HappyBag Legal Centre

Privacy Policy

Last updated: 29 July 2026 · Version v1.0

These documents explain how HappyBag protects your data and how the platform should be used.

Who we are

HappyBag Ltd operates HappyBag, a platform that lets restaurants build a digital storefront, take orders and manage customers.

For legal review: Confirm the registered company number, registered office address and whether an ICO registration or Data Protection Officer must be named here.

Information we collect

Restaurant owners

  • Name
  • Email address
  • Phone number
  • Account login details

Restaurants

  • Business information (name, address, opening hours, logo)
  • Menu content, images and pricing
  • Orders and order history
  • Platform settings and message templates

Customers

  • Name
  • Phone number
  • Order history and order notes
  • Marketing consent status

Collected automatically

  • Device and browser information
  • Basic usage analytics
  • Cookies and similar technologies

Why we collect data

  • To process and fulfil customer orders
  • To generate QR storefronts and printable assets
  • To send WhatsApp order updates where enabled
  • To power AI-assisted onboarding and menu tools
  • To provide customer management and insights to restaurants
  • To keep the platform secure and prevent fraud
  • To improve HappyBag's products and features

For legal review: Confirm the lawful bases mapped to each purpose (contract, legitimate interests, consent).

Marketing consent

HappyBag only sends marketing communications where consent has been given. Customers can withdraw consent at any time.

Restaurants using HappyBag are responsible for obtaining valid customer consent before sending promotional messages, and for the content of those messages.

Data sharing

HappyBag does not sell customer data.

Data is shared only where necessary to operate the platform, for example with:

  • WhatsApp, for sending order updates and messages
  • Email providers, for account and transactional email
  • Payment providers, where paid features are enabled
  • Hosting and infrastructure providers

For legal review: Maintain a current subprocessor list with each provider's name, purpose and location.

Data retention

We keep data for as long as a restaurant's account is active and it is needed to provide the service. Order and customer records are retained so restaurants can see history and meet their own record-keeping duties.

When an account is closed, or when a restaurant deletes or anonymises a customer, the related records are removed or stripped of identifying details.

For legal review: Confirm specific retention periods, including any statutory accounting retention.

Your rights

Under UK/EU data protection law you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Restrict or object to certain processing
  • Withdraw marketing consent at any time

HappyBag provides restaurants with built-in tools to export customer data, delete a customer, anonymise a customer and manage marketing consent, so these requests can be actioned directly.

Contact