This Privacy Policy describes how happybasia.com (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at info@happybasia.com or by mail using the details provided below:

STLAV Spolka z o.o. (5242937581), ul modlinska 6a, 222, 03-216 Warszawa, Poland

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

• Device Information

  Purpose of collection:
  To ensure the Site loads correctly for your device, display prices in your local currency, and analyze Site traffic to improve user experience and performance.

  Source of collection:
  Collected automatically when you visit our Site through cookies, log files, web beacons, tags, or pixels. This includes data processed by Shopify and analytics or currency-conversion tools.

  Disclosure for a business purpose:
  Shared with our store platform Shopify, as well as with Google Analytics (for traffic analysis) and our currency conversion tool (to display prices in your local currency). These providers process data in accordance with their respective privacy policies.

  Personal Information collected:
  Web browser version, IP address, time zone, cookie identifiers, device type, pages or products viewed, search terms, interactions with the Site, and approximate location (used only for currency conversion).

• Order Information

  Purpose of collection:
  To process and deliver your order, including payment handling, shipping arrangements, invoicing, order confirmation, and communication regarding your purchase. We also use this information to detect and prevent fraud and, when in line with your preferences, to send updates or promotional messages about our products.

  Source of collection:
  Collected directly from you during checkout or when you place an order through our online store.

  Disclosure for a business purpose:
  Shared with:

  • Shopify – our store platform and order management system

  • Payment providers – to securely process your payment (we do not store credit card details)

  • Shipping carriers – DHL, DPD, USPS, Canada Post – to deliver your order

  • Customer communication tools (such as Shopify Email or Klaviyo, if subscribed) – for order updates and notifications

  All partners process data in accordance with applicable privacy laws and their own privacy policies.

  Personal Information collected:
  Full name, billing address, shipping address, contact details (email and phone number), order details, payment method information (handled securely by our payment processor), and any additional notes you provide at checkout.

• Customer Support Information

  Purpose of collection:
  To provide customer service, answer your questions, assist with orders, handle returns or complaints, and ensure a positive shopping experience.

  Source of collection:
  Collected directly from you when you contact us by email, through our website form, or via social media messages.

  Disclosure for a business purpose:
  Shared only with our store platform Shopify (to access order information if needed) and, when relevant, with our shipping partners (DHL, DPD, USPS, Canada Post) to resolve delivery issues.
  We do not sell or share customer support data for marketing purposes.

  Personal Information collected:
  Name, email address, order details, and any additional information you voluntarily provide in your message (such as photos, delivery details, or feedback).

Minors

The Site is not intended for individuals under the age of 16.
We do not knowingly collect, use, or store Personal Information from children.
If you are a parent or legal guardian and believe that your child has provided us with Personal Information, please contact us at info@happybasia.com so we can promptly delete the data.

Sharing Personal Information

We share your Personal Information with trusted service providers who help us operate our business, fulfill orders, and deliver products efficiently.
All partners process data securely and in compliance with applicable privacy laws.

This includes:

• Shopify – our e-commerce platform that hosts the store and manages checkout, payments, and analytics.
  You can read more about how Shopify uses your Personal Information here:
  https://www.shopify.com/legal/privacy

• Payment providers – to process your payments securely. We do not store credit-card details.

• Shipping carriers – DHL, DPD, USPS, and Canada Post, which receive only the information necessary to deliver your order.

• Analytics and advertising tools – such as Google Analytics and Meta (Facebook/Instagram) Ads, used to understand site traffic and measure ad performance.
  These services may use cookies or pixels to collect anonymized usage data.

We may also share your Personal Information when required by law — for example, to comply with legal obligations, respond to lawful requests from authorities, or protect our rights and customers.

We never sell or rent Personal Information to third parties.

Behavioural Advertising

As described above, we use your Personal Information to provide you with personalized advertisements and marketing communications that we believe may be of interest to you.

For example:

• We use Google Analytics to understand how visitors use our Site.
  You can read more about how Google uses your Personal Information here: Google Privacy Policy
  You can opt out of Google Analytics here: Google Analytics Opt-Out Tool

• We use Meta (Facebook) Ads and Google Ads to display relevant advertisements on other websites and social media platforms.
  These tools use cookies or similar technologies to track which products you view and interact with, so we can show you tailored ads.

We share limited information about your use of the Site — such as pages visited, items added to your cart, and completed purchases — with our advertising partners, to ensure that ads you see are relevant.
You can manage or disable personalized ads through the settings of each service:

• Facebook / Instagram: Ad Preferences

• Google Ads: Ad Settings

• Bing Ads: Opt-Out of Personalized Ads

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance Opt-Out Portal.

