1. Introduction

HAPPYPIP (“Company,” “we,” “us,” or “our”) is committed to safeguarding your privacy and protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you visit our website, HAPPYPIP.COM (the “Website”), and use our services, including purchasing our products.

We recognize the importance of your privacy and are committed to maintaining the trust and confidence of our customers, visitors to our Website, and users of our services. This Privacy Policy is designed to help you understand what information we collect, why we collect it, how we use it, and how we protect it.

This Privacy Policy applies to all users of the Website, regardless of whether you are located within the United States, the European Union, or elsewhere. We process personal data in accordance with applicable privacy laws, including, but not limited to, the General Data Protection Regulation (“GDPR”) for users in the European Union, the California Consumer Privacy Act (“CCPA”) for residents of California, and applicable U.S. Texas privacy laws.

By accessing or using our Website and services, you agree to this Privacy Policy and consent to our collection, use, disclosure, and retention of your information as described herein. If you do not agree with this Privacy Policy, please do not use our Website or services.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• “Website” refers to HAPPYPIP.COM and any associated subdomains, platforms, or services owned and operated by the Company.
• “Personal Data” means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
• “Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
• “Controller” means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data.
• “Processor” means a natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Controller.
• “Data Subject” refers to any identified or identifiable natural person whose Personal Data is processed by the Controller.
• “GDPR” refers to the General Data Protection Regulation (EU) 2016/679, which is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area.
• “CCPA” refers to the California Consumer Privacy Act of 2018, a state statute intended to enhance privacy rights and consumer protection for residents of California, USA.
• “Texas Privacy Laws” refers to privacy laws applicable within the state of Texas, including but not limited to the Texas Identity Theft Enforcement and Protection Act (TITEPA) and other relevant state regulations.

3. Data Collection

3.1 Types of Data Collected

HAPPYPIP collects various types of information to provide and improve our services, including the following categories of Personal Data:

• Personal Identification Information: This includes, but is not limited to, your name, email address, postal address, telephone number, date of birth, and other identifiers that may be used to contact you or identify you personally.
• Payment Information: When you make a purchase on our Website, we collect payment information, such as credit card numbers, billing addresses, and other financial data necessary to process your transactions.
• Device and Usage Data: We collect information about the devices you use to access our Website, including IP addresses, browser type and version, time zone settings, browser plug-in types, operating system, and platform. We also collect information about how you use our Website, such as the pages you visit, the links you click, and other actions you take.
• Location Data: We may collect information about your location if you enable this feature on your device. This information helps us provide location-based services, such as identifying the nearest store or tailoring offers specific to your region.
• Cookies and Tracking Technologies: We use cookies, web beacons, and other tracking technologies to collect information about your browsing behavior on our Website. This information may include details about your visit, such as the pages you viewed, the links you clicked, and other information related to your browsing activities.
• Communication Data: If you contact us via email, phone, or other communication methods, we may collect and store the content of your communication along with your contact details and our responses.

3.2 How Data is Collected

We collect data in the following ways:

• Directly from You: We collect data when you provide it to us voluntarily, such as when you create an account, place an order, subscribe to our newsletter, or contact customer support.
• Automatically: We collect data automatically as you navigate through our Website, using cookies, server logs, and other technologies.
• From Third Parties: We may receive data from third-party partners, such as payment processors, advertising networks, and analytics providers, who may collect data on our behalf.

3.3 Special Categories of Data

We do not intentionally collect any special categories of personal data (e.g., data related to health, religious beliefs, racial or ethnic origin, or sexual orientation) unless explicitly required by law or necessary for providing our services, and with your explicit consent.

4. Legal Basis for Data Processing

Under the GDPR, CCPA, and other applicable laws, HAPPYPIP must establish a legal basis for processing your Personal Data. The legal bases for processing your data include:

4.1 Consent
We may process your Personal Data if you have given your explicit consent to the processing for one or more specific purposes. For example, when you sign up for our newsletter, you consent to us processing your data to send you marketing communications.

4.2 Performance of a Contract
We process Personal Data when it is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into a contract. For example, processing your order and delivering the products you have purchased.

4.3 Compliance with Legal Obligations
We may process Personal Data when necessary for compliance with a legal obligation to which we are subject. This includes obligations such as tax reporting, responding to legal requests, and maintaining records required by law.

