Privacy Policy
Last updated: 16 July 2026. Happy Days is a pilot project, and this policy will be updated as the service grows.
This is not legal advice
We've written this policy to be accurate and to genuinely reflect how the product works, but we are not lawyers and this has not been reviewed by one. Happy Days has not had a formal professional legal review of its data protection compliance. Independent legal review — particularly of our handling of health data under UK GDPR Article 9 — is a planned next step, not something we're claiming to have already done.
Who we are
Happy Days ("we", "us") is an accessible travel planning platform, currently piloting in Hunstanton, UK. If you have any questions about this policy or your data, contact us at hallatt@me.com.
What we collect, and why
Account details
If you sign up, we store your email address and an encrypted password (we never see or store your password in plain text — this is handled by our authentication provider, Supabase). We use this to let you log in and save a needs profile across visits.
Needs profile — health and accessibility information
The needs profile focuses on functional requirements — things like walking distance, step-free access, toilet urgency, sensory needs and dietary needs — rather than asking you to disclose a diagnosis. Some of this still counts as special category data under UK GDPR (data about health or disability), so we only collect it after you actively tick a separate, unticked-by-default consent checkbox on the form — submitting the form on its own is not treated as consent. We record the consent wording you agreed to, and the date and time you gave it.
We use this data for one purpose only: to show you accessibility information and stays that match what you've told us. If you're logged in, it's linked to your account so it can be reused and edited; if you're not logged in, it's stored without any identifying link to you. If you're logged in, you can withdraw consent and permanently delete this information yourself at any time from your account page — this deletes the data itself, keeping only a record of when consent was given and withdrawn.
Where your data is stored
Data is stored with our infrastructure providers, Supabase (database and authentication) and Vercel (hosting). We don't sell your data or share it with advertisers. Booking links on the site take you to third-party partner sites, which have their own privacy policies — we'd encourage you to check those separately.
Cookies
We only use strictly necessary cookies to keep you logged in (session cookies set by our authentication provider). We don't currently use tracking, advertising or analytics cookies.
How long we keep it
We keep your account and needs profile for as long as your account is active. You can ask us to delete it at any time — see your rights below.
Your rights
Under UK GDPR, you have the right to:
- • Access the personal data we hold about you
- • Correct inaccurate data
- • Ask us to delete your data ("right to erasure")
- • Restrict or object to how we use your data
- • Receive your data in a portable format
- • Withdraw consent at any time — if you're logged in, you can do this yourself from your account page, which deletes your needs profile's health and accessibility data; if you're not logged in, email us and we'll do it for you
To exercise any of these rights, email hallatt@me.com. We'll respond within one month. If you're unhappy with how we've handled your data, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.
Children's privacy
Happy Days is not directed at children, and we don't knowingly collect data from anyone under 16.
Changes to this policy
As Happy Days moves out of pilot, this policy will be updated to reflect any new data uses. We'll update the date at the top of this page when we do.