We respect your privacy choices — if you opt out, you will still see ads, but they may be less relevant to your interests.

Using Personal Information

We use your Personal Information to provide and improve our services. This includes:

• Offering our products for sale and processing your payments securely.

• Preparing, packaging, and shipping your orders.

• Providing order confirmations, tracking details, and customer support.

• Communicating with you about your order, returns, or inquiries.

• Informing you about new products, services, or special offers — but only if you have chosen to receive marketing communications.

• Analyzing traffic and user behavior on our Site to enhance performance and improve your shopping experience.

If you are located in the European Union, the United Kingdom, or the European Economic Area (EEA), your Personal Information is processed in compliance with the General Data Protection Regulation (GDPR) and UK GDPR standards.

Lawful Basis

In accordance with the General Data Protection Regulation (GDPR), if you are a resident of the European Economic Area (EEA) or the United Kingdom, we process your Personal Information under the following lawful bases:

• Your consent – for sending marketing emails, newsletters, and promotional offers (only when you have opted in).

• The performance of a contract – to process and fulfill your orders, deliver products, and provide related customer service.

• Compliance with legal obligations – to comply with tax, customs, and accounting requirements under EU and Polish law.

• Our legitimate interests – to operate, improve, and secure our online store, prevent fraud, and ensure a smooth shopping experience.

• Protection of vital interests – in rare cases, to protect your or another person’s life or safety (e.g., product safety notifications).

We do not process data for tasks carried out in the public interest.

Retention

When you place an order through our Site, we securely store your Personal Information for record-keeping, accounting, and legal compliance purposes.
We retain this information only for as long as necessary to fulfill the purposes described in this Privacy Policy — including order processing, customer support, and tax or regulatory requirements.

After this period, or if you request it sooner, your Personal Information will be safely deleted or anonymized, unless we are legally required to retain it.

For more details about your right to have your data erased, please refer to the “Your Rights” section below.

Automatic Decision-Making

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have the right to object to processing based solely on automated decision-making (including profiling) when such processing produces legal effects or otherwise significantly affects you.

We do not engage in any fully automated decision-making that has a legal or significant effect on our customers.

However, our store platform Shopify uses limited automated tools to prevent fraudulent or unauthorized transactions. These systems help protect both you and us from potential payment abuse and include:

• Temporary blacklisting of IP addresses associated with repeated failed payment attempts (active for a few hours).

• Temporary blacklisting of credit cards linked to blacklisted IP addresses (active for a few days).

These measures are purely security-related and do not have any significant or legal impact on customers’ rights or purchasing ability.

Selling Personal Information

We do not sell, rent, or trade Personal Information as defined under the California Consumer Privacy Act (CCPA) or any other applicable data protection law.
All customer data is used only for legitimate business purposes — such as processing orders, payments, deliveries, and essential analytics.

We may share limited information (for example, anonymized usage data or aggregated statistics) with trusted service providers like Shopify, Google, or Meta to help us improve our services and display relevant advertising.
However, this information does not identify individual users and is not considered a “sale” under the CCPA.

If you are a resident of California, you have the right to request access to, correction of, or deletion of your Personal Information, as well as to opt out of any data sharing that could be interpreted as a sale. To exercise these rights, please contact us at info@happybasia.com.

We also confirm that we do not sell Personal Information of minors under the age of 16.

Your Rights

If you are a resident of the European Economic Area (EEA), the United Kingdom, or California (USA), you have specific rights regarding your Personal Information.
These rights are designed to give you transparency, control, and protection over how your data is used.

You have the right to:

• Access – request a copy of the Personal Information we hold about you.

• Rectification – request correction of inaccurate or incomplete data.

• Erasure (“Right to be forgotten”) – request deletion of your Personal Information, unless we are legally required to retain it (for example, for tax or accounting purposes).

• Restriction – request that we limit how your data is processed in certain circumstances.

• Data portability – request that your Personal Information be transferred to you or another service provider in a structured, commonly used format.

• Object – object to the processing of your Personal Information when based on legitimate interests, or to receiving marketing communications.

• Withdraw consent – if processing is based on your consent (e.g., email marketing), you can withdraw it at any time.

If you wish to exercise any of these rights, please contact us at info@happybasia.com.
We will respond to your request within 30 days in accordance with applicable data protection laws.

For residents of California, you may also have the right to request information about how we share data with third parties for business purposes and to opt out of any data sharing that could be considered a “sale” under the CCPA.

We do not discriminate against any user for exercising their privacy rights.

GDPR

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have the right to access the Personal Information we hold about you, request that it be corrected, updated, or erased, and, in some cases, request that it be transferred (“data portability”) to another service.

