Interested in partnering with Happiness Lab? Join us for our next webinar to learn more about our partner programme Learn more ›
Happiness Lab

Privacy Policy

Happiness Lab is a trading name of Stonepoint & Partners, which is a Limited Company, registered in England with registered number 7159084.  Our registered offices are 3 Sandpool Farm, Oaksey Road, Cirencester GL7 6EA (collectively, “Happiness Lab” / “we” / “our” / “us”) are committed to protecting and respecting your privacy. 

This policy sets out the basis, under applicable data protection law (including the General Data Protection Regulation (EU 2016/679), on which we will process any personal data we collect from you, or that you or your employer provides to us through your use of the Happiness Lab online software platform and the accompanying software App (together the “Platform”).  


In the normal course of our business we collect and process data in respect of 

  • users who are typically officers, employees, contractors or consultants who have been granted access to our Platform by their employer (where their employer is an existing client) and who are invited to participate in tracking their happiness at work and complete surveys (“Users”);
  • administrative users of the Platform who are acting on behalf of their relevant employer (where their employer is an existing client) (“Administrators”); 
  • and trial users or potential new users of the Platform, including those who we have identified as possible future clients and to whom we are marketing or promoting the Platform and our services (“Marketing Contacts”). 

When we refer to “personal data” in this policy, we mean any information relating to you from or in relation to which you may be identified (directly or indirectly).  This might include, for instance, your contact details, your biographical details, online identifiers, and factors specific to your physical, mental, economic, cultural or social identity.  Your personal data may also include any comments or opinions made by you or about you. 

Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting  or using the Platform you are accepting and consenting to the activities and data usage as described in this policy. 


In the case of Users and Administrators, Happiness Lab and/or one of its authorised partners has entered into an agreement with your employer to grant you access to the Platform, and your employer is the data controller of your personal data. We will process your personal data on behalf of your employer and in accordance with its lawful instructions. The information you provide to us and/or upload to the Platform (whether or not it constitutes personal data) will also be governed by the agreement with your employer. 

In the case of Marketing Contacts, we are the data controller in respect of your personal data. 

We are also the data controller in respect of contact information for each client contact which we hold for account and contract management purposes, including for contract queries and billing purposes. 

References in this policy to “your employer” shall refer to the entity who has entered into the Agreement with us, whether or not as a matter of law you are an employee, consultant or contractor of that entity, and such references are not intended to characterise or prejudice your status vis-à-vis that entity. 


For Users and Administrators: we will collect and process the following data about you as follows. 

You may give us information about you: 

  • when using the Platform’s functions, including by rating your happiness or completing surveys on or via the Platform. The extent of the information collected in this way is set by your employer. This information may include your name, age, company email address, company telephone number, job title, level of seniority, department, work start date, salary and primary office location, as well as any views you provide to us about you or your performance in your role, or information regarding your employer, your colleagues or other third parties during the course of using the Platform; 
  • if you contact or correspond with us (for example, using any support function or making a suggestion through links made available by us) we may keep a record of that correspondence (either directly or through our service providers). 

Your employer may give us information about you: 

  • when creating a user profile for you in order to enable you to access the Platform under the agreement with your employer (whether on a trial or full basis) or to enable us to send engagement surveys and similar communications to you. This information may include your name, age, company email address, company telephone number, job title, level of seniority, department, work start date, salary and primary office location; 
  • otherwise in the course of your employer’s use of the Platform. 

Each time you rate your happiness, complete a survey or otherwise use the Platform we may automatically collect the following information: 

  • when you use the Platform, we will keep a record of the details of that usage, including the date, time, location, frequency and duration of the usage; 
  • if you are an Administrator (using the Platform as a representative of your employer), we may obtain further information about you from your employer, for example to verify your eligibility to access and use the Platform;
  • any comments, opinions and/or feedback you provide to us regarding the Platform, for example during any trial period that you may participate in or thereafter;
  • technical information about your computer or mobile device for system administration and analysis, including your IP address, URL clickstreams, unique device identifiers, operating system, and network and browser type;
  • other information about your use of the Platform, including the pages you have viewed, the duration spent on the Platform and data files you have uploaded to the Platform. This information may be linked to your user profile (where relevant).

For Marketing Contacts, we will collect and process personal data which you provide us when you complete an enquiry via a website or register for a trial or otherwise contact us to request information about our products and services.  We will typically obtain contact information such as your name, employer, work email address and work telephone number.  We may also receive further personal data about you which is publicly available, such as your seniority, years of experience and employment history and similar work-related background, from third party service providers who provide contact enrichment and lead generation services to us.  We shall also store and process data relating to your communications with us and your responses to our marketing emails and attendance at our events. 


Please note that we are permitted to collect, use, disclose and/or otherwise process any information other than personal data, including data sets you upload to the Platform or otherwise provide to us, to the fullest extent permitted by the agreement with your employer. 

Where we have collected, received or generated personal data from or about you, we may use this for the purposes, and on the legal bases, as set out below. 

For Users and Administrators. Information you give to us. 

