Joyous Privacy Notice

Joyous Privacy Notice

Current as of 15 Aug 2024


Joyous is employee feedback software and associated services, provided by Joyous Limited and its subsidiaries in different countries (“us”, “we”).  We provide organizations (our “Clients”) with feedback from their employees (“you”).  We enable conversations about that feedback, and perform analysis on it.

Privacy is important to us. We care deeply about privacy and do our best to protect your privacy.  This public privacy policy will explain how Joyous uses the personal data we collect.

Topics:

  • How does Joyous work?
  • What data do we collect?
  • How do we collect your data?
  • How will we use your data?
  • How do we store your data?
  • What are your data protection rights?
  • Use of the Joyous website
  • Sharing information with third parties
  • Safe storage of personal information
  • Changes to our privacy policy
  • How to contact us

How does Joyous work?

Joyous sends “conversation starters” to employees so that they may provide feedback on a particular topic.  This feedback is visible to a selected audience (e.g. leaders or subject matter experts) who may respond to you in a conversation.  Joyous performs analysis on the feedback provided and makes recommendations.

What data do we collect?

  • Our Clients provide us with their employees’ names, contact information and demographic data (”People data”)
  • We also store the feedback you provide when you participate in Joyous conversations. (”Feedback”)

How do we collect your data?

  • People data is provided to us by Clients via secure file transfer, or via API integration to one of their IT systems.
  • We collect Feedback directly from you when you use the Joyous software.

How will we use your data?

We built Joyous because we aspire to make life better for people at work. We collect your data so that we can:

  • Send you messages (e.g. email or text messages) to start conversations on particular topics.
  • Enable open conversations about those topics.
  • Perform analysis to identify consistent themes, so that we can make recommendations.
  • We do not sell personal information to anyone.

How do we store your data?

  • Joyous securely stores your data in AWS data centers. All data is encrypted “in-transit” and “at-rest”.
  • Joyous does not persist or archive data unnecessarily.
  • Deleted feedback is permanently deleted.
  • If an employee is removed from an organization (e.g. via a people data integration) their personal data will be archived and their feedback retained. This enables a person to rejoin the organization or to join in a different capacity (e.g. changing status from employee to contractor). It also enables analytics that include relevant historical data.
  • Joyous retains employee data until the relationship with the employer organization ends, or until specific data removal requests are made.
  • If an employee requests that their data be deleted it will be deleted, including feedback.

What are your data protection rights?

The European Union’s General Data Protection Regulation (GDPR), as well as the California Consumer Privacy Act (CCPA), and several other US states and countries’ privacy laws provide certain rights for data subjects.

Joyous would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data.

The right to rectification – You have the right to request that Joyous correct any information you believe is inaccurate, or complete any information that you believe is incomplete.

The right to erasure – You have the right to request that Joyous erase your personal data.

The right to restrict processing – You have the right to request that Joyous restrict the processing of your personal data.

The right to object to processing – You have the right to object to Joyous processing of your personal data.

The right to data portability – You have the right to request that Joyous transfer the data that we have collected to another organization, or directly to you.

Right to withdraw consent – You have the right to withdraw your consent at any time where we are processing your personal information based on your prior consent.

The right to non-discrimination – You have the right not to receive discriminatory treatment because you’ve exercised any of your rights.

Use of the Joyous Website

As is true of most other websites, Joyous’ website collects certain information automatically and stores it in log files. The information may include internet protocol (IP) addresses, the region or general location where your computer or device is accessing the internet, browser type, operating system and other usage information about the use of Joyous’ website, including a history of the pages you view. We use this information to help us design our site to better suit our users’ needs. We may also use your IP address to help diagnose problems with our server and to administer our website, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences.

Joyous has a legitimate interest in understanding how members, customers and potential customers use its website. This assists Joyous with providing more relevant products and services, with communicating value to our sponsors and corporate members, and with providing appropriate staffing to meet member and customer needs.

Sharing information with third parties

The personal information Joyous collects from you is stored in one or more databases hosted by third parties. These third parties do not use or have access to your personal information for any purpose other than cloud storage and retrieval and delivering the Joyous service.

Safe storage of personal information

The Joyous application is hosted by AWS and our data is stored in data centers located in proximity to the Client, including the USA (if a Client is in the USA), Canada (if a Client is in Canada), Australia (if a Client is in New Zealand or Australia), or Frankfurt (if a Client is in the UK/EU). This means the personal information we hold is not generally transferred to, or accessed from, countries or regions outside the Client’s location. We store and process data only in countries that have strong privacy regulations in place.

A list of our third-party sub processors are as follows:

Subprocessor name Purpose Location
Amazon Web Services Cloud infrastructure USA, Australia, Canada, Germany
MongoDB Atlas Cloud database USA, Australia, Canada, Germany
Twilio SMS messaging services USA
Mandrill Email messaging services USA
Open AI Generative AI USA

We do not otherwise reveal your personal data to non-Joyous persons or businesses for their independent use unless:

  • You request or authorize it.
  • The information is provided to our agents, vendors or service providers who perform functions on our behalf.
  • The information is provided to comply with the law (for example, compelled by law enforcement to comply with a search warrant, subpoena, or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others.

The Joyous website connects with third party services such as LinkedIn and others. If you choose to share information from the Joyous website through these services, you should review the privacy policy of that service. If you are a member of a third party service, the aforementioned connections may allow that service to connect your visit to our site to your personal data.

Changes to our privacy notice

Joyous keeps its privacy notice under regular review and places any updates on this web page. The date at the top of this Privacy Notice indicates when it was last revised.

