Privacy Policy

Last updated: March 21, 2026

1. Who we are

The Happypages Company LTD ("we", "us", "our") operates the Happy Pages referral platform at app.happypages.co. We provide referral program tools for e-commerce merchants via Shopify.

2. Data we collect

When a merchant installs our Shopify app, we access limited customer data through Shopify's APIs to operate the referral program:

Data Purpose
Customer email Unique identifier for referral tracking; links referrals across sessions
Customer first name Personalisation of referral pages and codes (e.g. "JOHN847")
Shopify customer ID Links referrals to the correct Shopify customer record
Order data (order ID, discount codes used) Determines when a referral code has been used and triggers rewards

We do not collect phone numbers, shipping addresses, payment information, or full order history.

3. How we use data

We use collected data solely to:

  • Generate and track referral codes for customers
  • Detect when a referral code is used on an order
  • Issue discount rewards to referring customers
  • Display personalised referral pages
  • Send referral lifecycle events to merchant-configured integrations (e.g. Klaviyo)

4. Data storage and encryption

Data is stored in a PostgreSQL database hosted on Railway (US-based infrastructure). Personally identifiable information (email, first name) is encrypted at rest using Rails Active Record Encryption. API credentials and access tokens are also encrypted.

5. Data retention

We retain customer data for as long as:

  • The merchant's app installation remains active, or
  • A customer requests deletion (processed within 30 days)

When a merchant uninstalls the app, all associated data (referrals, analytics events, rewards, and credentials) is permanently deleted within 48 hours via Shopify's shop/redact webhook.

6. Data sharing

We do not sell or share customer data with third parties. Data may be sent to merchant-configured integrations (such as Klaviyo or Awtomic) only at the merchant's explicit request and using the merchant's own API credentials.

7. Customer rights

Customers of merchants using our app can exercise their data rights through Shopify's built-in privacy tools. When a customer requests data access or deletion through Shopify, we receive and process the request automatically:

  • Data access requests are logged and fulfilled within 30 days
  • Deletion requests result in anonymisation or removal of all PII

8. Merchant responsibilities

Merchants using our app are responsible for including our data processing in their own privacy policies and for ensuring they have a lawful basis to share customer data with our platform.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to merchants via the app dashboard.

10. Contact

For privacy inquiries, data requests, or concerns:

Email: alex@happypages.co
Company: The Happypages Company LTD