HappieMeData and privacy
What we collect, why we need it and the choices you have. Updated 25 October 2026.
Who looks after your information
HappieMe is provided by Taupe London Limited. We are the controller for our account, billing, enquiry and service-security information. You can write to us at 1 Emma Street, London, E2 9FP. Our registered details are in the service terms.
Your employer or the organisation running your workspace is the controller for its employee records. We process those records on its instructions under our data processing agreement. Ask your organisation how it uses your information and which legal bases it relies on.
Accounts and billing
We use your name, email, account identifiers and workspace membership to provide access, manage the business relationship and help you use HappieMe. Our legal basis is performing a contract with you, or our legitimate interest in administering your organisation’s account when you act on its behalf.
We use subscription details, seat counts, payment references and invoices to collect payment and manage billing. This supports our contract and legal accounting obligations. Stripe handles payment-card information; HappieMe does not store your full card number.
Signup details let us provide your Free account. Payment details are needed only for a paid subscription. Optional fields are marked as optional. We receive account details from you, workspace administrators and our authentication and payment providers.
Employee records and access
Workspace administrators and employees provide records such as contact details, employment and pay information, working patterns, holidays and private documents. Some records may contain sensitive information, including health-related absence details. Your organisation decides what to record and is responsible for having an appropriate legal basis.
Employees can access their own private records. HR, Admin and Owner have access to employee records, including payroll. Owner assigns permissions to custom roles. Direct managers approve their reports’ holiday requests, but reporting relationships alone do not grant access to private employee records.
What colleagues can see
The directory shows work information such as names, roles, teams and work contact details. The shared calendar shows approved time off. Private absence types and reasons have separate access restrictions.
Availability helps with planning. It does not measure attendance or productivity, and HappieMe does not make automated employment decisions about you.
Private documents are checked against your permissions when you open them. Preparing an employee record does not send an invitation; an administrator chooses when to invite them.
When you contact us
We use your name, email, optional company name and message to answer your enquiry. We also record the submission time and the notice that applied. Our legitimate interest is responding to requests and resolving problems; where you ask about buying HappieMe for yourself, we may also take steps at your request before a contract.
We keep enquiries for six months after resolution. We may retain relevant information longer where needed for a dispute or legal obligation. Sending a message does not subscribe you to marketing emails.
Plus interest
We use your name, work email and optional company name to follow up about the Plus integration plan at your request. Our legitimate interest is answering that specific request. We record when you register and the notice that applied.
We keep these details for up to six months after registration or your latest explicit request for follow-up, whichever is later. An email from us does not restart that period. You can ask us to stop sooner. Registration does not create an account, start a subscription or sign you up to a newsletter.
Keeping the service working
Our service providers process technical information such as IP addresses, request times, browser details and error or authentication events. We use this information for our legitimate interests in protecting accounts, preventing misuse and diagnosing faults. We retain security evidence only as long as needed for those purposes or a relevant investigation.
The marketing site saves your appearance choice in your browser. The app also stores session and preference information needed for sign-in and your chosen settings. We remember your analytics cookie choice in this browser for up to 180 days.
Analytics cookies have names beginning with hm_analytics and last no longer than your current 180-day choice. Rejecting analytics leaves the website available. You can withdraw consent through Cookie settings in the footer; we then remove these cookies and reload the page to stop the Google tag. Withdrawal stops future collection and does not itself erase information already sent. Read about how Google processes information from websites and its data-processing and international-transfer terms.
You can add two-factor authentication with an authenticator app. Keep your account details secure and review who has access to your workspace.
Who helps us provide HappieMe
Amazon Web Services hosts and delivers the website and supports service email. Supabase provides authentication and the database holding workspace records, documents, contact enquiries and Plus interest. Stripe processes subscriptions and payments. Payment providers may also process information for their own fraud-prevention and legal obligations. Google provides optional public-website analytics when you consent; it does not receive customer HR records through this integration.
We share information with authorised people and providers who need it to deliver these services, professional advisers when necessary, and authorities where legally required. We do not sell personal information.
Providers may process information outside the UK. Where required, we use an adequacy decision or appropriate contractual safeguards, such as approved standard clauses with the UK addendum. Contact us for information about the safeguards relevant to your data. Our processing agreement identifies the providers used for customer records.
When records are removed
We keep account information while needed to provide the service and close the account. We retain the billing, security or dispute records we still need to meet legal obligations or establish and defend legal claims, with access limited to those purposes.
A subscription ending does not end Free access or trigger deletion. If you end the service and close your workspace, the return and deletion terms in our processing agreement apply. We complete timely return requests before deleting the relevant records and honour authorised earlier deletion instructions.
Deleted data may remain in restricted backups until those backups expire. It is not available for ordinary use, and deletion instructions must be reapplied if a backup is restored. Records we must retain by law are kept separately for that purpose.
Your choices and rights
Depending on the circumstances, you can ask to access, correct or erase your information, restrict its use, receive a portable copy or object to processing based on legitimate interests. You can object to direct marketing at any time. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.
For employee records, start with the organisation running your workspace. We help it respond to requests. For information we control, or if you need help finding the right route, or email support@happieme.com. We may need to verify your identity and authority before sharing or changing information.
You can complain to us or to the Information Commissioner’s Office. We update this notice when our practices change and will draw material changes to your attention where required.