4.4 Legitimate Interests
We process your Personal Data when it is necessary for the purposes of our legitimate interests, provided that these interests are not overridden by your fundamental rights and freedoms. For example, improving our Website, enhancing user experience, or securing our IT systems.

4.5 Vital Interests
In certain rare circumstances, we may process Personal Data to protect the vital interests of you or another person, such as in emergencies where someone’s life or health is at risk.

4.6 Public Interest
Where necessary, we may process Personal Data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.

4.7 Compliance with CCPA
For California residents, we process Personal Data in accordance with the CCPA, which may include fulfilling your requests for information, responding to opt-out requests, and other consumer rights as defined under the CCPA.

5. Purposes of Data Collection and Processing

HAPPYPIP collects and processes your Personal Data for the following purposes:

5.1 To Provide and Improve Our Services
We use your Personal Data to operate, maintain, and improve our Website and services. This includes processing your orders, managing your account, and providing customer support.

5.2 To Personalize Your Experience
We use data to personalize your experience on our Website, including providing tailored content, product recommendations, and special offers based on your preferences and browsing history.

5.3 To Process Transactions
Your payment information is used solely for processing transactions and ensuring the security of your financial data.

5.4 To Communicate with You
We use your contact information to communicate with you about your orders, respond to inquiries, and send you updates about our products and services. If you opt-in, we may also send you promotional materials and newsletters.

5.5 To Comply with Legal Requirements
We process your data to comply with legal obligations, such as tax reporting, regulatory requirements, and responding to lawful requests from public authorities.

5.6 To Prevent Fraud and Ensure Security
We process data to detect, prevent, and mitigate fraudulent activities, unauthorized access, and other security threats to our Website and services.

5.7 For Marketing and Advertising
With your consent, we may use your Personal Data for marketing purposes, such as displaying targeted advertisements, conducting marketing research, and measuring the effectiveness of our campaigns.

5.8 To Analyze and Improve Our Business
We use aggregated and anonymized data to understand user behavior, improve our products and services, and make data-driven business decisions.

6. User Rights

Under the GDPR, CCPA, and applicable Texas privacy laws, you have specific rights regarding your Personal Data. HAPPYPIP is committed to facilitating the exercise of these rights in accordance with applicable laws.

6.1 Right to Access
You have the right to request access to the Personal Data we hold about you. This includes the right to know whether we are processing your data, the purposes of processing, the categories of data processed, and the recipients of your data.

6.2 Right to Rectification
You have the right to request the correction of inaccurate or incomplete Personal Data. If any information we hold about you is incorrect, you can request that we update it.

6.3 Right to Erasure (Right to be Forgotten)
You have the right to request the deletion of your Personal Data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent and no other legal basis for processing applies.

6.4 Right to Restriction of Processing
You have the right to request that we restrict the processing of your Personal Data in certain situations, such as when you contest the accuracy of the data or object to the processing based on our legitimate interests.

6.5 Right to Data Portability
You have the right to receive a copy of the Personal Data you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to request that we transfer this data to another data controller where technically feasible.

6.6 Right to Object
You have the right to object to the processing of your Personal Data based on our legitimate interests or for direct marketing purposes. We will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your rights or for the establishment, exercise, or defense of legal claims.

6.7 Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

6.8 Right to Non-Discrimination (CCPA)
Under the CCPA, you have the right to not be discriminated against for exercising your privacy rights. We will not deny you services, charge you different prices, or provide you with a different level of service for exercising your rights under the CCPA.

6.9 Exercising Your Rights
To exercise any of the rights outlined above, please contact us using the contact information provided in Section 25. We may require verification of your identity before fulfilling your request. We will respond to your request within the timeframes established by applicable laws.

7. Data Retention

7.1 Retention Periods
HAPPYPIP retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, or as required by law. The criteria we use to determine the appropriate retention periods include:

• Purpose of Collection: We retain Personal Data for as long as necessary to provide our services, process transactions, and maintain your account.
• Legal Obligations: We retain Personal Data as required by law, such as for tax, accounting, or legal compliance purposes.
• Legitimate Interests: Where we process data based on our legitimate interests, we retain the data for as long as necessary to fulfill those interests.

7.2 Deletion of Data
Once the retention period expires, or upon your request for deletion (where applicable), we will securely delete or anonymize your Personal Data, unless we are required by law to retain it.

