top of page

STORE POLICY

Privacy Policy (California & EU Compliant)

Last updated: [January 6th, 2026]

This Privacy Policy describes how Forgotten Happiness ("we," "us," or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from forgotten-happiness.com (the "Site") or otherwise interact with us (collectively, the "Services").

This Privacy Policy is designed to comply with applicable privacy laws, including:

  • The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

  • The EU General Data Protection Regulation (GDPR)

By using the Services, you agree to the collection, use, and disclosure of information as described below.

1. Personal Information We Collect

We collect personal information from the following sources:

A. Information You Provide Directly

  • Identifiers: name, email address, phone number, shipping and billing address

  • Order information: products purchased, payment confirmation, order history

  • Account information: username and password

  • Customer support communications

Providing certain information is necessary to access some Services. Choosing not to provide required information may limit functionality.

B. Information Collected Automatically (Cookies & Usage Data)

  • IP address

  • Device and browser information

  • Pages viewed and interactions with the Site

We use cookies and similar technologies to operate, analyze, and improve the Services. You may manage cookies through your browser settings.

C. Information from Third Parties

  • Shopify (store hosting and analytics)

  • Payment processors (payment handling; we do not store full card details)

  • Shipping and fulfillment providers

  • Marketing and analytics partners

2. How We Use Your Personal Information

We use personal information for the following purposes:

  • Order fulfillment & account management (contractual necessity)

  • Customer support & communications (legitimate interests)

  • Marketing & promotional communications (consent where required)

  • Fraud prevention & security (legal and legitimate interests)

  • Website analytics & improvement (legitimate interests)

You may opt out of marketing communications at any time.

3. Legal Bases for Processing (EU/UK Users)

Under GDPR, we rely on the following legal bases:

  • Performance of a contract

  • Legitimate business interests

  • Consent (where required)

  • Legal obligations

4. Sharing & Disclosure of Personal Information

We do not sell personal information for monetary value.

We may share personal information with:

  • Service providers (payments, shipping, analytics, customer support)

  • Marketing partners (only where permitted by law)

  • Legal or regulatory authorities if required

  • Business successors in the event of a merger or sale

All third parties are required to protect your data and use it only for authorized purposes.

5. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect and disclose

  • Access your personal information

  • Request deletion of your personal information

  • Correct inaccurate information

  • Opt out of the sale or sharing of personal information

  • Limit the use of sensitive personal information

  • Not be discriminated against for exercising these rights

We do not sell or share personal information for cross-context behavioral advertising.

Requests can be made through our Contact page.

6. EU & EEA Privacy Rights (GDPR)

If you are located in the EU or EEA, you have the right to:

  • Access your personal data

  • Request correction or deletion

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with your local data protection authority

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy and comply with legal obligations.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards. However, no system is completely secure, and we cannot guarantee absolute security.

9. Children’s Privacy

The Services are not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us.

10. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for their privacy practices.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted with an updated "Last updated" date.

12. Contact Us

If you have questions or wish to exercise your privacy rights, please contact us through the website contact form.

bottom of page