Privacy policy

Last updated: 30 September 2026

The Happy Fryer ("we", "us", "our") runs this online store. This Privacy Policy explains what personal information we collect, why, who we share it with, how long we keep it and the rights you have. It applies to our website, our checkout and the emails we send. Our store runs on Shopify, which processes information on our behalf.

In short: we collect only what we need to deliver your ebooks, look after you and run our ads. We never sell your personal information. Advertising and analytics cookies (including the Meta pixel) are only used if you agree in our cookie banner. You can change your mind at any time.

Who is responsible for your information

The Happy Fryer, Plaza de los Fueros 4, 31780 Bera, Navarra, Spain — email support@thehappyfryer.co.nz. We follow New Zealand's Privacy Act 2020 and its 13 information privacy principles (IPPs) for the personal information of people in New Zealand. Because our business is established in Spain, we also follow the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

Privacy Officer: the owner of The Happy Fryer, who can be reached at support@thehappyfryer.co.nz with "Privacy request" in the subject line, or by post at the address above.

What we collect

Category	Examples	Where it comes from
Identity and contact information	Name, email address, billing address, order number	You, at checkout
Order information	What you bought, when, what you paid, refunds, extras accepted after checkout	Your orders
Payment information	Handled directly by Shopify, Shopify Payments, PayPal and the card networks. We never see or store your full card number.	You, at checkout
Technical and usage information	IP address, browser and device type, pages and products viewed, add-to-cart and purchase events, the ad you clicked to reach us	Your device, through cookies and similar technologies
Approximate location	Country and city estimated from your IP address (not precise GPS location)	Your device
Communications	Emails you send us, your email marketing preferences	You

We do not ask for sensitive information such as health information. Choosing a themed recipe book is not treated as health information. We collect information directly from you, or from your device when you use our site (IPP 2).

Why we use it

To deliver your order: make your download links available and send your order emails.
To look after you: answer questions, resend files, process refunds.
To prevent fraud and keep the store secure.
To meet legal, tax and accounting obligations.
To send marketing emails, only with your consent (when you sign up or tick the box at checkout), as required by New Zealand's Unsolicited Electronic Messages Act 2007. Every marketing email identifies us and has an easy unsubscribe link, and we act on unsubscribe requests promptly.
To measure and improve our ads and website with analytics and advertising cookies and the Meta pixel and Conversions API, only with your consent given in our cookie banner.

We collect your information for these purposes only, and we use it only for the purpose we collected it for, or a directly related one, unless you agree or the law allows otherwise (IPPs 1, 3 and 10). We do not make decisions about you based only on automated processing.

Cookies, pixels and advertising

We only use cookies and similar technologies that are not strictly necessary after you give consent in our cookie banner where one is shown. You can accept, reject or change your choice at any time using the cookie settings link in the footer of our website.

Strictly necessary (Shopify): cart, checkout, security and fraud prevention. These are needed for the store to work and can't be switched off.
Analytics (Shopify Analytics), with your consent: statistics about how visitors use the site.
Advertising (Meta pixel and Meta Conversions API), with your consent: we advertise on Facebook and Instagram. If you accept advertising cookies, the Meta pixel in your browser, and our server through Meta's Conversions API, send Meta events such as page views, add-to-cart and purchases (including the order value and currency), together with identifiers such as your IP address, browser information, cookie IDs and, for purchases, a hashed (scrambled) version of your email address, name and city or postcode. Meta uses this to tell us which ads work and to show our ads to people likely to be interested. If you don't accept, these events are not sent. For the processing Meta carries out for its own purposes, Meta is responsible under its own policy; see the Meta Privacy Policy.

You can also block or delete cookies in your browser settings and manage your ad preferences in your Facebook or Instagram settings. Blocking strictly necessary cookies may stop the checkout from working.

Who we share it with

We never sell your personal information. We share it only with:

Shopify: store hosting, checkout, order processing and file delivery;
Payment providers (such as Shopify Payments, PayPal and the card networks): to take payments and issue refunds;
App and email providers that help us deliver your files digitally, send emails, and show optional offers after checkout (AfterSell);
Meta Platforms: for advertising measurement and targeting, only with your consent, as described above;
Professional advisers and authorities: accountants, tax authorities, or courts and law enforcement when the law requires it; and
A buyer or successor if our business is ever sold or reorganised.

Our service providers may only use your information to provide their services to us, and we require them by contract to protect it.

Where your information is stored

We are based in Spain, and our providers (including Shopify and Meta) store and process information in Spain, the European Union, the United States and other countries outside New Zealand. Before we send your information overseas we check that it will be protected in a comparable way to the Privacy Act 2020, for example because the provider is bound by contract or privacy laws that give similar protection, or because you have authorised the disclosure after we told you about it (IPP 12). For transfers from the EU, we rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

How long we keep it

Order and tax records: for as long as tax and accounting law requires (generally up to 6 years).
Support emails: up to 3 years after our last contact.
Marketing list: until you unsubscribe.
Cookies: for the periods set by each tool, typically up to 13 months, and only for non-essential cookies you have accepted.

We don't keep information longer than we need it (IPP 9). When we no longer need it, we delete it or anonymise it securely.

Your rights: access and correction

Under the Privacy Act 2020 you have the right to:

ask for access to the personal information we hold about you and get a copy (IPP 6);
ask us to correct it if it is wrong or incomplete, or, if we disagree, to attach a statement of correction to it (IPP 7);
withdraw your consent to cookies or marketing emails at any time;
and, under the GDPR, ask us to delete it (unless we must keep it, for example tax records), restrict or object to certain processing, or ask for a portable copy.

To use any of these rights, email support@thehappyfryer.co.nz with the subject "Privacy request". We may ask you to confirm your identity by matching the email address and order details we hold. We respond as soon as reasonably practicable and no later than 20 working days after receiving your request. Using your rights is free for ordinary requests and will never affect the price you pay or our service to you.

How to complain

If you are unhappy with how we have handled your information, please contact us first and we will try to fix it. You also have the right to complain to the Office of the Privacy Commissioner in New Zealand (www.privacy.org.nz). Because we are established in Spain, you can also complain to the Agencia Española de Protección de Datos (www.aepd.es).

Security and privacy breaches

We use appropriate safeguards, including Shopify's secure, encrypted checkout, to protect your information from loss, misuse and unauthorised access (IPP 5). No online service is completely secure, so we can't guarantee absolute security. If a privacy breach is likely to cause you serious harm, we will notify you and the Privacy Commissioner as soon as practicable, as Part 6 of the Privacy Act 2020 requires.

Children

Our store is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has given us their information, email us and we will delete it.

Changes to this policy

We may update this policy from time to time. The current version is always on this page with its "Last updated" date. If we make an important change, we will post a notice on the site or email customers where appropriate.