Privacy Policy

HappyDivi operates the website happydivi.com and the HappyDivi Gallery WordPress plugin. For GDPR purposes, HappyDivi is the data controller for personal data collected through this website. Contact: support@happydivi.com.

We collect the following categories of personal data:

• Purchase data: Name, email address, billing address, and payment information collected during checkout. Payment data is processed and stored by Paddle - we never store your card details.
• Contact form data: Name, email address, and message content submitted via our contact form.
• License verification: When the plugin validates your license key, your domain and plugin version are transmitted to our API. No personal data beyond the domain is transmitted.
• Usage analytics: We use privacy-friendly, cookieless analytics that do not track individual users and do not require a consent banner.

• To process your purchase and deliver the product (contract performance).
• To send transactional emails: purchase confirmation, license key, renewal reminders (contract performance).
• To respond to support and contact form submissions (legitimate interest).
• To improve our products and website based on aggregated, anonymised analytics (legitimate interest).
• To comply with legal obligations such as tax record-keeping (legal obligation).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

You may not:

• Redistribute, sell, or sublicense the plugin source code or compiled files to any third party.
• Remove or alter copyright notices, license headers, or attribution in source files.
• Use HappyDivi products to build a competing plugin or service without prior written consent.
• Share your license key publicly or with individuals outside your organisation.

• Purchase records: retained for 7 years for tax and legal compliance.
• Contact form submissions: deleted after 2 years or upon request.
• License records: retained for the duration of your subscription plus 2 years.
• Analytics: aggregated and anonymised - no individual retention applies.

If you are in the EU/EEA or UK, you have the following rights:

• Right of access - request a copy of data we hold about you.
• Right to rectification - request correction of inaccurate data.
• Right to erasure - request deletion of your personal data where there is no overriding legal basis for retention.
• Right to portability - receive a copy of your data in a machine-readable format.
• Right to object - object to processing based on legitimate interest.

To exercise any of these rights, contact us at happydivi.com/contact. We will respond within 30 days.

This website uses minimal, necessary cookies only - for example, WordPress session cookies for logged-in users. We are using advertising or social media tracking with cookieless anonymizely. Our analytics are cookieless.

We apply industry-standard technical and organisational security measures including HTTPS/TLS encryption in transit, least-privilege database access, security headers (HSTS, CSP, COOP), and rate-limiting on all form endpoints.

We may update this policy periodically. Material changes will be communicated to active customers via email. The "Last updated" date at the top of this page reflects the most recent version.

Privacy questions or data requests? Contact us here or email support@happydivi.com.