HappyNoodle Privacy Policy
Last updated: 26 September 2026
HappyNoodle is a product of Pygar AI Technologies Ltd, registered in England and Wales, company number 17430073, registered office at 33 Acorn Mill, Mellor Street, Oldham, OL4 3DH, United Kingdom.
This Privacy Policy explains how personal information is handled when you visit happynoodle.work, use a HappyNoodle account, access a client portal, use the business directory, submit a review or otherwise interact with HappyNoodle.
For privacy enquiries and data-rights requests, contact privacy@pygar.ai.
1. Pygar's different data protection roles
HappyNoodle handles personal data in two main ways.
When Pygar is the controller
Pygar normally acts as controller for information relating to:
website visitors;
HappyNoodle account registration;
authentication and account security;
subscription and billing administration;
our own communications with users;
support enquiries;
directory operation;
directory enquiries before and while they are transmitted through the Service;
review publication and moderation;
fraud and abuse prevention; and
legal and regulatory compliance.
Being controller means we decide why and how that information is processed.
When Pygar is a processor
Business Customers use HappyNoodle to process information about their own prospects, Clients, employees, contractors and other contacts.
For Customer Data processed on the Customer's instructions, the Customer is normally the controller and Pygar acts as processor.
Examples include:
CRM contact records;
sales opportunities and lead information;
Client communications;
proposals;
project records;
invoice records;
booking information;
files;
marketing preferences;
client-portal information;
work activity associated with Agency team members; and
Customer Data processed by HappyNoodle AI features.
If your personal information is held in a HappyNoodle workspace belonging to another business, you should normally contact that business first about your privacy rights.
2. Information we collect
Depending on how you use HappyNoodle, we may collect the following information.
Account information
This may include:
your name;
email address;
telephone number;
business name;
business address;
job or account role;
profile information;
workspace membership;
account preferences; and
authentication information.
Subscription and billing information
We may process:
subscription plan;
billing status;
transaction references;
billing address;
VAT information;
seat numbers; and
subscription history.
Where an independent payment provider processes card payments, we do not need to receive your full card credentials.
Business and directory information
Businesses may choose to publish information such as:
business name;
location;
contact details;
services;
rates or pricing information;
availability;
lead times;
website information;
business descriptions; and
other listing information.
Information intentionally included in a public directory listing is publicly visible.
Directory enquiries
If you contact a listed business, we may process information including:
your name;
email address;
telephone number;
the business contacted;
your enquiry; and
technical information used to detect fraud or spam.
The enquiry is shared with the business you chose to contact.
That business becomes independently responsible for how it subsequently uses your information.
Reviews
We may process:
your rating;
review text;
display name;
the business reviewed;
information showing the relationship to the business or transaction where required for verification; and
technical or account information used to prevent fraudulent reviews.
Published review information can be visible publicly.
Usage and security information
We may process:
IP address;
browser and device information;
login history;
dates and times of activity;
security events;
workspace membership;
feature usage; and
other technical logs reasonably required to operate and protect the Service.
Support and communications
If you contact us, we may process your contact details and the content of the communication, together with records needed to investigate and respond.
Connected services
If you connect HappyNoodle to a service such as an accounting platform, calendar, email provider or payment service, we process the information reasonably necessary to establish and operate that connection.
AI inputs and outputs
When an AI feature is used, we may process the information supplied to that feature together with the generated output and technical records required to operate the feature.
Where that information forms part of Customer Data, we process it as processor for the Business Customer.
3. Where information comes from
We may receive personal information:
directly from you;
from the Business Customer that created your account or added you to its workspace;
from other Authorised Users;
through directory enquiries;
through review submissions;
through connected third-party services at the user's direction;
from your device or browser when you use HappyNoodle; and
from payment, security and technical service providers.
We do not purchase consumer marketing databases for HappyNoodle.
4. Why we use personal information
We use personal information only where there is a lawful basis for doing so.
Providing HappyNoodle
We use account and service information to create accounts, authenticate users, provide requested functionality, administer subscriptions and provide support.
The lawful basis is normally performance of a contract or steps requested before entering into a contract.
Security, fraud prevention and abuse prevention
We use technical and account information to protect HappyNoodle, our users and third parties.
Our lawful basis is normally our legitimate interests in maintaining a secure and trustworthy service and, where relevant, compliance with legal obligations.
Billing, accounting and legal records
We process transaction and contractual information to administer subscriptions, maintain records and comply with tax, accounting and other legal requirements.
Our lawful bases are contract and legal obligation.
Directory operation
We use directory listing information to provide the directory requested by listed businesses.
We process directory enquiries so that users can contact the business they choose.
Our lawful bases may include contract and our legitimate interests in operating the directory and preventing abuse.
