Privacy policy

Last updated: 28 September 2026

The Happy Fryer ("we", "us", "our") runs this online shop. This Privacy Policy explains what personal data we collect, why, who we share it with, how long we keep it and the rights you have. It applies to our website, our checkout and the emails we send. Our shop runs on Shopify, which processes data on our behalf.

In short: we collect only what we need to deliver your ebooks, look after you and run our adverts. We never sell your data. Advertising and analytics cookies (including the Meta pixel) are only used if you agree in our cookie banner, and you can change your mind at any time.

Who is responsible for your data (the controller)

The Happy Fryer, Plaza de los Fueros 4, 31780 Bera, Navarra, Spain — email support@thehappyfryer.uk. We are established in Spain, so we follow both the UK GDPR and the Data Protection Act 2018 for our UK customers and the EU General Data Protection Regulation (GDPR). For privacy questions, email us with "Privacy request" in the subject line.

What we collect

Category	Examples	Where it comes from
Identity and contact details	Name, email address, billing address, order number	You, at checkout
Purchase details	What you bought, when, how much you paid, refunds, extras accepted after checkout	Your orders
Payment details	Handled directly by Shopify and its payment providers. We never see or store your full card number.	You, at checkout
Technical and usage data	IP address, browser and device type, pages and products viewed, add-to-basket and purchase events, the advert you clicked to reach us	Your device, through cookies and similar technologies
Approximate location	Country and town estimated from your IP address (not precise GPS location)	Your device
Communications	Emails you send us, your email marketing preferences	You

We do not ask for or collect special category data such as health information. Choosing a "high-protein" or other themed recipe book is not treated as health information.

Why we use it and our lawful basis

To deliver your order: make your download links available and send your order emails. (Lawful basis: contract.)
To look after you: answer questions, resend files, process refunds. (Contract.)
To prevent fraud and keep the shop secure. (Legitimate interests; legal obligation.)
To meet legal, tax and accounting obligations. (Legal obligation.)
To send marketing emails, only if you sign up or tick the box at checkout. Every email has an unsubscribe link. (Consent.)
To measure and improve our adverts and website with analytics and advertising cookies and the Meta pixel and Conversions API. (Consent, given in our cookie banner.)

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Cookies, pixels and advertising

Under the Privacy and Electronic Communications Regulations (PECR), we only place cookies and similar technologies that are not strictly necessary after you give consent in our cookie banner. You can accept, reject or change your choice at any time using the cookie settings link in the footer of our website.

Strictly necessary (Shopify): basket, checkout, security and fraud prevention. These don't need consent and can't be switched off.
Analytics (Shopify Analytics), with your consent: statistics about how visitors use the site.
Advertising (Meta pixel and Meta Conversions API), with your consent: we advertise on Facebook and Instagram. If you accept advertising cookies, the Meta pixel in your browser, and our server through Meta's Conversions API, send Meta events such as page views, add-to-basket and purchases (including the order value and currency), together with identifiers such as your IP address, browser information, cookie IDs and, for purchases, a hashed (scrambled) version of your email address, name and town/postcode. Meta uses this to tell us which adverts work, to show our adverts to people likely to be interested, and to show you our adverts on its platforms. If you don't accept, these events are not sent. For the processing it carries out for its own purposes, Meta is a separate controller; see the Meta Privacy Policy.

You can also block or delete cookies in your browser settings and manage your advert preferences in your Facebook or Instagram settings. Blocking strictly necessary cookies may stop the checkout from working.

Who we share it with

We never sell your personal data. We share it only with:

Shopify: shop hosting, checkout, order processing and file delivery;
Payment providers (such as Shopify Payments, PayPal and the card networks): to take payments and issue refunds;
Email and app providers that help us deliver your files, send emails and show optional offers after checkout;
Meta Platforms: for advertising measurement and targeting, only with your consent, as described above;
Professional advisers and authorities: accountants, tax authorities, or courts and law enforcement when the law requires it; and
A buyer or successor if our business is ever sold or reorganised.

International transfers

We are based in Spain, and our providers (including Shopify and Meta) store and process data in the European Union, Canada, the United States and other countries. When your data is transferred outside the UK or the EU, it is protected by an adequacy decision (for example, the UK–US data bridge or the EU–US Data Privacy Framework for certified companies) or by appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.

How long we keep it

Order and tax records: for as long as tax and accounting law requires (generally up to 6 years).
Support emails: up to 3 years after our last contact.
Marketing list: until you unsubscribe.
Cookies: for the periods set by each tool, typically up to 13 months, and only for non-essential cookies you have accepted.

Your rights

Under the UK GDPR (and the EU GDPR), you have the right to:

be informed about how we use your data (this policy);
access your data and get a copy;
rectification of inaccurate data;
erasure of your data, unless we must keep it (for example, tax records);
restrict how we use it;
data portability;
object to processing based on legitimate interests, and to direct marketing at any time;
withdraw consent at any time (for example, to cookies or marketing emails), without affecting processing already carried out.

To use any of these rights, email support@thehappyfryer.uk with the subject "Privacy request". We may ask you to confirm your identity by matching the email address and order details we hold. We reply within one month (this can be extended by two further months for complex requests, and we will tell you if so). Using your rights is free and will never affect the price you pay or our service to you.

How to complain

If you are unhappy with how we have handled your data, please contact us first and we will try to put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, helpline 0303 123 1113. Because we are established in Spain, you can also complain to the Agencia Española de Protección de Datos (www.aepd.es).

Security

We use appropriate safeguards, including Shopify's secure, encrypted checkout, to protect your data from loss, misuse and unauthorised access. No online service is completely secure, so we can't guarantee absolute security. If a personal data breach is likely to put your rights at high risk, we will tell you and the relevant authority as the law requires.

Children

Our shop is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect personal data from children under 13. If you believe a child has given us their data, email us and we will delete it.

Changes to this policy

We may update this policy from time to time. The current version is always on this page with its "Last updated" date. If we make an important change, we will post a notice on the site or email customers where appropriate.