Privacy Policy

What this covers

This policy applies to the website at pennyhardaway.com. It does not cover other sites you may reach from here, each of which has its own privacy policy — including the separate basketball camp site at pennyhardawaybasketballcamp.com, where camp registration and payment actually happen, and the retailers linked from the Shop menu.

There is no account system on this site, no login, and no checkout. The only way personal information reaches us is if you type it into one of the forms described below.

What we collect

Only what the forms ask for. Nothing is collected in the background beyond the aggregate analytics and server logs described further down.

Email sign-up forms

The short "Notify Me" forms — Home Court, the One Cent Foundation and the 1 Cent Management preview — collect one thing:

• Email address, plus a label recording which form it came from, so the right updates go to the right list.

Phan Club sign-up

The Phan Club form collects:

• Name and email address (required)
• City and state (optional)
• A record of your consent — the date and time you ticked the permission box, the wording you agreed to, the page you signed up from, and the IP address the sign-up came from. That record exists so we can show your consent was given, which is what the law asks of anyone sending marketing email.

Business and appearance inquiries

The inquiry form on the Booking page collects:

• Name and email address (required)
• Company and phone number (optional)
• Inquiry type — appearance or speaking, endorsement or partnership, camp or youth program, media or press, charitable or community, or other
• A summary of the opportunity, in your own words

To stop automated spam, that form also checks how long the page was open before submitting and includes a hidden field that real visitors never see, and the server briefly counts recent submissions per IP address in memory. The IP address is used for that rate check only; it is not stored in a database and is not included in the message sent to us. The IP address is used for that rate check and, on the Phan Club form only, is kept as part of the consent record described above. It is not stored in a database or used to build a profile.

1 Cent Management inquiries

The private introduction form on the 1 Cent Management page collects:

• Name and email address (required)
• Phone number, profession or industry, career stage and preferred contact method (optional)
• What you would like help with, if you choose to write it

Please do not send financial account numbers, identification documents or other sensitive details through this form. It is an introduction request, not an intake questionnaire.

How it is used

What you submit is formatted into an email and delivered to the inbox monitored by Penny's team. Inquiry forms set your address as the reply-to, so a reply from us goes straight back to you. Email sign-ups are added to the list for the programme you signed up for, and are used to send updates about that programme.

Your information is not sold, rented, or traded. It is not used for advertising targeting, and it is not shared with anyone outside the service providers named below.

Who else handles it

A handful of services process information on our behalf in order for this site to work at all:

• Hosting — Vercel. The site and its form endpoints run on Vercel's platform, so anything you submit passes through Vercel's infrastructure.
• Email delivery. Form submissions are sent as email through a transactional email provider (currently Resend), which processes the contents of the message in order to deliver it.
• Mailing list. Updates to people who signed up are sent through an email provider that stores the address list for that purpose.

We may also disclose information if we are legally required to, or where it is necessary to protect the rights or safety of people involved.

Analytics and logs

This site loads Vercel Web Analytics and Vercel Speed Insights. They measure traffic and page-loading performance in aggregate — how many people viewed a page, which pages are popular, how quickly pages rendered. They do not set advertising or tracking cookies, do not follow you across other websites, and do not build a profile of you.

Like every web host, Vercel also generates server logs when a page or file is requested. These typically include the IP address, the time of the request, the page requested, and the browser's user-agent string, and exist for operations, debugging and abuse prevention.

The site sets no advertising cookies of its own and runs no third-party ad, remarketing or social pixel.

Embedded content and outbound links

Some parts of the site load content from other companies. When that happens, your browser contacts them directly, and they receive your IP address and may set their own cookies. We do not control that.

• YouTube. Videos in the Media section are embedded through youtube-nocookie.com and load only after you click play. Thumbnails are served from YouTube's image servers (i.ytimg.com) when the page loads. Once you press play, YouTube's terms and privacy policy apply to that playback.
• Video hosting. Some background and feature videos stream from a content delivery network (Bunny.net).
• Fonts. Typefaces are loaded from Google Fonts, which receives the request from your browser.
• Retailers and partners. The Shop menu and other links lead to outside sites such as the NBA Store, Fanatics and Walmart. Once you leave, you are on their site under their privacy policy — we receive nothing back about what you do there.

Unsubscribe and deletion

We are not sending email updates yet. Sign-ups are currently held as email records in the team inbox, and no mailing list or automated sending is running. When updates do begin, every one will carry an unsubscribe link that removes you from that list immediately.

You can ask to be taken off at any time, now or later, by emailing us — we will do it either way.

To have the information you submitted deleted — a sign-up address, an inquiry and its contents, or both — email content@pennyhardaway.com from the address you used, or tell us which address to look for. You can also use the same address to ask what we hold, or to correct something you got wrong when you submitted it.

Children

Plenty of what Penny does is for young athletes, but this website is written for adults — parents, guardians, coaches, organisers and business contacts. It is not directed to children, and we do not knowingly collect personal information from children under 13.

Camp registration, which involves details about a young player, does not happen here. It happens on the separate camp site, which handles that information under its own policy.

If you believe a child has submitted information through one of the forms on this site, email content@pennyhardaway.com and we will delete it.

Security

The site is served over HTTPS, form endpoints accept submissions only from this site's own domains, and submissions are rate-limited and spam-filtered. No website can promise perfect security, so please use good judgement about what you put in a message box.

Changes to this policy

If the site starts collecting something new — a new form, a different provider, an analytics tool that works differently — this page gets updated and the date at the top changes with it. The version published here is always the current one.

Contact

Questions about this policy, or any request described above:

TODO — owner must supplyLegal entity name responsible for this site and its mailing lists. Replace this box with the registered name (for example, the company or LLC that operates pennyhardaway.com).

TODO — owner must supplyPostal mailing address. A physical address is required in the footer of commercial email under CAN-SPAM, and belongs here too.