Reviews
We process review information to publish, verify and moderate genuine customer feedback, prevent fake or misleading reviews and comply with consumer-protection obligations.
Our lawful bases include our legitimate interests and legal obligations.
Service administration and improvement
We may use usage, reliability and technical information to understand how HappyNoodle operates, diagnose faults, protect service reliability and improve functionality.
Our lawful basis is our legitimate interests in operating and improving the Service.
We do not use Customer Data to train a general-purpose Pygar AI model.
Marketing HappyNoodle
We may send information about HappyNoodle products or services where applicable marketing and data-protection law permits us to do so.
Depending on the circumstances, this may be based on consent or our legitimate interests and a lawful PECR route such as an applicable soft opt-in.
Every electronic marketing message will provide an appropriate way to unsubscribe.
You can object to direct marketing at any time.
5. Customer-controlled processing
A Business Customer decides how it uses HappyNoodle to process its Client and workforce information.
This may include:
contact management;
lead scoring;
marketing communications;
proposal activity;
project management;
invoicing;
client portals;
employee or contractor workload information;
capacity information;
revenue attribution;
automations; and
AI-assisted analysis.
For those activities, the Business Customer is responsible for identifying an appropriate lawful basis and providing required privacy information.
Pygar processes the information on that Customer's instructions under the HappyNoodle Data Processing Terms.
6. Agency accounts and workplace information
Agency and team plans may allow an Account Owner or authorised manager to see information about individual team members including:
projects;
project progress;
workload;
capacity;
milestones;
activity; and
revenue associated with their work.
The employer or other Business Customer determines how that information is used and is responsible for explaining that use to workers.
Pygar does not determine whether an employee should be promoted, disciplined, dismissed, rewarded or otherwise treated differently because of information displayed by HappyNoodle.
If you are using HappyNoodle through your employer or another organisation, its own employee or workforce privacy notice may also apply.
7. AI features
HappyNoodle uses contracted AI services for certain functions.
Depending on the feature, these may process relevant Customer Data or account information to generate:
draft text;
summaries;
brief refinements;
priorities;
suggestions;
forecasts;
account briefings; or
other requested outputs.
We seek to transmit only information reasonably required for the requested function.
We do not use Customer Data to train a general-purpose Pygar AI model.
We contract and configure AI providers so that Customer Data submitted through the relevant business or API services is not authorised for training their general-purpose models, subject to any limited security, abuse-prevention or legal-compliance processing contained in the applicable provider agreement.
8. Automated decision-making and profiling
HappyNoodle contains tools such as lead scoring, suggested priorities and AI-generated recommendations.
These features may assist Business Customers in organising information or making decisions.
Pygar does not use HappyNoodle account information as controller to make solely automated decisions about individuals that produce legal or similarly significant effects.
Where a Business Customer chooses to use lead scoring, automation or similar tools in relation to its own contacts or workers, that Customer determines the purpose of the processing and is responsible for assessing its own data-protection obligations.
9. Who receives personal information
Depending on the feature used, information may be shared with:
cloud hosting, database and authentication providers;
email and communications providers;
security and fraud-prevention providers;
payment processors;
AI service providers;
technical support and software providers;
third-party services that a Customer chooses to connect;
professional advisers such as accountants, insurers or lawyers;
regulators, courts, law-enforcement bodies or public authorities where disclosure is lawfully required; and
a buyer, investor or successor where the business or relevant assets are reorganised or transferred, subject to appropriate confidentiality and data-protection requirements.
For Customer Personal Data, subprocessors are governed by the HappyNoodle Data Processing Terms.
A current list of material subprocessors is available through the Service or on request.
We do not sell personal information.
10. Third-party services
When you choose to connect a third-party service, information may be transferred to and from that provider.
Once an independent provider receives information for its own purposes, its own privacy policy may apply.
Examples may include accounting software, calendar services and payment processors.
11. International transfers
Some service providers may process personal information outside the United Kingdom.
Where UK data protection law requires a transfer safeguard, we use a lawful mechanism such as:
UK adequacy regulations;
the UK International Data Transfer Agreement;
the UK Addendum to approved Standard Contractual Clauses; or
another valid safeguard permitted by law.
You may contact us for more information about safeguards applying to your personal information.
12. How long we keep information
We do not keep personal information indefinitely simply because it may be useful later.
Retention depends on the information and why it is held.
Account information
We normally retain active account information while the account remains open.
Information required for legal, contractual, tax or accounting records may be retained for up to six years after the relevant relationship or transaction.
Customer Data
Following workspace closure, Customer Data is ordinarily available for export for up to 30 days and is then deleted in accordance with our retention procedures unless law requires otherwise.
Security records
Security and access logs may normally be retained for up to 12 months unless an incident, investigation or legal requirement requires longer retention.
Directory enquiries
We retain information needed to operate the enquiry service and investigate abuse for only as long as reasonably required for those purposes.
