Privacy Policy
Last Updated: September 24, 2026
Who we are
Who we are Hapen Agency ("Hapen", "we", "us") is a digital agency registered in Kosovo.
Registered name: Hapen Agency SH.P.K.
Business number: 811894668
Email for privacy questions: contact@hapenagency.com
We are the data controller for the personal data described in this policy.
What this policy covers
This policy covers hapenagency.com and the personal data we collect when you visit the site, contact us, or become a client.
It does not cover the websites or stores we build for our clients. Those are controlled by the client, under their own privacy policy.
What we collect
When you contact us Your name, email address, phone number if you give it, your company or brand name, and whatever you write in your message.
When you buy an audit or become a client The above, plus billing details, your company details for invoicing, and the contents of our correspondence. Payment card details are handled entirely by our payment provider and never reach us.
When you visit the site IP address, browser and device type, pages visited, how long you stayed, and the site or advert you arrived from. Collected through cookies and similar technologies, see below.
When you subscribe to anything we send Your email address, and whether you open or click our emails.
We do not knowingly collect data from anyone under 16, and the site is not directed at children.
Why we use it, and our legal basis
| What for | Legal basis |
|---|---|
| Replying to your enquiry | Taking steps at your request before entering a contract |
| Delivering work you've paid for | Performance of a contract |
| Invoicing, accounting and tax records | Legal obligation |
| Understanding how the site is used | Consent (analytics cookies) |
| Advertising and measuring our adverts | Consent (advertising cookies) |
| Sending marketing emails | Consent, which you can withdraw at any time |
| Keeping the site secure and preventing abuse | Our legitimate interest |
Cookies and tracking
We use cookies to make the site work, to understand how it's used, and to measure our advertising.
Essential cookies keep the site functioning. These don't require consent.
Analytics cookies, Google Analytics, tell us which pages people visit and where they arrive from.
Advertising cookies, the Meta pixel and Google tag, let us measure whether our adverts work and show adverts to people who have visited the site.
Analytics and advertising cookies are only set if you consent through the banner when you first visit. You can change or withdraw that choice at any time through [link to your consent tool's preferences].
You can also block or delete cookies in your browser, though parts of the site may stop working properly.
Who we share data with
We don't sell your personal data, and we never will.
We share it with the following service providers, each only to the extent needed to do their job:
We may also disclose data where the law requires it, or to protect our legal rights.
Data leaving Kosovo and the EEA
Several of the providers above are based in the United States, so your data may be transferred there.
Where that happens, transfers rely on the safeguards those providers put in place, such as the EU–US Data Privacy Framework or standard contractual clauses.
How long we keep it
Your rights
You can ask us to:
Email contact@hapenagency.com and we'll respond within 30 days. There's no charge.
If you're unhappy with how we've handled it, you can complain to Kosovo's Information and Privacy Agency, or to the data protection authority in your own country if you're in the EU or the UK.
If you're in California, you have rights under the CCPA/CPRA, including to know what we collect, to delete it, and to opt out of sale or sharing. We don't sell personal information. Use the same email address above.
If you're in Australia, you can contact us the same way and, if unsatisfied, complain to the Office of the Australian Information Commissioner.
Security
We protect your data with access controls, encrypted connections, and reputable providers. No method of transmitting data over the internet is completely secure, so we can't guarantee absolute security, but we take it seriously, and we'll tell you and the relevant authority promptly if a breach affects you.
When we work on your accounts
If you're a client and give us access to your Shopify store, advertising accounts or analytics, we handle personal data belonging to your customers. In that situation you are the controller and we act on your instructions as a processor. We only use that data to do the work you've asked for, we never use it for our own purposes, and access is removed when the work ends.
Links to other sites
Our site links to client websites and other third-party sites. We're not responsible for their privacy practices, and we'd encourage you to read their policies.
Changes to this policy
We'll update this page when our practices change, and the date at the top will always show the most recent version.
Contact
Questions about this policy, or about your data:
Email: contact@hapenagency.com