100% handmade, made to order

Privacy Policy

How we process and protect your personal data.

At Happy Crowns we work to offer you the best possible experience through our products and services. In some cases, it's necessary to collect information to achieve this. We care about your privacy and believe we should be transparent about it.

In accordance with Regulation (EU) 2016/679 (hereinafter, the "GDPR") and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), as well as Law 34/2002 (LSSI-CE), we inform you about the processing of your personal data.

Data controller

The controller responsible for processing your personal data is:

Data we collect and purpose

We process the following data you provide us: full name, ID number, complete address, phone number and email address, as well as any information you send us to personalize your order (text, images or files).

The purposes of processing are:

  • Managing and processing your orders and the resulting contractual relationship.
  • Handling questions, requests or complaints sent through the contact form.
  • Complying with applicable legal, tax and accounting obligations.
  • If you consent, compiling website usage statistics through analytics cookies (see the Cookie Policy).

Legal basis for processing

  • Performance of a contract: to manage your orders and our business relationship.
  • Consent: to respond to inquiries submitted through the form and for analytics cookies.
  • Legal obligation: to comply with tax and accounting obligations.

Data retention

We will keep your data for as long as necessary to fulfill the purpose for which it was collected, and afterward for the periods legally required and those needed to formulate, exercise or defend against possible claims. For more information, contact us at info.happycrowns@gmail.com.

Recipients of your data

Your data will never be sold to third parties. It is only shared when necessary to provide the service, with the following types of recipients:

  • Shipping companies, to deliver your orders.
  • Stripe, as our payment provider, to process transactions securely.
  • Google, for the use of the contact form (Google Forms) and, if you consent, analytics (Google Analytics).
  • Web hosting provider, for the site to function.

These providers act as data processors, handling data solely to provide their services, and are required to guarantee the confidentiality and security of the information. In addition, the law may require disclosing data to public authorities; in such cases, only what is strictly necessary will be provided.

Data storage

As a general rule, data is stored within the European Union. When a provider processes data outside the EU, we ensure it offers an adequate level of protection through the safeguards provided for in the GDPR (adequacy decisions or the European Commission's standard contractual clauses).

Your rights and how to exercise them

You can exercise your rights by sending a request to info.happycrowns@gmail.com. Under the GDPR you can exercise the following rights:

  • Access: to know what personal data we process about you.
  • Rectification: to correct any inaccurate or incomplete data.
  • Erasure («right to be forgotten»): to request the deletion of your data.
  • Restriction of processing: to restrict processing in certain circumstances.
  • Portability: to receive your data in a structured, commonly used format.
  • Objection and automated decisions: to object to processing and to decisions based solely on automated processing, including profiling.

If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Accuracy of the data provided

You are solely responsible for the accuracy and correctness of the data you provide us, and you agree to keep it up to date. Happy Crowns reserves the right to terminate the contracted services if the data provided is false, incomplete, inaccurate or outdated.

Security measures

Happy Crowns has adopted the data protection security levels legally required and applies the technical and organizational measures within its reach to prevent the loss, misuse, alteration, unauthorized access to, and theft of data. However, you should be aware that security measures on the Internet are not impregnable.

Changes to this privacy policy

This privacy policy may be updated to reflect legislative or technical changes. We recommend reviewing it periodically.

Last updated: June 2026.