7.3 Data Retention for Marketing Purposes
If you have consented to receive marketing communications, we will retain your contact information for marketing purposes until you withdraw your consent or opt-out of receiving such communications.

8. Data Security

HAPPYPIP takes the security of your Personal Data seriously and implements appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, and destruction. We continuously review our security practices to ensure the ongoing confidentiality, integrity, availability, and resilience of our systems and services.

8.1 Security Measures

• Encryption: We use industry-standard encryption protocols to protect your data during transmission and storage. This includes encrypting sensitive information, such as payment data, both in transit and at rest.
• Access Controls: Access to Personal Data is restricted to authorized personnel only, and these individuals are required to adhere to strict confidentiality obligations. We implement role-based access controls to ensure that only those who need to access your data for legitimate business purposes can do so.
• Regular Security Audits: We conduct regular security audits and assessments of our systems and processes to identify potential vulnerabilities and improve our security posture.
• Incident Response Plan: In the event of a data breach, we have a comprehensive incident response plan in place to quickly identify, contain, and mitigate the effects of the breach. We will notify you and relevant authorities in accordance with applicable laws if your data is compromised.

8.2 User Responsibilities

• While we take every precaution to protect your data, the security of your information also depends on you. We encourage you to take the following steps to help protect your data:
• Use Strong Passwords: Create strong, unique passwords for your accounts and avoid using the same password across multiple sites.
• Secure Your Devices: Ensure that your devices are secured with up-to-date antivirus software and firewalls. Avoid accessing your account from public or unsecured networks.
• Be Cautious with Phishing: Be aware of phishing scams and other malicious activities that attempt to steal your personal information. HAPPYPIP will never ask you for your password or payment information via email or phone.

8.3 Reporting Security Issues

• If you believe that your account or data has been compromised, please contact us immediately using the contact information provided in Section 25. We will work with you to secure your account and investigate any potential security breaches.

9. Cookies and Tracking Technologies

HAPPYPIP uses cookies and similar tracking technologies to enhance your experience on our Website, understand how you interact with our content, and deliver personalized advertisements. Please refer to our Cookie Policy.

10. Data Sharing and Disclosure

HAPPYPIP respects your privacy and only shares your Personal Data in ways that are consistent with this Privacy Policy and as required or permitted by law. This section outlines the circumstances under which we may share your data with third parties.

10.1 Service Providers
We may share your Personal Data with third-party service providers who perform functions on our behalf. These functions may include processing payments, delivering products, managing customer relationships, providing marketing assistance, conducting research and analytics, and providing cloud storage services. Our service providers are contractually obligated to use your data only as necessary to provide these services and to protect your data in accordance with this Privacy Policy.

10.2 Business Transfers
In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your Personal Data may be transferred to the new owner or successor entity. We will notify you of such an event and explain any choices you may have regarding your data.

10.3 Legal Requirements
We may disclose your Personal Data when required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). This includes complying with legal obligations, protecting our rights, property, or safety, and enforcing our terms and conditions.

10.4 Data Sharing for Advertising
We may share anonymized or aggregated data with our advertising partners for marketing and promotional purposes. This data cannot be used to identify you personally and is used to deliver targeted advertisements and improve our marketing strategies.

10.5 Your Rights Regarding Data Sharing

• Opt-Out of Data Sharing: If you are a resident of California, you have the right to opt-out of the sale of your Personal Data under the CCPA. To exercise this right, please use the “Do Not Sell My Personal Information” link on our Website or contact us directly.
• Data Subject Rights: If you are a resident of the European Union, you have the right to object to the sharing of your data in certain circumstances under the GDPR. To exercise this right, please contact us using the details provided in Section 25.

11. International Data Transfers

HAPPYPIP is based in the United States, and your Personal Data may be transferred to, processed, and stored in countries other than the one in which you are located. This section explains how we handle international data transfers in compliance with applicable laws.

11.1 Data Transfers from the European Union
If you are located in the European Union, your Personal Data may be transferred outside of the EU to countries that may not provide the same level of data protection as your home country. When transferring data outside the EU, we ensure that appropriate safeguards are in place to protect your data, as required by the GDPR. These safeguards may include:

• Standard Contractual Clauses (SCCs): We may use standard contractual clauses approved by the European Commission, which provide appropriate safeguards for cross-border data transfers.
• Binding Corporate Rules (BCRs): Where applicable, we may rely on binding corporate rules that have been approved by EU data protection authorities.
• Privacy Shield Framework: While the EU-U.S. Privacy Shield Framework was invalidated by the Court of Justice of the European Union in 2020, we continue to explore and implement alternative mechanisms to ensure compliance with EU data protection laws.

