Privacy Policy
Last updated: 25 June 2026
1. Who We Are
Happyn ("we", "us", "our") operates the event-services marketplace at https://happyn.com. We are the data controller for the personal data described in this policy.
Contact: support@happyn.com
2. Data We Collect
2.1 Account & Profile Data
- Email address, password (hashed by Supabase Auth — we never see the plaintext)
- Full name, phone number, profile photo (optional, user-provided)
- Location (city, state, ZIP) for personalised search results
- User type (buyer / vendor / both)
- Consent records — date and nature of consent given at sign-up
2.2 Event Data
- Event name, date, type, guest count, and budget
- Event location (city, state, and coordinates)
- Notes and planning details you choose to add
2.3 Transaction & Order Data
- Order details, item quantities, pricing, and delivery addresses
- Payment method type and last-four digits (full card data is held solely by Stripe, not us)
- Payout records for vendors
- Shipment tracking information
2.4 Communications
- Messages sent between buyers and vendors through the platform
- Reviews you submit
- Customer support correspondence
2.5 Technical & Usage Data
- IP address, browser type, and device information (collected by our infrastructure providers)
- Pages visited and features used (only when you have consented to analytics cookies)
- Authentication session tokens (functional — always required for the service to work)
3. Legal Bases for Processing
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and managing your account | Contract performance (Art. 6(1)(b)) |
| Processing orders and payments | Contract performance (Art. 6(1)(b)) |
| Sending transactional emails (confirmations, receipts, shipping) | Contract performance (Art. 6(1)(b)) |
| Personalising search results by location | Legitimate interest (Art. 6(1)(f)) |
| Fraud prevention and platform security | Legitimate interest (Art. 6(1)(f)) |
| Marketing emails and promotions | Consent (Art. 6(1)(a)) — opt-in only |
| Analytics cookies | Consent (Art. 6(1)(a)) — via cookie banner |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. How We Use Your Data
- Operate the marketplace and fulfil your orders
- Show you relevant event vendors near your location
- Send transactional emails (order confirmations, shipping updates, password resets)
- Send marketing emails only if you opted in — you can opt out at any time in Account Settings → Notifications
- Detect and prevent fraud and abuse
- Comply with financial regulations and tax obligations
- Respond to support requests and resolve disputes
5. AI & Automated Decision-Making
- AI vendor matching: We use proprietary algorithms to suggest vendors to you based on factors such as budget, location, and past preferences. These suggestions are automated.
- Your control: You can request a manual search or opt out of "Personalised Suggestions" at any time in Account Settings → Privacy & Data.
- No high-stakes decisions: Our automated systems are a tool for service discovery only. They do not make legal, lending, or other decisions that produce legal or similarly significant effects about you.
6. Third-Party Processors
We share data only with processors that are necessary to run the service and have signed appropriate data processing agreements:
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Authentication and database hosting | EU / US (SCCs in place) |
| Stripe | Payment processing and vendor payouts | US (SCCs in place) |
| Resend | Transactional and marketing email delivery | US (SCCs in place) |
| EasyPost | Shipping label generation and tracking | US (SCCs in place) |
We do not sell your personal data to any third party. We do not use your data for advertising profiling by third parties.
7. Cookies
We use the following categories of cookies:
- Functional (always on): Session authentication, shopping cart state, and theme preference. These are strictly necessary for the service to function.
- Analytics (opt-in): Usage statistics to help us improve the platform. Only set after you accept analytics cookies via the consent banner.
- Marketing (opt-in): Used if we introduce marketing integrations in future. Only set after you explicitly accept marketing cookies.
You can change your cookie preferences at any time via Account Settings → Privacy & Data (when logged in) or by clearing your browser cookies and revisiting the site.
8. Data Retention
| Data category | Retention period |
|---|---|
| Account and profile data | Until account deletion, then permanently deleted within 30 days |
| Order and payment records | 7 years (legal / tax obligation) |
| Event data | Until account deletion |
| Marketing consent records | Until withdrawal of consent + 3 years (evidence of consent) |
| Support correspondence | 3 years from last contact |
9. Your Rights
Under GDPR you have the following rights. To exercise any of them, email us at support@happyn.com with the subject line "Privacy Request".
- Right of access (Art. 15): Request a copy of all personal data we hold about you. You can also download this directly from Account Settings → Privacy & Data → Export data.
- Right to rectification (Art. 16): Correct inaccurate or incomplete data via your account settings or by contacting us.
- Right to erasure (Art. 17): Request deletion of your account and data. Available at Account Settings → Privacy & Data → Close account. We will permanently delete your data within 30 days.
- Symmetrical choice: We guarantee that opting out or deleting your data is just as easy as signing up. You can initiate a full account and data deletion with a single "Close account" action in your settings — no need to call or email support.
- Right to data portability (Art. 20): Receive your data in a machine-readable format — JSON export available in Account Settings.
- Right to object (Art. 21): Object to processing based on legitimate interest, including marketing emails. Use the unsubscribe link in any marketing email or update your preferences in Account Settings.
- Right to restrict processing (Art. 18): Request that we limit how we use your data in certain circumstances.
- Right to withdraw consent: Where processing is based on consent (marketing emails, analytics cookies), you may withdraw at any time without affecting the lawfulness of prior processing.
You also have the right to lodge a complaint with your supervisory authority. In the UK this is the ICO; in the EU, contact your local Data Protection Authority.
10. International Transfers
Our processors (Supabase, Stripe, Resend, EasyPost) may process data outside the EEA/UK. Where this occurs we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the appropriate safeguard under GDPR Chapter V.
11. Children
Happyn is intended only for users aged 18 and over, consistent with the eligibility requirement in our Terms of Service. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us immediately at support@happyn.com.
12. Changes to This Policy
We may update this policy from time to time. We will notify registered users by email of material changes at least 30 days before they take effect. The "last updated" date at the top of this page always reflects the most recent revision.
13. Contact
For any privacy-related questions or to exercise your rights:
Data Protection Officer (DPO): support@happyn.com
Subject line: Privacy Request