Privacy policy

Effective date: August 24, 2026

This Privacy Policy (“Policy”) explains how Habbo Hotel Shop ("we", "us", "our") collects, uses, and discloses your personal information when you visit or use shop.habbo.com, make a purchase, or otherwise contact us about the Site (collectively, the "Services"). Sulake Oy, Dagmarinkatu 6, 00100 Helsinki, Finland, is the data controller for this information. 

This Policy applies to shop.habbo.com, where we sell physical merchandise, some of which comes with an optional NFT, which we refer to as a "Collectible", that you can claim as a digital bonus, as described in Section 4.

 1. What we may collect

  • Contact and order details: name, address, email, phone, billing/shipping address, payment confirmation.
  • Account details: username, password, security details.
  • Support communications: anything you send us.
  • Usage data: device, browser, IP address, and similar technical data, collected via cookies and similar technologies (see Section 3).
  • Blockchain/wallet data: if a product you bought comes with a redemption code, you can claim a digital version of that item as a Collectible. To do this, you connect a MetaMask wallet to the Habbo Collectibles website and link it to a Habbo account, once connected, that Habbo account can use the Collectible. The same wallet can be connected to different Habbo accounts. When you connect your wallet, we receive and store the public wallet address, tied to the Habbo username you link it to. If you never connect a wallet, we don't collect any wallet or blockchain data about you.
  • Third-party data: from our platform provider (Shopify), payment processors, and our Collactible/wallet service provider.

2. How we use your data

We use your data to fulfil orders, manage your account, and provide customer support, based on performance of our contract with you, the same basis applies if you redeem a Collactible code. We rely on our legitimate interest in keeping the site secure for fraud prevention, and in improving our services for aggregated, non-profiling analytics. For marketing emails, SMS, and personalized or targeted advertising, we rely on our legitimate interest in marketing similar products to our existing customers, but you can opt out at any time by clicking the unsubscribe link in any marketing message, or by contacting us.  Where required, we also process data to comply with legal obligations or to enforce our terms.

We do not use profiling-based targeted advertising toward anyone we know or reasonably believe is a minor.

3. Cookies

Specific details regarding the cookies we employ can be accessed via this cookie settings link. You can change your choice anytime via cookie settings. 

4. Collectibles; please read this section carefully

Some products come with an optional Collectible, a digital twin of the item for your Habbo avatar. Claiming it is a separate, voluntary step after purchase, using a redemption code we email you. To claim it, you connect your own MetaMask wallet to the Habbo Collectibles website and link it to your Habbo account; when you connect, we collect and store your public wallet address, tied to your Habbo username. If you don't connect a wallet, we collect no wallet data.

Because the Collectible is recorded on a public blockchain, we cannot delete or correct that on-chain record once created, even on request, this limits the erasure and rectification rights in Section 7 for on-chain data specifically. We can still delete the off-chain link between your wallet and your Habbo account.

5. Who we share information with

Vendors who provide services on our behalf: our e-commerce platform (Shopify), payment processors, our print-on-demand production and fulfillment partner (Printful), which produces and ships all products sold in our store, and analytics/marketing partners (only where you've consented to marketing/tracking). If you connect your wallet to the Habbo Collectibles website to claim a Collectible, your wallet address is shared so the digital item can be minted to it. You can then connect that wallet to Habbo and use the Collectible in Habbo. We also disclose information where required by law, to enforce our terms, or in a business transfer (e.g., merger). We do not sell your personal information to third parties for their own independent marketing use.

6. Privacy of children 

This service is not intended for young children browsing or buying unsupervised. If we become aware we've collected personal data directly from a young child without appropriate parental involvement, we will delete it. Please contact us at privacy@sulake.com.

7. Your rights

You have the following rights in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline your request as permitted by law.

  • Right of access to your data: you may have a right to request access to personal information we hold about you, including how we use and share it.
  • Right to erasure: you may have a right to request that we delete personal information we hold about you. As noted in Section 4, this has technical limits for on-chain blockchain data.
  • Right to rectification: you may have a right to request that we correct inaccurate personal information we hold about you, the same on-chain limits apply.
  • Right to data portability: you may have a right to receive a copy of your personal information and have us transfer it to a third party, in certain circumstances.
  • Right to Opt Out of Sale, Sharing, or Targeted Advertising: you may have a right to direct us not to "sell" or "share" your personal information, or to opt out of "targeted advertising", as those terms are defined under applicable law. 
  • Right to restriction of processing: you may have the right to ask us to stop or restrict our processing of your personal information.
  • Right to withdraw your consent: where we rely on your consent, you may withdraw it at any time.
  • Appeal: you may have a right to appeal if we decline to act on your request, by replying directly to our denial.
  • Managing Communication Preferences: you can opt out of promotional emails anytime via the unsubscribe link. We may still send non-promotional emails, such as order or account updates.

You can exercise these rights by contacting at privacy@sulake.com. We won't discriminate against you for doing so. We may need to verify your identity (e.g., via your email or account details) before responding, and you may designate an authorized agent to act on your behalf, subject to proof of authorization and, where needed, our verifying your identity directly. We aim to respond within the timeframe required by applicable law.

You also have the right to lodge a complaint with your national data protection authority.

8. How long we store your data

We keep your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law, after which we delete or anonymize it. The one exception: if you claim a Collectible, your wallet address becomes part of an on-chain record that persists indefinitely due to the nature of blockchain technology, regardless of our own retention practices (see Section 4). No online system is fully secure, and we recommend not sharing sensitive information with us over insecure channels.

9. How we protect your personal data

We have implemented appropriate technical and organizational security measures designed to protect your personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. We update and test our security standards on an ongoing basis. In addition, we take reasonable steps to assure that third parties to whom we transfer your personal data provide sufficient protection of personal data. 

10. International transfers

We and our vendors may process your data outside the country you live in. Where this happens, we rely on recognized safeguards such as the European Commission's Standard Contractual Clauses, and we make sure each transfer has a valid legal basis and meets the data protection and security standards required by law.

11. Changes to this Policy

We may update this Policy from time to time. We'll post the revised version here and update the effective date above.

12. Contact us

Sulake Oy, Dagmarinkatu 6, 00100 Helsinki, Finland Email: contact@habbo.com.