11.2 Data Transfers to Other Jurisdictions
For users located outside of the European Union, we comply with the relevant data protection laws applicable to your region when transferring your data across borders. We will take steps to ensure that your Personal Data receives an adequate level of protection, including entering into data transfer agreements or other legally recognized measures.

11.3 Your Rights Regarding International Transfers
If you are a resident of the European Union or other regions with similar data protection laws, you have the right to request more information about the safeguards we have in place for international data transfers. You may also request a copy of the relevant contractual agreements. To exercise these rights, please contact us using the information provided in Section 25.

12. Children’s Privacy

Protecting the privacy of children is a priority for HAPPYPIP. Our Website and services are not intended for use by individuals under the age of 21, and we do not knowingly collect Personal Data from children under this age. This section outlines our policies related to children’s privacy.

12.1 Age Restrictions
Minimum Age Requirement: You must be at least 21 years old to use our Website or services. By using our Website, you represent that you meet this age requirement.

12.2 Parental Consent
COPPA Compliance: We comply with the Children’s Online Privacy Protection Act (COPPA) in the United States, which imposes certain requirements on websites and online services directed toward children under the age of 13. While our services are not directed at children under 21, if we become aware that we have inadvertently collected Personal Data from a child under the age of 13, we will take steps to delete such data as soon as possible.

12.3 Reporting Child Privacy Concerns
If you are a parent or guardian and believe that your child has provided us with Personal Data without your consent, please contact us immediately using the contact information in Section 25. We will take the necessary steps to remove the information and comply with applicable legal requirements.

13. Data Subject Requests

HAPPYPIP is committed to respecting your rights under applicable data protection laws. This section provides information on how you can make requests regarding your Personal Data and what you can expect when you do so.

13.1 How to Submit a Request
You can submit a data subject request by contacting us through any of the methods provided in Section 25. Please include the following information in your request:

• Your Full Name
• Email Address Associated with Your Account
• Description of Your Request (e.g., Access, Rectification, Deletion)
• Any Additional Information Required for Verification

13.2 Verification Process
To protect your privacy and ensure that we are dealing with the correct individual, we may ask you to verify your identity before processing your request. This may include providing proof of identity, such as a government-issued ID or other forms of verification.

13.3 Response Timeframes
We will acknowledge receipt of your request within a reasonable timeframe and respond within the period required by applicable law. Under the GDPR, this is typically within one month, though this period may be extended by two further months in certain circumstances. Under the CCPA, we will respond within 45 days, with the possibility of a 45-day extension if necessary.

13.4 Denial of Requests
In some cases, we may deny your request if we have a legal basis to do so. For example, we may deny a request to delete data if we are required to retain it for legal reasons. If we deny your request, we will inform you of the reason for the denial and provide information on how you can challenge our decision, if applicable.

13.5 Cost of Processing Requests
We generally do not charge a fee for processing data subject requests. However, if your request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee or refuse to act on the request.

14. Automated Decision-Making and Profiling

HAPPYPIP may use automated decision-making and profiling in certain circumstances to improve our services and provide a personalized experience. This section explains what automated decision-making and profiling involve, how we use these techniques, and your rights related to them.

14.1 What is Automated Decision-Making?
Automated decision-making refers to decisions made by automated means, without any human involvement, based on Personal Data. This could include, for example, automatically declining a credit application online without human intervention.

14.2 Your Rights Related to Automated Decision-Making and Profiling
Under the GDPR, you, as a resident of the EU, have the right not to be subject to decisions based solely on automated processing, including profiling, if those decisions produce legal effects or similarly significant effects on you. You have the following rights related to automated decision-making and profiling:

• Right to Obtain Human Intervention: You have the right to request that a human being reviews any automated decision that affects you.
• Right to Express Your Point of View: You have the right to express your point of view and contest the decision made through automated processing.
• Right to Object: You may have the right to object to profiling in certain circumstances, particularly for direct marketing purposes.

If you wish to exercise any of these rights, please contact us using the information provided in Section 25.

