PRIVACY POLICY
Last updated: 8 February 2026
SECTION 1 – DATA CONTROLLER
This website is operated by Happy Shopper (the “Controller”).
Website: https://www.hs.mt
For the purposes of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Happy Shopper determines the purposes and means of the processing of personal data.
SECTION 2 – LAWFUL BASIS FOR PROCESSING
Personal data is processed only where one or more of the following lawful bases apply:
2.1 Contractual necessity – to provide products, services, and manage customer accounts
2.2 Legal obligation – to comply with tax, accounting, regulatory, or legal requirements
2.3 Legitimate interests – including website security, fraud prevention, analytics, and service improvement
2.4 Consent – where explicitly obtained, such as for marketing communications
Where processing is based on consent, consent may be withdrawn at any time.
SECTION 3 – CATEGORIES OF PERSONAL DATA COLLECTED
SUBSECTION 3.1 – Data Provided Directly
We may collect the following information when you interact with the website or contact us:
3.1.1 Name and surname
3.1.2 Email address
3.1.3 Telephone number
3.1.4 Delivery and billing address
3.1.5 Account login credentials (stored securely and encrypted)
3.1.6 Messages, enquiries, or correspondence
SUBSECTION 3.2 – Automatically Collected Data
When you access or use the website, the following data may be collected automatically:
3.2.1 IP address
3.2.2 Browser type and version
3.2.3 Device and operating system information
3.2.4 Date and time of access
3.2.5 Pages visited and technical usage data
3.2.6 Security and error logs
SUBSECTION 3.3 – Transactional Data
Where purchases or payments are involved, we may collect:
3.3.1 Order references and purchase history
3.3.2 Payment confirmation and transaction status
3.3.3 Refunds, disputes, or chargeback records
Full payment card numbers, CVV codes, and sensitive payment credentials are never stored on our systems.
SECTION 4 – PURPOSE OF PROCESSING
Personal data is processed strictly for the following purposes:
4.1 Order processing and service delivery
4.2 Account creation and management
4.3 Customer support and communications
4.4 Website operation, security, and fraud prevention
4.5 Legal, regulatory, and accounting compliance
4.6 Performance analysis and service improvement
SECTION 5 – COOKIES AND SIMILAR TECHNOLOGIES
The website uses cookies and similar technologies to:
5.1 Enable essential website functionality
5.2 Maintain secure login sessions
5.3 Store user preferences
5.4 Protect against abuse and security threats
5.5 Collect anonymized statistical data
Cookies may be session-based or persistent.
Cookies can be managed or disabled through browser settings.
SECTION 6 – ANALYTICS AND MONITORING
Analytics and monitoring tools may be used to understand website usage and improve performance.
6.1 Data is processed in aggregated or pseudonymised form where possible
6.2 Processing is based on legitimate interest under GDPR Article 6(1)(f)
6.3 Data is not used to directly identify individual users
SECTION 7 – EMBEDDED CONTENT AND THIRD-PARTY SERVICES
Some pages may include embedded or integrated third-party services such as payment gateways, maps, videos, or security tools.
Third-party services operate under their own privacy policies and act as independent data controllers.
SECTION 8 – PAYMENTS
Payments are processed by certified third-party payment service providers.
8.1 Payment data is transmitted securely using encryption
8.2 We receive confirmation of payment status only
8.3 Sensitive payment information is handled exclusively by the payment provider
SECTION 9 – DATA SHARING AND TRANSFERS
Personal data may be shared where strictly necessary with hosting providers, payment processors, IT and security providers, professional advisers, or public authorities where required by law.
SECTION 10 – DATA RETENTION
Personal data is retained only for as long as necessary to fulfil its purpose, comply with legal obligations, or defend legal claims.
SECTION 11 – YOUR RIGHTS UNDER GDPR
You have the right to access, correct, erase, restrict, object to processing, request portability of your data, and lodge a complaint with the Office of the Information and Data Protection Commissioner (Malta).
SECTION 12 – DATA SECURITY
Appropriate technical and organizational measures are implemented to protect personal data. No online system can be guaranteed to be completely secure.
SECTION 13 – LIMITATION OF LIABILITY
To the maximum extent permitted by law, Happy Shopper shall not be liable for unauthorised access beyond reasonable security measures.
SECTION 14 – CHANGES TO THIS POLICY
This Privacy Policy may be updated periodically. The latest version will always be published on this page.
