Privacy policy
Please note: this is a courtesy translation of our Spanish legal text, provided for your convenience. In the event of any discrepancy between the two versions, the Spanish version is the one that prevails legally. You can read it here: Spanish version.
Last updated: 6 August 2026
At Happyideas we process your personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and with Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD). Below we explain it first in summary and then in detail.
In short: if you have placed an order
Controller: Happyideas Home, S.L. (NIF B-98862410).
Purpose: to process, deliver and invoice your order and to look after you during and after the purchase.
Legal basis: performance of the contract of sale and compliance with our legal, tax and accounting obligations.
Recipients: payment providers, transport companies and technology providers that serve us. We do not sell your data to anyone.
Rights: access, rectification, erasure, objection, restriction and portability, by writing to [email protected].
In short: if you have subscribed to the newsletter
Controller: Happyideas Home, S.L. (NIF B-98862410).
Purpose: to send you news, offers and content from Happyideas.
Legal basis: your consent, which you can withdraw whenever you like, without this affecting the lawfulness of processing carried out before the withdrawal.
Recipients: the email platform we use. We do not pass your address on for third parties to advertise their own products to you.
Rights: the same ones, and you can also unsubscribe using the link included in every email.
1. Who is the controller of your data?
Company name: Happyideas Home, S.L.
Trading name: Happyideas
NIF: B-98862410
Registered office: C/ La Fos nº 1, 46870 Ontinyent (Valencia), Spain
Phone: +34 613 89 75 05
Email: [email protected]
2. What data do we process, what for, and on what legal basis?
Purchases and order management. We process your identifying and contact details, the delivery and billing address, the details of the order and the data needed to take payment. The legal basis is performance of the contract of sale (Art. 6.1.b GDPR) and, for invoicing and its retention, compliance with legal obligations (Art. 6.1.c GDPR).
Customer account. If you register, we process your login details and your order history so you can consult them and buy more quickly. The legal basis is performance of the contract (Art. 6.1.b GDPR).
Customer service. We process the data you give us through the contact form, by email, by phone or on WhatsApp in order to resolve your enquiry, incident, return or guarantee claim. The legal basis is performance of the contract or, if you are not yet a customer, your consent and our legitimate interest in assisting you (Art. 6.1.b and 6.1.f GDPR).
Newsletter and commercial communications. We process your email address and your name in order to send you news and offers. The legal basis is your consent (Art. 6.1.a GDPR). If you are already a customer, we may also tell you about products similar to those you have bought, in accordance with Article 21.2 of Spanish Law 34/2002 (LSSI-CE), and in that case you may object at any time and in every communication.
Reviews and ratings. If you agree to rate your purchase, we process your name and your opinion through the verified reviews service we use. The legal basis is your consent (Art. 6.1.a GDPR).
Analytics, personalisation and advertising. We process data about your browsing on the website through cookies and similar technologies in order to measure use of the site, improve it and show you advertising suited to your interests. The legal basis is your consent, which you give or refuse in the cookie settings panel (Art. 6.1.a GDPR and Art. 22.2 LSSI-CE). You will find the details in our cookie policy.
Security and fraud prevention. We process technical and transaction data in order to detect fraudulent use and protect the shop. The legal basis is our legitimate interest (Art. 6.1.f GDPR).
The data we ask you for is what is necessary for each purpose. If you do not provide it, we may not be able to process your order or deal with your request.
3. How long do we keep your data?
We keep your order data for the duration of the commercial relationship and, afterwards, blocked for the legal limitation periods: six years under commercial and accounting rules and four years under tax rules. Your customer account data is kept until you delete the account. Newsletter data is kept until you withdraw your consent or unsubscribe. Customer service data is kept for as long as necessary to resolve your enquiry and for the applicable claim periods. Analytics and advertising data is kept for the periods indicated in the cookie policy, or until you withdraw your consent.
4. Who do we share your data with?
We do not sell your data, nor do we pass it to third parties for them to advertise on their own account. However, in order to provide the service we need to rely on providers who access your data as data processors, under a contract signed in accordance with Article 28 GDPR, or who act as independent controllers within their own remit. These are the categories:
- Payment gateways and payment providers, to collect payment for your order securely. These include Stripe. Your full card details are processed directly by the payment provider; we do not store them.
- Transport and logistics companies, to deliver your order. They receive your name, address, phone number and email in order to arrange delivery.
- Technology providers for hosting, shop maintenance, email and backups.
- Verified review platforms, if you agree to rate your purchase.
- Analytics and advertising providers, such as Google (Google Analytics and Google Ads) and Meta (the Facebook and Instagram pixel), only if you have accepted the corresponding cookies.
- Public authorities, courts and law enforcement bodies, where there is a legal obligation, and our tax, accounting and legal advisers.
5. Is your data transferred outside the European Economic Area?
Some of the providers above, particularly those for analytics and advertising, are established in the United States or may process data outside the European Economic Area. In those cases the transfer is covered by an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework, or by the standard contractual clauses approved by the Commission, together with supplementary measures. You can ask us for a copy of these safeguards by writing to [email protected].
6. How do we protect your data?
We apply the appropriate technical and organisational measures required by Article 32 GDPR to guarantee a level of security appropriate to the risk: encryption of communications through an SSL certificate, access control by profile, strong passwords, regular backups, software updates and confidentiality agreements with everyone who accesses the data. If a security breach occurred that posed a high risk to your rights, we would inform you and notify the Spanish Data Protection Agency within the legal deadlines.
7. What are your rights?
You may exercise at any time the rights of access, rectification, erasure, objection, restriction of processing and portability, as well as the right not to be subject to automated individual decisions. Where the processing is based on your consent, you may withdraw it at any time without this affecting the lawfulness of the processing carried out before the withdrawal.
To exercise them, write to [email protected] or to Happyideas Home, S.L., C/ La Fos nº 1, 46870 Ontinyent (Valencia), Spain, stating the right you are exercising and attaching a copy of a document proving your identity. We will reply within one month.
If you consider that we have not dealt with your request properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).
8. Minors
Our shop is not aimed at children under 14. By providing us with your data you declare that you are over that age. If we detect that we have collected data from a minor without the consent of the person holding parental authority or guardianship, we will delete it.
9. Changes to this policy
We may update this policy to adapt it to regulatory changes or to new services. The date of the last update appears at the beginning of the document; we recommend reviewing it from time to time.