15. Marketing Communications

HAPPYPIP values your privacy and is committed to ensuring that you only receive marketing communications that are relevant and aligned with your preferences. This section outlines how we handle marketing communications and your rights regarding these communications.

15.1 Consent for Marketing Communications
Opt-In Requirement: We will only send you marketing communications if you have opted in to receive them. This means you must provide explicit consent before we use your Personal Data for marketing purposes. Consent may be collected when you create an account, subscribe to our newsletter, or otherwise express interest in receiving marketing information.

15.2 Types of Marketing Communications

• Email Marketing: We may use your email address to send you promotional offers, newsletters, and updates about our products and services.
• SMS and Push Notifications: With your consent, we may send promotional messages and updates via SMS or push notifications to your mobile device.
• Targeted Advertising: We may use cookies and similar technologies to deliver personalized advertisements that are tailored to your interests based on your browsing history and interactions with our Website.

15.3 Managing Your Preferences

• Opt-Out Options: You can opt out of receiving marketing communications at any time by clicking the “unsubscribe” link in the footer of any marketing email or by adjusting your preferences in your account settings.
• Do Not Track Signals: If your browser sends a “Do Not Track” signal, we will respect your preferences and cease tracking activities for targeted advertising, as required by applicable laws.
• Third-Party Marketing: If we share your Personal Data with third parties for their marketing purposes, we will obtain your explicit consent before doing so.

15.4 Legal Basis for Processing

• GDPR Compliance: Under GDPR, our processing of your Personal Data for marketing purposes is based on your explicit consent. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• CCPA Compliance: Under CCPA, California residents have the right to opt out of the sale of their Personal Data for marketing purposes. We provide a “Do Not Sell My Personal Information” link on our Website to facilitate this process.

16. Third-Party Links and Services

Our Website may contain links to third-party websites, products, or services. This section provides information on our practices related to third-party links and services, as well as your responsibilities when interacting with third-party content.

16.1 Third-Party Links

• No Endorsement: The inclusion of a link to a third-party website does not imply endorsement, approval, or recommendation by HAPPYPIP. These links are provided solely for your convenience, and you access them at your own risk.
• Third-Party Privacy Practices: Third-party websites and services have their own privacy policies, which may differ from ours. We encourage you to review the privacy policies of any third-party websites you visit to understand how they collect, use, and protect your information.

16.2 Third-Party Services

• Service Providers: We may engage third-party service providers to perform certain functions on our behalf, such as processing payments, delivering products, or providing analytics services. These providers are contractually obligated to use your data only for the purposes for which it was provided and to protect your data in accordance with this Privacy Policy.
• Third-Party Advertisers: We may partner with third-party advertising networks to display ads on our Website. These advertisers may use cookies and similar technologies to collect information about your interactions with our Website and other sites to provide you with personalized advertising.

16.3 Your Responsibilities

• Review Privacy Policies: It is your responsibility to review the privacy policies of any third-party websites or services you interact with through our Website.
• Exercise Caution: Be cautious when sharing personal information with third parties, especially on websites that are not affiliated with or controlled by HAPPYPIP.

17. Data Breach Response

HAPPYPIP takes the protection of your Personal Data seriously and has established procedures to respond swiftly and effectively in the event of a data breach. This section outlines our data breach response protocols, including notification procedures and legal obligations.

17.1 Identification and Containment
Monitoring and Detection: We continuously monitor our systems for signs of unauthorized access or data breaches. If a breach is detected, we will take immediate steps to contain the breach and prevent further unauthorized access.

17.2 Assessment and Mitigation

• Risk Assessment: Upon detecting a breach, we will assess the scope and impact of the breach, including the type and volume of data affected, the risk to individuals’ rights and freedoms, and the likelihood of harm.
• Mitigation Efforts: We will implement appropriate measures to mitigate the effects of the breach, including securing affected systems, restoring data from backups, and preventing future breaches.

17.3 Notification Procedures

• Notification to Affected Individuals: If the breach is likely to result in a high risk to the rights and freedoms of individuals, we will notify affected individuals without undue delay. Notifications will include details of the breach, the likely consequences, and the steps we are taking to address it.
• Regulatory Notification: If required by law, we will notify relevant regulatory authorities, such as data protection authorities under the GDPR or the Attorney General’s office under Texas privacy laws, within the timeframe required by law (e.g., 72 hours under GDPR).

