Legal
Privacy Policy
Last updated: 15 June 2026
This Privacy Policy explains how Happy Place UK (“we”, “us”, “our”) collects, uses, and protects your personal data when you use happyplaceuk.com. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Happy Place is a UK wellness discovery platform. Data Controller: Happy Place UK. Contact: info@happyplaceuk.com. Website: happyplaceuk.com
2. What Data We Collect
2.1 Account Data
When you register, we collect your name and email address. This is stored in your user profile.
2.2 User-Generated Content
Reviews you write and star ratings you submit are stored linked to your account and displayed publicly on the Platform.
2.3 Wishlist / Favourites
Listings you save to your wishlist are stored linked to your user ID.
2.4 Analytics Events
When you use the Platform, we log the following events linked to your user ID (if logged in): listing views, listing clicks, and saves. This data is used to improve the Platform and to provide businesses with anonymised insights about their listing performance.
2.5 Affiliate Click Data
When you click a booking link, our affiliate tracking endpoint logs: the listing ID, your user ID (if logged in), the destination URL, and a timestamp. This is used solely for internal commission attribution. No personal data is shared with the destination business.
2.6 Location Data
If you use Explore Near Me, we request your device location to show nearby results. Your precise location is processed in your browser session only and is not stored. Postcode and place-name searches are passed to Nominatim/OpenStreetMap — only the text you type is sent, not any personal data.
2.7 Technical Data
We may collect your IP address, browser type, and device type for security and performance purposes via PostHog analytics.
3. How We Use Your Data
- To create and manage your account
- To enable wishlist, reviews, and personalised features
- To provide location-based search via Explore Near Me
- To track affiliate clicks for commission attribution (internal only)
- To analyse how the Platform is used and improve it (PostHog, EU-hosted)
- To provide businesses with anonymised listing performance data
- To comply with legal obligations
4. Legal Basis for Processing
- Contract: account creation and core platform features
- Legitimate interests: affiliate tracking, platform improvement, analytics
- Consent: location access, PostHog analytics cookies
- Legal obligation: where required by UK law
5. Third-Party Services
We use the following third-party processors:
- Supabase — database, authentication, and file storage. EU region. Acts as data processor under DPA.
- Mapbox — map tiles and geocoding. US company. Processes location search queries only.
- PostHog — product analytics. EU-hosted. Anonymised usage data.
- Nominatim/OpenStreetMap — postcode geocoding. No personal data sent — only place names/postcodes you type.
- Booking.com, Treatwell, GetYourGuide — affiliate booking partners. We share no personal data with them; only standard HTTP referral data passes when you click through.
6. Cookies
We use the following cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| sb-* (Supabase) | Keeps you signed in (httpOnly, secure) | Session / 1 week |
| cookie_consent | Remembers your cookie preferences | 1 year |
| ph_* (PostHog) | Product analytics — how users navigate the Platform | Up to 1 year |
You can manage cookie preferences via the cookie banner shown on your first visit, or through your browser settings.
7. Data Retention
- Account data: retained while your account is active, deleted within 30 days of account deletion
- Reviews: retained while your account is active; may remain anonymised after deletion
- Analytics events: retained for up to 12 months, then aggregated or deleted
- Affiliate click data: retained for up to 12 months for commission reconciliation
- Wishlist saves: deleted with your account
8. Your Rights
Under UK GDPR you have the right to:
- Access your data
- Correct inaccurate data
- Delete your data
- Restrict processing
- Data portability
- Object to processing based on legitimate interests
To exercise any right, email josh@happyplaceuk.com. We will respond within 30 days. You may also complain to the Information Commissioner’s Office at ico.org.uk.
9. Data Security
Supabase auth session cookies are httpOnly and secure, preventing client-side JavaScript access. All data is transmitted over HTTPS. Access to the database is restricted to authorised application code only.
10. Children
Happy Place is not intended for anyone under 13. We do not knowingly collect data from children. Contact us if you believe a child has registered and we will delete their data promptly.
11. Changes
We will update this policy when our data practices change and notify registered users by email of significant changes.
12. Contact
info@happyplaceuk.com · happyplaceuk.com · Happy Place UK
© 2026 Happy Place UK. All rights reserved.