necessary to comply with applicable laws, including accounting and tax requirements.
8. International Data Transfers
Some of our service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take steps required by applicable data protection law to ensure that the transfer is lawful and that appropriate safeguards are in place.
9. Data Retention and Security
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, maintaining appropriate business records, resolving disputes and meeting legal obligations.
Retention periods vary depending on the type of information and the reason it was collected. We will delete or anonymise information when it is no longer required, subject to applicable legal requirements.
We take appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure or alteration. However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
10. Your Data Protection Rights
Depending on the circumstances, you may have the right to:
Access the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request erasure of your personal information.
Request restriction of processing.
Object to certain processing, including direct marketing.
Request a copy of certain information in a portable format.
Withdraw consent where processing relies on consent.
To exercise your rights, contact hello@foundrkit.co.uk. We may need to verify your identity before responding.
You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe your personal information has been handled unlawfully.
ICO website: https://ico.org.uk/
11. Children's Privacy
FoundrKit is intended for business owners, founders and adults seeking HR resources for their businesses. Our services are not directed at children, and we do not knowingly seek to collect children's personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.
13. Contact Us
If you have any questions about this Privacy Policy or how we process personal information, please contact:
FoundrKit — Penara Group Limited
Email: hello@foundrkit.co.uk.
Correspondence address: 124 City Road, London EC1V 2NX.
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
Your Data Protection Rights
11.
Children’s Privacy
12.
Changes to This Policy
13.
We're here to help. Get in touch and we'll get back to you within 1–2 business days.
