Privacy Policy

Information we collect

We collect identifiers and contact information such as name, email address, phone number, account identifier, and shipping address; order and transaction information such as products, totals, payment-provider references, fulfillment status, refunds, and affiliate attribution; account and profile information; communications sent through support or chat; and technical information such as device, browser, request, security, and service-log data.

Payment providers collect card or bank credentials on their hosted pages. HappyTides receives payment status, limited payment references, amounts, and information needed to reconcile an order, but does not receive or store complete card or bank-account credentials.

How we collect information

We collect information directly from you, automatically through the site, from authenticated account sessions, from referral links or manually entered partner codes, and from service providers that process payments, authentication, communications, security, analytics, and fulfillment.

How we use information

We use information to create and secure accounts; authenticate sign-in codes; calculate prices, discounts, shipping, and tax; process, verify, fulfill, refund, and reconcile orders; maintain inventory; provide support; administer the Partner program; prevent fraud and abuse; comply with law; maintain records; improve reliability and accessibility; and measure site performance.

Service providers and disclosures

We disclose information as needed to service providers acting for us, including Vercel for hosting, security, analytics, and performance monitoring; Supabase for authentication and operational data; Sanity for storefront content and order records; Shopify and Link Money for hosted payment processing; Web3Forms for contact-form delivery; Google Gemini for the research chat feature; Resend for account email; Cloudflare Turnstile for abuse prevention; and shipping carriers and professional advisers as needed.

The research chat sends the conversation content needed to generate a response to Google Gemini. Do not enter sensitive personal, medical, payment, or confidential research information into chat or contact fields. We may also disclose information when required by law, to protect rights and security, or in connection with a business transaction subject to appropriate safeguards.

Cookies and browser storage

We use essential cookies for authenticated sessions and security. A signed HttpOnly affiliate cookie may remember referral attribution for up to 30 days. Browser localStorage is used to retain cart contents, remember the first-visit 21+ research gate, and support limited interface preferences. Clearing browser data may remove those choices.

Vercel Web Analytics and Speed Insights may collect privacy-focused usage and performance measurements. Cloudflare Turnstile processes browser and network signals to distinguish legitimate requests from abuse. We do not use the site for cross-context behavioral advertising as currently configured.

Retention

We keep information only as long as reasonably necessary for the purposes described here, including account operation, order fulfillment, tax and accounting, fraud prevention, dispute handling, product traceability, legal compliance, and backup integrity. Retention periods vary by record type. Account and support information may be deleted or de-identified when no longer needed, while transaction records may be retained when law or legitimate operational needs require it.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including hosted payment pages, encrypted transport, access controls, signed callbacks, restricted database functions, rate limits, anti-bot checks, and monitoring. No system can guarantee absolute security. Contact us promptly if you believe your account or information has been compromised.

Your privacy choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, or information about disclosure of your personal information, and to appeal a denied request. You may also withdraw optional communications. We do not discriminate for exercising applicable privacy rights.

Submit a request to team@happytides.co. We will verify your identity before acting and may retain information that law permits or requires us to keep. You may use an authorized agent where applicable, subject to verification of authority.

Children and age restriction

The site and products are intended only for people age 21 or older. We do not knowingly collect personal information from children. Contact us if you believe a child provided information so we can investigate and take appropriate action.

United States processing

HappyTides serves United States orders. Information may be processed and stored in the United States by us and our providers. If you browse from another location, your information may be transferred to the United States, where privacy laws may differ.

Policy changes

We may update this policy prospectively. The effective date identifies the current version. Material changes will be communicated through the site, account, or email when appropriate.

Contact

Privacy questions and rights requests may be sent to team@happytides.co.