Privacy Policy

Information 

Happy Tail (the operator of www.happytail.com, hereafter “we/us/our”) is committed to protecting your privacy and handling your personal data in compliance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). The GDPR aims to harmonize data privacy laws across Europe and empower individuals with control over their personal data logistics.org.uk. In this spirit, we explain below what information we collect, why and how we use it, with whom we share it, and what rights you have. We provide our identity and contact information as the Data Controller of your data, as required by GDPR Article 13(1) gdpr-info.eu. If you have any questions about this policy, or wish to exercise your rights, you may contact us at support@happytail.com (our Data Protection Officer) or at our postal address as given below. As one privacy notice states, we are “committed to protecting your privacy online… [and] explain how we collect information, what we do with it and what controls you have”smoltap.com piwik.pro.

Information We Collect

We collect only the personal data necessary to serve you and operate our online store. This includes:

  • Identity & Contact Data: Your full name, email address, billing and shipping address, and telephone number.

  • Account and Payment Data: Payment details (e.g. credit card number, expiration date) provided to our payment service to process transactions; any account credentials if you register.

  • Order Details: Information about the products you purchase, quantity, and delivery preferences.

  • Technical & Usage Data: Data about your device and browsing, such as IP address, browser type, device type and operating system, and browsing behavior on our site (pages visited, time spent, referrer URL, etc.). For example, we may use cookies or web beacons to collect information on how you navigate the store piwik.pro.

  • Marketing and Communications: If you subscribe, we collect your email address to send newsletters or promotional materials.

We only collect these data with your knowledge and as permitted by law. As GDPR guidance notes, a privacy policy should go into detail about the exact types of personal data collected piwik.pro. We do not collect special categories of data (e.g. health, race) or sell your personal information to third parties. All data collected are entered voluntarily (e.g. by you during checkout or registration) or obtained automatically (e.g. technical data from cookies).

How We Use Your Information

We use your personal data strictly for the purposes described and only to the extent necessary:

  • Order Fulfillment & Payments: We process your data to accept, verify, and carry out your orders (including payment processing and credit card fraud checks). This is necessary to perform the contract you enter when you purchase our products.

  • Customer Service and Notifications: We use your contact details to communicate with you about your orders (confirmations, delivery updates, support requests) and to respond to your inquiries.

  • Shipping & Delivery: We share necessary data (name, address, order contents) with postal or courier companies so they can deliver your purchases.

  • Improving User Experience: We analyze usage data (e.g. device type, pages visited) to optimize and personalize the shopping experience (e.g. switching to a mobile layout automatically). These improvements are pursued under our legitimate interests in providing a user-friendly service, consistent with GDPR requirements piwik.pro.

  • Marketing (with Consent): If you opt in to marketing communications, we use your email to send newsletters, promotions, and product updates. You may unsubscribe at any time (see Your Rights below).

  • Legal Compliance: We process and retain certain information to comply with legal obligations (for example, tax and accounting records) and to protect our legal rights (e.g. in case of disputes).

For each category of processing above, we have identified a lawful basis under Article 6 of the GDPR (for example, necessity of contract performance for order-related uses, legitimate interest for site improvement, or your consent for marketing). GDPR Article 13 requires us to specify both the purpose of processing and the legal basis for it gdpr-info.eu. In summary, our main bases are: (1) Contract Performance: using your data to fulfill our sales contract with you; (2) Legal Obligation: retaining information we are legally required to keep; (3) Legitimate Interests: improving our services and detecting fraud; and (4) Consent: when you subscribe to newsletters or enable cookies beyond basic functionality. If processing is based on consent, you are free to withdraw it at any time without affecting the lawfulness of prior processing gdpr.eu.

Sharing with Third Parties

We share your data only with trusted third parties who need it to provide their services, and under strict contracts that bind them to GDPR-level protections. In particular:

  • Payment Processors: We transmit payment information (card number, name) to secure, PCI-compliant payment gateways (e.g. Stripe, PayPal) to verify and process your transaction.

  • Fulfillment and Logistics: We send order details and delivery address to manufacturers, warehouses, and couriers (e.g. postal services) so they can assemble and deliver your package. They receive only the information needed (e.g. your name and address).

  • Email and Marketing Services: We share your email address with our newsletter/mail service provider (e.g. Mailchimp, SendGrid) if you have opted in, for the sole purpose of sending you agreed-upon communications.

  • Customer Support and IT Providers: To operate the store we may use external services (e.g. cloud hosting, CRM, analytics). These providers (processors) may have limited access to your data under contractual agreements (Data Processing Agreements), and are prohibited from using it for any other purpose ico.org.uk. We ensure any processor is bound by GDPR Article 28 requirements to protect personal data ico.org.uk.

