Privacy Policy
Privacy Policy — Happea Box
Last updated: Novemeber 2025
At Happea Box, we are committed to protecting your privacy and ensuring that your personal data is handled securely, transparently and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains what personal data we collect, how we use it, and the rights you have.
1. Who We Are
Happea Box (“we”, “us”, “our”) supplies personalised gift boxes, snack boxes and corporate wellness boxes.
If you have any questions about this notice or how we handle your data, contact us at:
​
2. Data We Collect
We collect the following information when you place an order or interact with our website:
​
A. Personal Information
-
Full name
-
Billing and delivery address
-
Email address
-
Phone number
-
Company name (if applicable)
-
​
B. Payment Information
Processed securely via third-party providers (e.g., Stripe, PayPal, Shopify Payments).
We do not see or store your full card details.
​
C. Order & Usage Data
-
Order history
-
Items personalised (logos, designs)
-
Communication history with customer service
-
Preferences (newsletter, marketing options)
D. Technical Data
Collected automatically via cookies and analytics:
-
IP address
-
Browser type and device
-
Pages viewed
-
Time spent on site
-
Traffic source
3. How We Use Your Data
We use your information to:
-
Process, personalise, and deliver your order
-
Contact you regarding your order status
-
Provide customer support
-
Improve our products, website, and user experience
-
Send marketing emails (only if you opt in)
-
Meet legal and accounting obligations
-
Prevent fraud and secure our website
4. Legal Basis for Using Your Data
We process your personal data under the following legal bases:
-
Contractual necessity — to fulfil your order
-
Legitimate interests — to improve services and prevent fraud
-
Consent — for marketing communications
-
Legal obligation — financial record keeping
5. Sharing Your Data
We only share your data with trusted third parties who help us run our business:
-
Payment providers (Stripe, PayPal, Shopify Payments)
-
Courier services (Royal Mail, DPD, Evri)
-
Website & IT providers (Shopify, hosting services, analytics)
-
Email marketing providers (only if you subscribe)
We never sell or rent your data to third parties.
6. Data Retention
-
Order and financial data is kept for 6 years (legal requirement).
-
Email marketing data is kept until you unsubscribe.
-
Website analytics data is kept according to cookie settings.
7. Cookies
We use cookies to improve your browsing experience, analyse performance, and personalise content.
You can adjust or disable cookies in your browser at any time.
​
8. Your Rights Under UK GDPR
You have the right to:
-
Access your personal data
-
Correct inaccurate data
-
Request deletion (“right to be forgotten”)
-
Restrict processing in certain situations
-
Object to marketing or profiling
-
Request a copy of your data (data portability)
-
Withdraw consent at any time
To exercise your rights, email us at happeaboxx@gmail.com
​
9. Marketing Preferences
You will only receive marketing emails if you have opted in.
You can unsubscribe at any time using the link in our emails or by contacting us.
10. Data Security
We take security seriously.
We use industry-standard encryption, secure servers, and strict access controls to protect your personal information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page.