Privacy Policy

Welcome to Happy Hoopoe (“we,” “our,” or “us”). We are a Madinah-born family play brand dedicated to reviving tactile, screen-free wonder and deepening family bonds through monthly hands-on curiosity crates.

Because our physical crates are enjoyed by young children in family homes, safeguarding your family's privacy and maintaining the highest data protection standards is fundamental to our core mission. This Privacy Policy explains what information we collect when you visit happyhoopoe.com, subscribe to a crate plan, interact with our member portal, or contact our workshop team.

Happy Hoopoe operates under the laws and regulations of the Kingdom of Saudi Arabia, including the Saudi Personal Data Protection Law (PDPL), and adheres to international best practices for children's privacy, such as the Children's Online Privacy Protection Act (COPPA) and General Data Protection Regulation (GDPR-K).

We collect only the minimum necessary information to fulfill your physical orders and operate your family account:

Our physical crates encourage hands-on, collaborative family play in the physical world. There are no digital tracking devices, cameras, microphones, or internet-connected electronics embedded in any of our toys or materials.

If we learn that any child has registered an account or provided personal details without verified parental consent, we will immediately delete that information from our active records. If you believe a child has provided us with personal information, please contact us immediately at privacy@happyhoopoe.com.

We process your information exclusively for legitimate purposes:

• Fulfilling & Shipping Monthly Crates: Packing and dispatching your monthly boxes from our Madinah workshop to your home.
• Order Tracking & Notifications: Sending SMS and email alerts with delivery tracking links and crate dispatch confirmations.
• Subscription Billing & Renewal Reminders: Managing monthly renewals and notifying you before scheduled charges occur.
• Customer Care & Replacements: Fulfilling our Puppy & Couch Guarantee for replacement wooden pieces or addressing box inquiries.
• Legal & Tax Compliance: Meeting Saudi commercial accounting and Zakat, Tax and Customs Authority (ZATCA) VAT invoicing standards.

We do not sell, rent, or trade your personal data. We disclose limited information only to verified third-party service partners necessary to operate our subscription service:

• Logistics & Couriers: Delivery couriers (SMSA Express, Aramex, DHL) receive your recipient name, physical shipping address, and contact phone number solely to deliver your parcel.
• Payment Gateways: Certified PCI-DSS compliant payment processors receive billing tokens to execute your authorized subscription transactions.
• Cloud & Infrastructure Providers: Secure hosting and database providers who operate under strict data processing agreements with enterprise-grade encryption.
• Legal Authorities: Only when strictly required by applicable Saudi Arabian law, court order, or governmental mandate.

We respect your digital tranquility. We use only essential cookies and local storage tokens required for website functionality:

• Authentication & Security: Maintaining your secure login session so you can manage your subscription.
• Cart & Checkout: Remembering items in your checkout flow.
• Zero Cross-Site Tracking: We do not deploy third-party behavioral trackers or canvas fingerprinting tools.

We implement comprehensive technical and organizational safeguards to protect your family's data against unauthorized access, loss, or alteration:

• All network transmissions are protected with Transport Layer Security (TLS 1.3) encryption.
• Passwords are salted and cryptographically hashed with strong one-way algorithms.
• Access to customer records is restricted to authorized workshop staff on a strict need-to-know basis.

We retain your personal information for as long as your Happy Hoopoe membership remains active, or as needed to provide you with support and replacement parts.

If you choose to close your account, we will permanently delete or anonymize your personal data within 30 days, retaining only minimal tax and financial transaction records required under Saudi commercial regulations.

Under the Saudi Personal Data Protection Law (PDPL) and international privacy standards, you have full control over your personal data:

We may occasionally update this Privacy Policy to reflect improvements in our services or regulatory updates. We will notify active subscribers by email prior to any material modifications.