  • We will use this information to: 
    • if you are an Administrator, process your application to become a registered user of the Platform and verify your eligibility to use the Platform;
    • carry out our obligations arising from the agreement with your employer. This includes providing your employer with reports and analysis summarising information provided during your use of the Platform, including your happiness ratings and associated comments, participation in any surveys, aggregated with information from other employees and personnel, and (where relevant) comparing this data with past or future employee responses and/or benchmarks.  All survey responses are entirely optional: individual questions (or entire surveys) may be skipped and there is no requirement for any surveys to be completed;
    • provide you with information, products and services you request from us. We will not contact you for promotional or marketing purposes, such as to inform you of new products or services that we offer, unless you specifically consent to this at the time you provide your details to us or you expressly request (or provide explicit consent for) us to do so at a later date;
    • contact you for your feedback on our services and to help us evaluate and improve our services, for example by acting on any information you have provided to us;
    • notify you about changes to the Platform and any other services of ours that you use, including informing you about new versions of the Platform and about new features, functionality and service offerings;
    • or deal with any enquiries, correspondence, concerns or complaints you have raised, or that have been raised by or concerning third parties (such as your employer) involving you and any issues caused by your use of the Platform.
  • Information we collect about you. We will use this information: 
    • to administer and improve the Platform and other services, including ensuring that content is presented in the most effective manner for you and for your computer;
    • to report to your employer relating to the use of the Platform, as may be required under the agreement with your employer;
    • for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
    • to allow you to participate in interactive features of the Platform, when you choose to do so;
    • as part of our efforts to keep the Platform safe and secure;
    • or to compile reports (which do not personally identify you) of usage of the Platform.
  • Information we receive from other sources. We may combine information from other sources with the information you give to us or we collect about you and use this information as specified above. 

In relation to the above uses, we shall process your personal data on the legal basis that it is necessary for the purposes of our legitimate interests or of your employer’s legitimate interests, including: to enable us to perform our contractual obligations under our agreement, to improve or optimise our services, to maintain the security of our computer systems, to understand how the Platform is use and to improve the user experience of the Platform, to protect and defend our legal rights, for troubleshooting, and for data analysis, testing and research purposes.  Please also note:

  • We will not undertake any surveys or analysis via the Platform by specific reference to any special categories of personal data (including racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, sex life or sexual orientation), unless this has been expressly requested or configured by your employer. Where this is the case, it is your employer’s responsibility to ensure they have obtained your explicit consent to such processing.  However, you might, in the course of providing comments or feedback in a survey, provide personal data within one of the above categories where this has not been requested.  By providing this data to us, you will be deemed to have consented to our processing such data as part of the survey results and disclosing such data to your employer.
  • We will not reveal your identity to your employer other than in exceptional circumstances, as explained further below in the section entitled “Disclosing Your Information”.
  • Data collected from you and other employees or personnel may be used by us in an aggregated and anonymised form for statistical and benchmarking purposes including enabling comparisons to other organisations within the same industry.

For Marketing Contacts, we will collect and use data to contact you of about our news, updates, events, developments, products and services from time to time and for the purposes of entering into discussions with you in connection with your purchase of licences from us to use or have access to the Platform.  This data is processed by us on the basis that it is necessary for the purposes of our legitimate interests, namely undertaking targeted marketing and business development activities in connection with our business.


We may share your personal data with other companies in our group, where necessary or desirable to do so in the course of the provision of services to you or your employer.

We may also share your personal data with selected third parties in accordance with this policy, including:

  • service providers, for example of IT services, business partners, suppliers and/or sub-contractors, for the performance of any contract that we enter into with your employer;
  • government or other law enforcement agencies, in connection with the investigation of unlawful activities or for other legal reasons (this may include your location information).

We may also disclose your personal data to other third parties in the following circumstances:

  • if we sell or buy any business assets or receive investment into our business, we may disclose your personal data to the prospective or actual buyer, seller or investee of such business or assets;
  • if Stonepoint & Partners Limited trading as Happiness Lab or substantially all of its assets are acquired by a third party, in which case personal data held by us, including your data and data about our customers, suppliers and correspondents will be one of the transferred assets;
  • we may disclose your personal data to our legal advisers if they need to have access to this information in order to advise us on our legal rights and obligations;
  • and if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms of Use or other contracts between us and you or your employer;
  • or to protect the rights, property or safety of us, our customers or others.