To exercise any of these rights, please contact us at info@happybasia.com. We will review and respond to your request within 30 days in accordance with the General Data Protection Regulation (GDPR).

Your Personal Information is initially processed and stored in Ireland by our store platform Shopify International Ltd., and may be transferred outside the European Union — for example, to Canada or the United States — for secure storage and further processing.
Shopify ensures that all international data transfers comply with GDPR requirements, using standard contractual clauses and other approved safeguards.

For more details, you can review Shopify’s GDPR Whitepaper:
👉 https://help.shopify.com/en/manual/your-account/privacy/GDPR

CCPA

If you are a resident of California (USA), you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know – request details about the categories and specific pieces of Personal Information we have collected about you.

• Right to Access and Portability – request a copy of your Personal Information in a portable format.

• Right to Correction – request that inaccurate or incomplete data be corrected.

• Right to Deletion – request that your Personal Information be deleted, subject to certain legal exceptions (e.g., for tax or security reasons).

• Right to Opt Out of Sale or Sharing – we do not sell Personal Information, but you may request to opt out of any data sharing that could be interpreted as a sale.

• Right to Non-Discrimination – we will not deny goods, services, or benefits to anyone exercising their privacy rights.

To exercise any of these rights, please contact us at info@happybasia.com.
If you would like to designate an authorized agent to submit requests on your behalf, please contact us using the same email address.

We respond to all verified requests within 45 days, as required by California privacy law.

Cookies

A cookie is a small piece of information that is stored on your device when you visit our Site. We use cookies and similar technologies to ensure the proper functioning of our website, improve performance, personalize content, and analyze traffic.

Cookies help us:

• Remember your preferences (such as language, region, and currency).

• Keep your shopping cart and checkout sessions active.

• Understand how visitors use our Site to improve functionality and design.

• Show relevant ads and limit how often you see them.

We use the following types of cookies:

• Essential cookies – required for the operation of our Site and online store (e.g., to keep products in your cart or manage checkout).

• Performance and analytics cookies – help us understand visitor behavior and improve website performance.

• Functional cookies – remember your preferences and settings (e.g., currency selection).

• Advertising and social media cookies – used to deliver personalized ads and measure campaign performance via partners such as Google and Meta.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Site.

For more detailed information about the cookies used by Shopify, please visit:
👉 https://www.shopify.com/legal/cookies

Additionally, by using our website, you agree that third parties may process your IP address to determine your location for currency conversion purposes. This currency preference is stored in a temporary session cookie so that prices remain displayed in your local currency while browsing.

Cookies – Detailed Overview

Below is a list of cookies used by our store platform Shopify and its integrated services.
These cookies are essential for the functioning of the store, checkout, analytics, and overall website performance.

---

Cookies Necessary for the Functioning of the Store

---

Reporting and Analytics Cookies

---

Additional Information

• The duration of cookies varies depending on whether they are session cookies (expire when you close your browser) or persistent cookies (remain stored for a predefined period).
  Most cookies used on our Site are persistent and expire between 30 minutes and 2 years from the date they are downloaded to your device.

• You can manage, block, or delete cookies through your browser settings at any time.
  Learn more at www.allaboutcookies.org.

• Please note that disabling cookies may affect the functionality of our Site, including checkout and personalized content.

• Some cookies are used by trusted partners (e.g., Google or Meta) for advertising or analytics purposes. To manage your preferences or opt out of personalized ads, visit the “Behavioural Advertising” section above.

Do Not Track

Please note that there is currently no consistent industry standard for how websites should respond to “Do Not Track” (DNT) signals.
Therefore, we do not modify our data collection and usage practices when such a signal is received from your browser.
We continue to handle all Personal Information in accordance with this Privacy Policy and applicable data protection laws.

Changes

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, or other operational reasons.
Any updates will be posted on this page with a revised “Last updated” date at the bottom.
We encourage you to review this page periodically to stay informed about how we protect your Personal Information.

Complaints

If you would like to make a complaint about how we handle your Personal Information, please contact us first at info@happybasia.com or by mail using the address provided in the “Contact” section above.
We take all privacy concerns seriously and will do our best to resolve them promptly.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Our supervisory authority in the European Union is the Polish Data Protection Authority (UODO):
🔗 https://uodo.gov.pl/en

---

Currency Conversion Notice (for GDPR compliance)

By using our website, you (the visitor) agree to allow third parties to process your IP address to determine your location for the purpose of currency conversion.
This information is stored in a temporary session cookie, which is automatically removed when you close your browser.
We do this to ensure that the prices you see remain displayed in your local currency throughout your visit.

---

Last updated: November 2, 2025