The business receiving an enquiry determines its own subsequent retention period.
Reviews
Published reviews may remain available while relevant to the directory unless removed, disputed or no longer reasonably required.
Records required to demonstrate authenticity or moderation decisions may be retained for an appropriate period after publication or removal.
Support records
Support and complaint records are retained for as long as reasonably necessary to resolve the issue and establish a record of the interaction.
13. Cookies and browser storage
HappyNoodle uses cookies and similar storage technologies such as local storage and session storage.
We do not currently use advertising or cross-site behavioural tracking cookies.
Authentication
Supabase authentication storage using keys beginning sb- keeps users securely signed in and maintains authenticated sessions.
Active workspace
Local storage such as bos.active-location remembers which business workspace the user was working in.
Proposal access
Session storage such as hn-proposal-grant can remember that a Client successfully verified access to a proposal. It is removed after the relevant session or expiry period.
Security checks
Cloudflare Turnstile or equivalent security technology may use short-lived storage required to distinguish genuine visitors from automated abuse.
Payments
A payment provider may use storage necessary for payment security, fraud prevention and checkout.
Website chat
Where a Customer enables HappyNoodle website chat, local storage may be used to maintain the visitor's conversation between page visits.
Interface preferences
Storage such as sidebar_state may remember interface preferences.
Administrative settings
Certain administrative preferences may be stored locally on an administrator's own device.
Some storage technologies are necessary to provide a service expressly requested by the user or fall within another applicable exemption from the consent requirement.
Where we introduce a storage technology that legally requires consent, such as non-exempt advertising or tracking technology, we will ask for the required choice before using it.
You can remove or restrict browser storage through your browser. Blocking storage required for authentication, security or payments may stop those features working.
14. Electronic communications and marketing
Service communications such as security, subscription, billing and account notices are not treated as optional marketing where they are required to provide or administer the Service.
Marketing messages are handled separately.
You may unsubscribe from HappyNoodle marketing at any time using the link in a marketing message or by contacting us.
Unsubscribing from marketing does not prevent us from sending necessary account or service communications.
15. Your data-protection rights
Depending on the circumstances and lawful basis involved, you may have rights to:
access personal information;
correct inaccurate information;
request deletion;
restrict processing;
receive certain information in a portable form;
object to processing; and
withdraw consent where processing is based on consent.
Consent can be withdrawn without affecting processing that was lawful before withdrawal.
Your right to object
You have the right to object at any time to the use of your personal information for direct marketing.
Where we rely on legitimate interests for another purpose, you may also have a right to object based on your particular circumstances.
To exercise a right, contact privacy@pygar.ai.
We may need to confirm your identity before releasing or changing personal information.
We normally respond within the period required by UK data protection law.
16. Rights relating to Customer Data
If a business using HappyNoodle controls the information concerned, we may refer your request to that business.
We will provide reasonable assistance to Business Customers in responding to valid rights requests in accordance with our Data Processing Terms.
17. Security
We use technical and organisational measures intended to protect personal information.
These include measures concerning:
access control;
authentication;
separation of customer workspaces;
protection of third-party credentials;
security logging; and
control of provider access.
No online service can guarantee absolute security.
Users should protect their credentials, sign out of shared devices and promptly report suspected unauthorised access.
18. Children
HappyNoodle business accounts and directory enquiry functions are intended for people aged 18 or over.
We do not knowingly create HappyNoodle business accounts for children.
If we learn that information has been collected from a child in circumstances where it should not have been collected, we will take appropriate steps.
19. Business transfers
If Pygar or HappyNoodle is reorganised, acquired, merged or sold, relevant personal information may be transferred as part of that transaction.
Any recipient will remain subject to applicable data-protection law.
We will provide additional notice where required.
20. Legal disclosures
We may retain or disclose information where reasonably necessary to:
comply with law;
respond to a valid court order or regulatory request;
establish, exercise or defend legal claims;
protect users or the Service; or
investigate suspected fraud, abuse or illegal activity.
21. Changes to this Privacy Policy
We may update this policy when the Service, suppliers, processing activities or applicable law changes.
The current version and update date will be published here.
If a change materially affects how existing personal information is used, we will provide additional notice where appropriate.
A revised Privacy Policy will not by itself be treated as permission to use existing personal information for an incompatible new purpose.
22. Complaints
Please contact us first if you have a concern about our handling of personal information so that we can investigate it.
You also have the right to complain to the Information Commissioner's Office.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: ico.org.uk
23. Contact Pygar
For privacy enquiries or rights requests:
Pygar AI Technologies Ltd
33 Acorn Mill
Mellor Street
Oldham
OL4 3DH
United Kingdom
Privacy: privacy@pygar.ai
General: admin@pygar.ai