  • Legal and Safety: We may disclose personal data to law enforcement or government authorities if required by law (e.g. court order), or to protect rights and safety (e.g. fraud prevention).

We do not sell or rent your personal information to marketers. We also do not disclose data to any unrelated third parties without your consent. In compliance with GDPR Article 13(1)(e), we disclose the categories of recipients of personal data piwik.pro. In all cases, our third-party partners must use your data only as permitted by us and the law, and must implement appropriate security measures.

Cookies and Similar Technologies

We use cookies and similar technologies (such as web beacons or device identifiers) to support the functionality of our store and to understand how visitors use it. For example: session cookies keep you logged in and retain your shopping cart; analytics cookies (e.g. Google Analytics) collect non-identifying data about site usage (pages viewed, time on site, etc.) to help us improve our services. We will obtain your consent for non-essential cookies as required by the e-Privacy Directive. You can manage or disable cookies via your browser settings (though some features of our site may not function correctly if you do so).

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. For example, order and payment records may be kept for a number of years to comply with tax or warranty obligations. Once data is no longer needed for its original purpose (e.g. after your order is delivered and any statutory retention periods have passed), we will securely delete or anonymize it. This practice follows the “storage limitation” principle of GDPR – personal data must be kept no longer than necessarygdpr-info.eu, and we explicitly inform you of our retention practices as required (Article 12(2)(a))piwik.pro.

Data Security

We employ robust technical and organizational measures to protect your personal data against unauthorized or unlawful processing, and against accidental loss, destruction or damage. For example, all data transmissions are protected by SSL/TLS encryption; sensitive data (like payment information) is encrypted or tokenized; our databases and servers are secured by firewalls and access controls; and only authorized personnel with a legitimate need-to-know can access your information. We also train our staff on data protection and regularly review our security policies. These measures help us meet the GDPR requirement to implement “appropriate technical and organizational measures” for data integrity and confidentiality gdpr.eugdpr-info.eu.

While we do our utmost to keep data secure, no system is completely foolproof. In the unlikely event of a data breach that poses risk to your rights and freedoms, we will comply with GDPR Articles 33–34 by notifying the relevant Supervisory Authority and affected individuals within 72 hours of becoming aware of it smoltap.com.

Your Rights

Under the GDPR you have a number of important rights regarding your personal data. These include:

  • Right of Access: You can request a copy of the personal data we hold about you.

  • Right of Rectification: You can ask us to correct any inaccurate or incomplete information.

  • Right of Erasure (“Right to be Forgotten”): You can request deletion of your personal data when we have no lawful reason to retain it.

  • Right to Restrict Processing: You can ask us to suspend processing of your data (for example, while we verify its accuracy).

  • Right to Data Portability: You can request that we provide your data in a structured, machine-readable format so you can transfer it to another service.

  • Right to Object: You can object to our processing of your personal data for certain purposes, such as direct marketing or our legitimate interests; we will cease processing unless we have a compelling lawful reason to continue.

  • Right to Withdraw Consent: If we rely on consent for a processing activity, you can withdraw your consent at any time without affecting the lawfulness of processing done before withdrawal gdpr-info.eu.

  • Right to Complain: You have the right to lodge a complaint about our processing with a data protection authority in the EU (e.g. the authority of your country of residence) gdpr-info.eu.

These rights are described in GDPR Article 13(2) and Article 15–21gdpr-info.eugdpr-info.eu. You can exercise any of these rights by contacting us at support@happytail.com. We will respond to your request promptly and, in any case, within one month as required by law. If we need more time (up to three months), we will notify you.

International Data Transfers

Our servers and service providers are located within the European Economic Area (EEA). If any data is transferred outside the EEA (for example, to a cloud server in another country), we will ensure that the transfer is legally permitted. We will only transfer your personal data to countries deemed to have adequate data protection by the European Commission, or we will use standard contractual clauses or other lawful safeguards to ensure equivalent protection. You may request details of any such transfers.

Children’s Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal information from minors. If we learn that we have obtained personal data of a child under age 16 without parental consent, we will delete that data promptly. If you believe we have collected information from a minor, please contact us to request its removal.

Updates to This Policy

This Privacy Policy is effective as of the date shown below. We may modify it from time to time (for example, to reflect new services, legal updates, or changes in how we process data). When we make material changes, we will notify you by posting the updated policy on our website and changing the “Last Updated” date. We encourage you to review this Policy periodically. Continued use of our site after any update will constitute your acceptance of the revised terms.