Useful data. Clear choices.

What we collect

Contact and account details; order, payment-token, delivery, and return records; support messages; product interactions; device and approximate location data; Club enrollment, tier, qualifying purchase count, last qualifying purchase date, points, offer eligibility, and a persisted randomized win-back assignment; and marketing preferences. Payment card numbers should be handled by the payment processor, not stored by this site.

Why we use it

To provide checkout, prevent fraud, place and track orders, support customers, process returns, award points, comply with law, measure product and campaign performance, determine earned offers, prevent duplicate offers, improve assortment, and—with permission—send personalized recommendations and promotions.

Your choices

Necessary order data is separate from analytics, advertising and retargeting, email, SMS, app tracking, personalization, product-interest tracking, and location. Optional purposes remain off until selected; no box is prechecked. A recognized Global Privacy Control signal defaults this site to essential-only storage. Marketing consent is separate from transactional communication, and customers can reopen Privacy Choices from the footer.

Email marketing is governed by our Email Marketing Policy. Any future text program must follow the separate SMS & Text Messaging Policy.

Sharing

Information may be shared with commerce, payment, fraud, fulfillment, shipping, support, email, analytics, advertising, and AI service providers only for stated business purposes. We disclose material changes to these categories in this notice.

Recommendations

Recommendations may use purchases, returns, product views after consent, collection affinity, and campaign engagement. The system should not infer sensitive health conditions from wellness-product interest, and automated recommendations never change a customer’s legal rights.

Payday Club membership includes promotional email permission because member rewards and offers are delivered by email. SMS, push notifications, advertising audiences, and nonessential browsing personalization remain separate optional choices. A 15% or 20% win-back assignment is stored once for auditability instead of being rerolled on every visit. Guests may opt out of marketing and leave the Club without losing rights attached to completed transactions.

Retention

We keep information only as long as needed for the stated purpose, legal obligations, disputes, fraud prevention, and financial records, then delete or de-identify it when those needs expire.

Consent records

We store the wording, purpose, source, timestamp, and version behind each consent. Withdrawal, opt-out, access, correction, and deletion requests must propagate to relevant vendors, subject to lawful retention for orders, fraud, disputes, and accounting.

Imported subscriber lists

An owner may import a first-party or properly transferred email subscriber list only when each marketable row includes an owner-attested opt-in source, timestamp, and disclosure version. The private workflow format-checks those supplied fields but does not independently authenticate their source. The application does not intentionally persist raw CSV contents. Existing unsubscribes, complaints, hard bounces, deletion markers, and other suppressions take priority over an imported opt-in. Purchased, scraped, unverifiable, or generic partner-marketing lists are not accepted.

Email marketing permission does not create a Payday Club account, establish SMS permission, authorize an advertising audience, or prove purchase history. Accepted records may later be synchronized to the disclosed commerce or email service provider after that connection is approved.

Requests

Depending on location, customers may have rights to access, correct, delete, port, restrict, or object to certain processing, and to opt out of targeted advertising or data sale/sharing. A request review when a request is denied. Contact support@hardearnedhappy.com to begin a privacy request.

Security & children

Use least-privilege access, encryption in transit, secret management, vendor review, backups, incident procedures, and audit logs. The store is not directed to children under 13 and should not knowingly collect their personal information.