Privacy Policy

Our full privacy policy is being finalised and will be published here shortly. The section below on cookies is complete and accurate today.

For anything not covered yet, contact support@happydaysphoto.co.uk and we will answer directly.

What we ask about your children, and why

This section, like the one on cookies below, describes what actually happens today rather than standing in for something still to be written.

When you subscribe we ask for each child’s first name, surname, year group, class and date of birth. We ask for them for one reason: so that the right photographs reach the right family.

• Name, year group and class are how your child is found on photo day and how their photographs are matched back to your subscription.
• Date of birth tells your child apart from another child of the same name at the same school, and confirms we have the right child before anything is printed and sent to you.

We do not hold a list of the pupils at your child’s school. A child’s details exist here only because you entered them yourself when you subscribed.

Your children’s details are used to run your subscription and to produce your photographs. They are not used for advertising, they are not sold, and they are not shared with anyone beyond the companies listed under “Other companies involved in your subscription” below. Happy Days Creative staff working on your order can see them.

If you want your details removed, including your children’s, email support@happydaysphoto.co.uk and we will do it.

Cookies and similar technologies

This section is not a placeholder — it describes what this site actually stores on your device today.

We only set analytics cookies if you accept them. Nothing in the “analytics” group below is written to your device unless you choose Accept analytics cookies on the banner, and you can change your mind at any time using the button at the end of this section.

Essential — always on

These are needed for the site to work or to keep your sign-up secure, so they do not require consent. They stay on your device and are never sent to a third party.

• hd_cookie_consent (browser storage, 6 months) — remembers whether you accepted or rejected analytics cookies, and when you chose. Without it we would have to ask you on every page.
• hd_subscribe_state (browser storage, until you clear it) — remembers whether sign-ups were open or closed last time you visited, so the page shows the right thing immediately instead of flickering. It holds one word, nothing about you, and is never sent anywhere: the site asks our own server for the current state on every visit regardless.
• hds_admin (cookie, 7 days) — only ever set for Happy Days staff signing in to the admin area. It is never set for parents.

Analytics — only if you accept

• ph_* (cookies and browser storage, up to 1 year) — set by PostHog, which we use to see how many parents reach each step of the sign-up and where they give up. Our PostHog project is hosted in the European Union.

We have deliberately turned off PostHog’s automatic click tracking and its session recording, so it cannot capture what you type or replay your visit. It receives which pages you viewed, and four events — that you started the sign-up, finished your details, finished adding children, and pressed the payment button — plus the number of children, never their names.

Page addresses are shortened before they are sent, so the part of the web address that carries your subscription reference never reaches PostHog.

Fault reporting — always on

If something on this site breaks while you are using it, a short technical report of the fault is sent to Sentry so we can find it and fix it. This one is not part of the analytics choice above: a site that cannot tell us when it is broken is one we cannot keep working or keep safe, so it runs for everyone.

A report is only sent when something actually goes wrong. On a page that behaves normally, nothing is sent to Sentry at all, and nothing is stored on your device either way.

The report describes what broke and where in our own code, along with the kind of browser you are using and which page you were on. We have turned off the part that would otherwise record what you click and type, for the same reason we turned it off in PostHog: the sign-up form holds your children’s names and dates of birth. Page addresses are shortened first, so your subscription reference does not reach Sentry either. It never receives your name, your address, your children’s details or your bank details. Our Sentry account is hosted in the European Union.

Other companies involved in your subscription

These do not set anything on your device from this site, but they do process your information once you subscribe:

• GoCardless — takes your Direct Debit details on its own hosted page. When you are sent there, GoCardless sets its own cookies under its own privacy policy.
• Vercel — hosts this website.
• Neon — the database holding your subscription, hosted in London.
• Mailjet — sends the emails confirming your subscription.

Changing your mind

You can change your cookie choices whenever you like. Rejecting analytics after previously accepting also deletes the analytics cookies already on your device.

Change your cookie choices