17.4 Legal Obligations and Cooperation

• Compliance with Legal Requirements: We will comply with all legal obligations related to data breach notification, including requirements under GDPR, CCPA, and Texas privacy laws.
• Cooperation with Authorities: We will fully cooperate with law enforcement and regulatory authorities in investigating and addressing the breach.

18. Changes to the Privacy Policy

HAPPYPIP reserves the right to update or modify this Privacy Policy at any time. This section explains how we will communicate changes to the Privacy Policy and your responsibilities in staying informed about updates.

18.1 Notification of Changes

• Material Changes: If we make material changes to this Privacy Policy, we will notify you by posting a notice on our Website or by sending you an email notification. Material changes may include significant modifications to how we collect, use, or share your Personal Data.
• Effective Date: The “Last Updated” date at the top of this Privacy Policy indicates when the Policy was last revised. All changes will be effective upon posting, unless otherwise specified.

18.2 Your Responsibility

• Review Regularly: We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your Personal Data.
• Continued Use: Your continued use of our Website and services after the effective date of any changes to this Privacy Policy constitutes your acceptance of the updated Policy.

18.3 Withdrawal of Consent

• Opt-Out Rights: If you do not agree with the changes, you may withdraw your consent to our processing of your Personal Data by contacting us as described in Section 25. Please note that withdrawing consent may limit your ability to use certain features of our Website or services.

19. Data Protection Officer (DPO)

HAPPYPIP is committed to ensuring the lawful and transparent processing of Personal Data. This section outlines the role of our Data Protection Officer (DPO) and how you can contact them.

19.1 Appointment of a DPO

• DPO Role: In accordance with GDPR requirements, HAPPYPIP has appointed a Data Protection Officer to oversee our data protection strategies and ensure compliance with data protection laws.
• DPO Responsibilities: The DPO is responsible for monitoring our data processing activities, providing guidance on data protection compliance, conducting data protection impact assessments (DPIAs), and serving as a point of contact for data subjects and supervisory authorities.

19.2 Contacting the DPO

• DPO Contact Information: You may contact our DPO with any questions or concerns regarding your Personal Data or this Privacy Policy by using the contact information provided in Section 25.
• Escalation of Concerns: If you are not satisfied with the response from our DPO, you may have the right to lodge a complaint with your local data protection authority, as described in Section 25.

20. Consent Management

HAPPYPIP respects your right to control how your Personal Data is collected, used, and shared. This section outlines our approach to obtaining, managing, and documenting your consent.

20.1 Obtaining Consent

• Explicit Consent: Where required by law, we obtain your explicit consent before collecting or processing your Personal Data for specific purposes, such as marketing communications or sharing data with third parties.
• Consent for Minors: If you are under the age of 21, you are not permitted to use our Website or services. We do not knowingly collect Personal Data from individuals under this age. If we learn that we have collected Personal Data from a minor without appropriate consent, we will delete it promptly.

20.2 Managing and Withdrawing Consent

• Managing Preferences: You can manage your consent preferences at any time by accessing your account settings or contacting us directly. This includes opting out of marketing communications or adjusting your cookie preferences.
• Withdrawal of Consent: You have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

20.3 Documentation of Consent

• Record-Keeping: We maintain records of all consents obtained, including the date, time, and manner of consent, as well as the specific details of what was consented to. This ensures that we can demonstrate compliance with applicable legal requirements.

21. Data Anonymization and Pseudonymization

HAPPYPIP is committed to protecting your Personal Data and minimizing the risk of misuse. This section explains our use of data anonymization and pseudonymization techniques to enhance data security.

21.1 Anonymization

• Definition: Anonymization refers to the process of removing or altering personal identifiers in such a way that the data can no longer be linked to an individual. Once anonymized, the data is no longer considered Personal Data and is not subject to data protection laws.
• Use of Anonymized Data: We may use anonymized data for research, statistical analysis, and improving our products and services. Because anonymized data cannot be traced back to you, it is not possible to request deletion or access to anonymized data.

21.2 Pseudonymization

• Definition: Pseudonymization involves processing Personal Data in such a way that it can no longer be attributed to a specific Data Subject without the use of additional information, which is kept separately and securely.
• Purpose of Pseudonymization: We use pseudonymization to reduce the risk of identifying individuals in case of a data breach, while still allowing us to process data for legitimate purposes.
• Re-Identification Safeguards: Access to the additional information required to re-identify pseudonymized data is strictly controlled and limited to authorized personnel.

