Who we are and how to contact us
The entity responsible for your personal information (the “data controller” for GDPR purposes) is YOUR WAY TO HAPPY (ABN 71 145 717 086). For any privacy question, request or complaint, contact us at [email protected].
What information we collect
Information you give us:
- Account information — when you register: your name (or display name), email address, and password. Optionally a profile photo, bio, and social links.
- Business/listing information — if you claim or add a business listing: business name, description, address or service area, contact details (phone, email, website), categories, photos, videos, opening hours, and any other content you add to your profile or blog.
- Reviews and ratings, including wellbeing responses — the star ratings, wellbeing survey answers (for example “Happy Rating”, “Enjoyment”, “Would Recommend”) and written comments you submit about a business or service. See “Your wellbeing responses” below — this can be health-adjacent information and is treated with extra care.
- Saved listings and activity — the listings you bookmark/save and, where relevant, listings you’ve marked as tried or followed.
- Messages — the content of enquiries you send through our contact forms or a business’s listing contact form.
- Payment information — when you buy a package or promotion, your payment is processed by Stripe. Card details are entered directly with Stripe and we do not receive or store your full card number. We receive a confirmation, the last 4 digits/card type, billing name, email, and the order/transaction record.
Information we collect automatically:
- Usage and device data — pages viewed, searches and filters used, listings viewed, approximate location derived from your IP address, browser and device type, referring pages, and timestamps.
- Cookies and similar technologies — see “Cookies” below.
Information from third parties:
- Payment and fraud data from Stripe (confirmation and status of a transaction).
- Analytics data from our analytics provider (see “Cookies”).
- Pre-populated listing data — some business listings were compiled from publicly available sources before the business claimed them. If a listing concerns your business and you want it corrected or removed, use the Report option on the listing or contact us (see “Unclaimed and pre-populated listings”).
Your wellbeing responses (sensitive information — read this)
Our reviews are designed as a short wellbeing survey — how a place or service made you feel, whether you’d recommend it, and how happy it made you. This kind of information can be “sensitive information” (including health information) under the Australian Privacy Act, so we handle it with extra care and only collect it with your consent.
When you submit a review, you consent to us:
- Publishing your rating, wellbeing answers and comment on the relevant listing, attributed to your display name, so other members can use it to make choices.
- Using your responses to operate and improve the Site — for example to calculate a business’s average ratings, power features like “highly rated”, and understand what helps people feel better.
- Analysing your responses in de-identified, aggregated form — combined with other members’ responses and stripped of information that identifies you — to produce insights, trends and reports about wellbeing across categories, regions and over time.
- Sharing those de-identified, aggregated insights — including publicly, with businesses, and with research or commercial partners. Aggregated, de-identified information is not personal information and does not identify you.
We will not sell or disclose your identifiable individual wellbeing responses for marketing or to third parties without your consent. You can ask us to remove a review you posted at any time (see “Your rights”).
Why we use your information (and our lawful bases)
We use your information to: create and manage your account; publish and manage listings, reviews and profiles; process package/promotion purchases and send receipts and renewal reminders; provide search, maps and recommendations; respond to your messages; send service and, if you opt in, marketing communications; keep the Site secure and prevent fraud and spam; analyse and improve the Site; and meet our legal obligations.
For visitors to whom the GDPR applies, our lawful bases are: contract (to run your account and fulfil purchases); consent (for reviews/wellbeing responses, marketing emails, and non-essential cookies — you can withdraw at any time); legitimate interests (to secure, analyse and improve the Site, and to prevent fraud/spam, balanced against your rights); and legal obligation (e.g. tax/record-keeping).
When we share your information
We share personal information only as needed to run the Site:
- Publicly / other users — your public profile, listings, and reviews (with your display name) are visible to anyone who visits the Site.
- Businesses you interact with — a message you send via a listing’s contact form goes to that business.
- Service providers (“APP entities” / processors) who help us operate, under contract and only for our purposes: Stripe (payments), SiteGround (hosting), our email/SMTP provider (transactional and, if applicable, marketing email), and our analytics provider. Some of these are located overseas (see below).
- Aggregated, de-identified data — as described in “Your wellbeing responses”.
- Legal and safety — if required by law, to enforce our Terms, or to protect the rights, safety or property of YOUR WAY TO HAPPY, our users, or the public.
- Business transfer — if we merge with or are acquired by another entity, information may transfer as part of that deal (you’ll be notified of any material change).
We do not sell your personal information.
Overseas disclosure / international transfers
We are based in Australia. Some of our service providers (for example Stripe and analytics/email providers) process data on servers outside Australia, including in the United States and the EU. Where we disclose personal information overseas we take reasonable steps to ensure it’s handled consistently with the APPs, and for GDPR-covered data we rely on appropriate safeguards (such as Standard Contractual Clauses) offered by those providers.
Cookies and analytics
We use cookies and similar technologies to keep you logged in, remember your preferences, keep the Site secure, and understand how the Site is used. We use Google Analytics (GA4), it sets analytics cookies. You can block or delete cookies in your browser settings, or opt out of Google Analytics with Google’s browser add-on. If we use a privacy-light analytics tool it does not use cookies or track you across sites. Essential cookies (login, cart, security) are always on because the Site can’t work without them. You can also control cookies in your browser settings.
How long we keep your information
We keep personal information only as long as needed for the purposes above: your account data while your account is active and for a reasonable period after (unless you ask us to delete it); purchase and tax records for as long as the law requires (generally several years); reviews for as long as the listing exists or until you remove them; and de-identified aggregated data indefinitely (it no longer identifies you).
Security
We take reasonable steps to protect your information — HTTPS, access controls, a hardened WordPress install, and reputable processors like Stripe for payments. No method is 100% secure, but we work to protect your data and will notify you and the relevant regulator of an eligible data breach as required by the Notifiable Data Breaches scheme.
Your rights and choices
You can:
- Access and correct your information — most of it is editable in your account; or ask us.
- Delete your account and personal information — ask us at [email protected]. (Some records, e.g. tax/purchase records, we may need to keep by law; reviews can be removed on request.)
- Opt out of marketing — use the unsubscribe link, or ask us. Service emails (receipts, security, renewals) will still be sent.
- Withdraw consent — including for wellbeing-data analysis, cookies, or marketing, without affecting anything we did before you withdrew.
- Manage cookies — in your browser settings.
If the GDPR applies to you, you also have rights to portability, to object to or restrict processing, and not to be subject to solely automated decisions with legal effect; and you may lodge a complaint with your local data protection authority.
To exercise any right, contact [email protected]. We’ll respond within a reasonable time (and within the timeframes the law requires).
Children
We don’t knowingly collect information from children under 16. If you believe a child has given us information, contact us and we’ll delete it.
Complaints
If you think we’ve mishandled your personal information, contact us first at [email protected] and we’ll try to resolve it. If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. EU/UK visitors may complain to their local supervisory authority.
Changes to this policy
We may update this policy from time to time. We’ll post the new version here with an updated “Last updated” date, and for material changes we’ll take reasonable steps to notify you.
This Site is operated by YOUR WAY TO HAPPY (ABN 71 145 717 086) (“we“, “us“, “our“). We respect your privacy and are committed to protecting your personal information. This policy explains what we collect, why, how we use and share it, and the choices and rights you have. It is written to comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and to respect the rights of visitors in the EU/UK under the GDPR where it applies.
By using yourwaytohappy.com (the “Site“) you agree to this policy. If you don’t agree, please don’t use the Site.
Last updated: 10 September 2026