Privacy policy

Privacy Policy

Last updated: 06.02.2026

This Privacy Policy describes how Happy X Craft (“we”, “our”, or “us”) collects, uses, and protects your personal data when you visit or make a purchase from https://happyxcraft.com (the “Website”).

We process your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

1. Data Controller

The data controller responsible for processing personal data is:

Corina Ciocanu
Happy X Craft
Waldheimerstr. 25
12627 Berlin
Germany

Email: help.happyxcraft@yahoo.com

2. What Personal Data We Collect

When you visit our website

We automatically collect certain information about your device, including:

  • IP address

  • Browser type and version

  • Time zone

  • Cookie information

  • Pages viewed

  • Products viewed

  • Search terms

  • Interaction with the website

Legal basis: Art. 6(1)(f) GDPR (legitimate interest to improve website functionality and security)

When you place an order

We collect information necessary to process your purchase:

  • Full name

  • Billing address

  • Shipping address

  • Email address

  • Phone number

  • Payment details (processed securely by payment providers)

Legal basis: Art. 6(1)(b) GDPR (performance of contract)

When you contact customer support

We may collect:

  • Name

  • Email

  • Order details

  • Message content

Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR

3. How We Use Your Personal Data

We use personal data to:

  • Process orders and payments

  • Deliver digital and physical products

  • Provide customer service

  • Prevent fraud and ensure website security

  • Improve website functionality

  • Send marketing communication (only with consent)

4. Shopify Hosting

Our store is hosted by Shopify Inc.

Shopify provides the online e-commerce platform allowing us to sell our products.

Shopify processes personal data on our behalf as a data processor.

Shopify Privacy Policy:
https://www.shopify.com/legal/privacy

Shopify may transfer data outside the EU. Transfers are protected using Standard Contractual Clauses approved by the European Commission.

Legal basis: Art. 6(1)(b) GDPR

5. Payment Providers

Payments are processed through secure third-party providers such as:

  • PayPal

  • Shopify Payments

  • Credit card processors

These providers process payment data independently as data controllers.

6. Cookies and Tracking Technologies

Our website uses cookies to improve functionality, analytics, and marketing.

Cookies include:

  • Essential cookies (website operation)

  • Analytics cookies

  • Marketing cookies

  • Social media cookies

Legal basis:

  • Essential cookies: Art. 6(1)(f) GDPR

  • Analytics and marketing cookies: Art. 6(1)(a) GDPR (user consent)

You can control cookie settings through our cookie banner or your browser.

More information: www.allaboutcookies.org

7. Google Analytics

We use Google Analytics to understand how visitors use our website.

Google may process:

  • IP address

  • Device data

  • Website interaction data

Google Privacy Policy:
https://policies.google.com/privacy

Users may opt out:
https://tools.google.com/dlpage/gaoptout

8. Pinterest, Facebook and Advertising

We use advertising and social media tools including:

  • Pinterest

  • Facebook / Instagram

  • Shopify Audiences

These tools may use cookies and tracking pixels to show relevant advertisements.

Legal basis: user consent (Art. 6(1)(a) GDPR)

Users may opt out via:

https://www.facebook.com/settings/?tab=ads
https://www.google.com/settings/ads
https://optout.aboutads.info

9. Data Retention

We retain personal data only as long as necessary:

  • Order data: retained for tax and legal obligations (usually 10 years in Germany)

  • Customer inquiries: retained until request is completed

  • Marketing data: retained until consent is withdrawn

10. Data Sharing

We share data only with service providers necessary to operate the business:

  • Shopify

  • Payment providers

  • Shipping providers

  • Marketing platforms (with consent)

We never sell personal data.

11. Children’s Data

This website is not intended for individuals under 18 years old.
We do not knowingly collect data from children.

12. Your Rights Under GDPR

EU residents have the right to:

  • Access personal data

  • Correct inaccurate data

  • Delete personal data

  • Restrict processing

  • Data portability

  • Withdraw consent

  • Lodge a complaint with supervisory authority

Requests may be sent to:
help.happyxcraft@yahoo.com

13. International Data Transfers

Some service providers operate outside the EU.
We ensure GDPR protection through approved legal safeguards such as Standard Contractual Clauses.

14. Automated Decision Making

We do not use fully automated decision-making that produces legal or significant effects.

Fraud prevention tools may temporarily block suspicious transactions.

15. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes.
Updated versions will be published on this page.