22. Employee and Contractor Privacy

HAPPYPIP respects the privacy of its employees and contractors and is committed to processing their Personal Data in accordance with applicable laws. This section outlines our privacy practices related to employee and contractor data.

22.1 Collection of Employee and Contractor Data

• Types of Data Collected: We collect Personal Data from employees and contractors for employment-related purposes, including but not limited to, contact information, payroll data, performance evaluations, and work history.
• Purpose of Data Collection: The data is collected to manage employment relationships, comply with legal obligations, provide benefits, and ensure the safety and security of our workplace.

22.2 Data Processing and Security

• Lawful Processing: We process employee and contractor data in accordance with employment laws, contracts, and with the consent of the individual where required.
• Data Security: Employee and contractor data is stored securely and access is restricted to authorized personnel who require it for legitimate business purposes.

22.3 Employee Rights

• Access and Rectification: Employees and contractors have the right to access their Personal Data and request corrections if the data is inaccurate or incomplete.
• Confidentiality: We maintain the confidentiality of employee and contractor data and only share it with third parties when necessary for legitimate purposes, such as payroll processing, benefits administration, or legal compliance.

23. Data Integrity and Accuracy

HAPPYPIP is committed to maintaining the accuracy and integrity of the Personal Data we process. This section outlines our practices for ensuring that your data is accurate, up-to-date, and complete.

23.1 Accuracy of Data

• User Responsibility: It is important that the Personal Data you provide to us is accurate and up-to-date. Please inform us promptly of any changes to your information, such as a change in your contact details.
• Verification: We may take steps to verify the accuracy of the data you provide, particularly when processing data for critical functions such as order fulfillment or legal compliance.

23.2 Data Updates and Corrections

• Requesting Updates: You have the right to request that we update or correct any inaccuracies in your Personal Data. You can do this by accessing your account settings or by contacting us directly.
• Maintaining Data Integrity: We periodically review our data collection and processing practices to ensure that the data we hold is accurate, complete, and relevant to the purposes for which it was collected.

23.3 Minimization of Data

• Data Minimization Principle: We adhere to the principle of data minimization, meaning that we only collect and retain Personal Data that is necessary for the specified purposes. This helps to reduce the risk of inaccuracies and ensures that we do not hold excessive or irrelevant data.

24. Law Enforcement and Legal Requests

HAPPYPIP may be required to disclose your Personal Data in response to lawful requests from law enforcement or other government authorities. This section outlines our policies for handling such requests.

24.1 Legal Basis for Disclosure

• Compliance with Legal Obligations: We may disclose your Personal Data to law enforcement or other governmental authorities if required to do so by law, including in response to court orders, subpoenas, or other legal processes.
• Protection of Rights and Safety: We may also disclose your data when necessary to protect our rights, property, or safety, as well as the rights, property, or safety of others.

24.2 Procedure for Handling Requests

• Verification of Requests: Before disclosing any Personal Data, we will verify the legitimacy of the request and ensure that it is consistent with applicable legal standards. We may seek to limit the scope of the data requested where possible.
• Notification to Users: Where permitted by law, we will notify you of any legal request for your Personal Data to give you an opportunity to object to the disclosure, unless doing so would impede an investigation or violate the law.

24.3 Data Sharing with Authorities

• Data Minimization: We will only share the minimum amount of data necessary to comply with legal requests and will take steps to protect the privacy of individuals involved.
• Ongoing Cooperation: We will cooperate with law enforcement and government authorities in a lawful manner, consistent with our commitment to protecting your privacy.

25. Contact Information and Complaints

HAPPYPIP is committed to addressing your privacy concerns and ensuring that your rights are protected. This final section provides the necessary contact information for reaching out to us with questions, concerns, or complaints about your privacy and our data practices.

25.1 Contact Information
Email: If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].

25.2 Complaints and Dispute Resolution
Filing a Complaint: If you believe that your rights have been violated or that we have not adhered to this Privacy Policy, you have the right to file a complaint with us. We take all complaints seriously and will work to resolve them as quickly as possible.

25.3 Feedback
User Feedback: We value your feedback and are always looking for ways to improve our privacy practices. If you have any suggestions or feedback on how we can enhance our Privacy Policy or data protection measures, please let us know using the contact information provided.