If you are a User please note that:

  • feedback and comments provided by you during the process of rating your happiness or participating in surveys are collated and conveyed to your employer in an aggregated or otherwise anonymised form, including via the dashboard and reports provided in the Platform.  Comments shared on the Happiness Wall are visible to those people with appropriate permissions (in the same way as you see their comments) but remain anonymous.  As such, your anonymity as a User is protected by default.  Comments that you choose to keep private (by selecting that option when you write them) will not be shared or available for anyone to see.  Anything you write in My Reflections is also not made available to anyone else and therefore remains entirely private.  Please also note that in providing the reporting elements of the Platform we merely report the feedback and comments and do not undertake any investigation or assessment into their veracity or legality;
  • from time to time we may receive a request from your employer to disclose your identity or we may consider it appropriate to disclosure your identity in the absence of such a request.  We will consider this in accordance with our internal policy on revealing anonymity.  Your identity will in general only be disclosed to your employer where it is necessary to do so for reasons of substantial public interest.  This is only likely to occur in exceptional circumstances.  For example, we may consider (based on your or others’ comments) that you or another person identified is experiencing or at risk of physical, mental or emotional harm (including self-harm) and requires support, and that there is a need to protect the well-being of you or another person, and furthermore that we cannot reasonably obtain your consent (for instance if you are away from your workplace and therefore not contactable for a period of time) or where seeking your consent would prejudice the purpose of the disclosure.  By way of further example, we may consider (based on your or others’ comments) that disclosure of your identity to your employer is necessary to prevent or detect an unlawful act (such as fraud or other criminal act), and that we cannot request your consent since this would prejudice the purpose of the disclosure.

Except as explained above, we will not disclose your personal data to any third parties for any other purpose unless we have a legal right or obligation to do so.


Whilst participation in rating your happiness each day will not normally require the use of the username and password allocated to you when you register, you will need it to log-in at other times and access particular features within the Platform (for example, to view the Happiness Wall or to utilise the reporting features).  You are responsible for keeping these access credentials confidential. You must not share these details with anyone, or store them in a way that may allow a third party to access them.

We maintain appropriate technical and organisational measures to ensure that an appropriate level of security in respect of all personal data we process. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Platform and you acknowledge that any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features which are appropriate to the type of personal data you have provided to try to prevent unauthorised access or inadvertent disclosure, which may include two factor authentication and end-to-end encryption.


Where consent is required for our use of your personal data, by ticking the appropriate consent box or otherwise communicating your consent to us (whether by phone, email or other means), you consent to our use of that personal data as set out in this policy. If you disclose someone else's personal data to us, you confirm that you have their consent to disclose this to us and for us to use and disclose it in accordance with this policy.


We will not store your personal data for longer than is reasonably necessary to use it in accordance with this policy or with our legal rights and obligations. For the avoidance of doubt, aggregated and anonymised data and any information other than personal data can be stored indefinitely.

In particular:

  • For Users: we will retain your personal data for a period of 5 years or until six months after our relationship with your employer has ended (whichever is sooner). After this period, your personal data will be anonymised or deleted.
  • For Marketing Contacts: we will retain your personal data for a period for so long as necessary to continue to provide you with updates or other marketing emails or other communications in circumstances in which you have consented (where necessary) or else not unsubscribed to receiving such communications and in which we have a continued legitimate interest in undertaking that marketing.


You have the following rights in regards to your personal information: 

  • Access. You have the right to access information about the personal data we hold about you. We reserve the right to charge a reasonable fee in response to unreasonable or repetitive requests, or requests for further copies of the same information.
  • Right to object to processing.  You have the right to object to processing of your personal data where that processing is being undertaken by us on the basis of our (or a third party’s) legitimate interest.  In such a case we are required to cease processing your data unless we can demonstrate compelling grounds which override your objection.
  • Rectification. You have the right to request that we rectify any inaccurate personal data that we hold about you.
  • Erasure. You have the right to request that we erase any personal data that we hold about you.  This right does not extend to information which is not personal data.
  • Request to restriction of processing. This enables you to ask us to restrict the processing of your personal data in certain circumstances, for example if you want us to establish its accuracy or the reason for processing it.
  • Portability. You have the right to obtain copies of your personal data to enable you to reuse your personal data across different services and with different companies. You may also request that your personal data is transmitted directly to another organisation where this is technically feasible using our data processing systems.
  • Change of preferences. You can change your data processing preferences at any time by emailing us at or clicking the relevant link in any communication you receive.

Whilst an account is “active” you can access personal data held about you including all data that you’ve entered into the Platform from the “edit account” page.

In the case of “inactive” accounts i.e. when the relationship with your employer has ended, we may charge an administration fee to provide access to the data.  We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

Please note that if you exercise any of the above rights to require us to restrict or cease processing or to delete personal data, and this type of processing is required in order to facilitate your use of the Platform, you will no longer be able to use the Platform following the date on which we action your request.  Please allow at least 5 working days for your request to be actioned.

Save as set out above, your rights detailed above can be exercised free of charge in accordance with applicable data protection laws. Please contact your employer directly if you would like to exercise any of these rights.

If for any reason you are not happy with the way that we have handled your personal data, you also have the right to make a complaint to the relevant supervisory authority in your country.  In the UK, the relevant authority is the Information Commissioner’s Office.


Our website utilises cookies to distinguish you from other users of our website.  This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

Cookies are small files saved to the user's computer’s hard drive that track, save and store information about the user's interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within this website.

Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors.


Any changes we may make to our privacy policy will be posted on this page and where appropriate may be notified to you by e-mail or advised to you on next log in to the Platform. Continued use of the Platform will signify that you agree to any such changes.


If you have any questions about this Privacy Policy, please contact us at