How to contact us

Joyous has appointed Steve Allan as an internal Data Protection Officer for you to contact if you have any questions about Joyous’ privacy policy, Joyous’ data policies, practices or the data we hold on you. If you would like to exercise your data protection rights, please direct your query to Joyous’ Data Protection Officer via our email hello@joyoushq.com.

In order to verify your identity when making the request, please include the following information:

• Name

• Email Address

• Nature of your request (i.e. access, correction, deletion, etc.)

We may send you an email to the specified email address asking you to verify your request and ownership of the email address.

You may authorize an agent to make a data access request on your behalf. Agent requests shall include the information listed above, as well as a letter of authorization signed by you. Please note that when making a request through an agent, you will still need to verify your identity according to the process described above.

We have appointed Joyous B.V. as Joyous’ EU representative under Article 27 of the GDPR. You may contact our EU representative at hello@joyoushq.com

Current as of 15 Aug 2024


Joyous is employee feedback software and associated services, provided by Joyous Limited and its subsidiaries in different countries (“us”, “we”).  We provide organizations (our “Clients”) with feedback from their employees (“you”).  We enable conversations about that feedback, and perform analysis on it.

Privacy is important to us. We care deeply about privacy and do our best to protect your privacy.  This public privacy policy will explain how Joyous uses the personal data we collect.

Topics:

  • How does Joyous work?
  • What data do we collect?
  • How do we collect your data?
  • How will we use your data?
  • How do we store your data?
  • What are your data protection rights?
  • Use of the Joyous website
  • Sharing information with third parties
  • Safe storage of personal information
  • Changes to our privacy policy
  • How to contact us

How does Joyous work?

Joyous sends “conversation starters” to employees so that they may provide feedback on a particular topic.  This feedback is visible to a selected audience (e.g. leaders or subject matter experts) who may respond to you in a conversation.  Joyous performs analysis on the feedback provided and makes recommendations.

What data do we collect?

  • Our Clients provide us with their employees’ names, contact information and demographic data (”People data”)
  • We also store the feedback you provide when you participate in Joyous conversations. (”Feedback”)

How do we collect your data?

  • People data is provided to us by Clients via secure file transfer, or via API integration to one of their IT systems.
  • We collect Feedback directly from you when you use the Joyous software.

How will we use your data?

We built Joyous because we aspire to make life better for people at work. We collect your data so that we can:

  • Send you messages (e.g. email or text messages) to start conversations on particular topics.
  • Enable open conversations about those topics.
  • Perform analysis to identify consistent themes, so that we can make recommendations.
  • We do not sell personal information to anyone.

How do we store your data?

  • Joyous securely stores your data in AWS data centers. All data is encrypted “in-transit” and “at-rest”.
  • Joyous does not persist or archive data unnecessarily.
  • Deleted feedback is permanently deleted.
  • If an employee is removed from an organization (e.g. via a people data integration) their personal data will be archived and their feedback retained. This enables a person to rejoin the organization or to join in a different capacity (e.g. changing status from employee to contractor). It also enables analytics that include relevant historical data.
  • Joyous retains employee data until the relationship with the employer organization ends, or until specific data removal requests are made.
  • If an employee requests that their data be deleted it will be deleted, including feedback.

What are your data protection rights?

The European Union’s General Data Protection Regulation (GDPR), as well as the California Consumer Privacy Act (CCPA), and several other US states and countries’ privacy laws provide certain rights for data subjects.

Joyous would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data.

The right to rectification – You have the right to request that Joyous correct any information you believe is inaccurate, or complete any information that you believe is incomplete.

The right to erasure – You have the right to request that Joyous erase your personal data.

The right to restrict processing – You have the right to request that Joyous restrict the processing of your personal data.

The right to object to processing – You have the right to object to Joyous processing of your personal data.

The right to data portability – You have the right to request that Joyous transfer the data that we have collected to another organization, or directly to you.

Right to withdraw consent – You have the right to withdraw your consent at any time where we are processing your personal information based on your prior consent.

The right to non-discrimination – You have the right not to receive discriminatory treatment because you’ve exercised any of your rights.

Use of the Joyous Website

As is true of most other websites, Joyous’ website collects certain information automatically and stores it in log files. The information may include internet protocol (IP) addresses, the region or general location where your computer or device is accessing the internet, browser type, operating system and other usage information about the use of Joyous’ website, including a history of the pages you view. We use this information to help us design our site to better suit our users’ needs. We may also use your IP address to help diagnose problems with our server and to administer our website, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences.

Joyous has a legitimate interest in understanding how members, customers and potential customers use its website. This assists Joyous with providing more relevant products and services, with communicating value to our sponsors and corporate members, and with providing appropriate staffing to meet member and customer needs.

Sharing information with third parties

The personal information Joyous collects from you is stored in one or more databases hosted by third parties. These third parties do not use or have access to your personal information for any purpose other than cloud storage and retrieval and delivering the Joyous service.

Safe storage of personal information

The Joyous application is hosted by AWS and our data is stored in data centers located in proximity to the Client, including the USA (if a Client is in the USA), Canada (if a Client is in Canada), Australia (if a Client is in New Zealand or Australia), or Frankfurt (if a Client is in the UK/EU). This means the personal information we hold is not generally transferred to, or accessed from, countries or regions outside the Client’s location. We store and process data only in countries that have strong privacy regulations in place.

A list of our third-party sub processors are as follows:

Subprocessor name Purpose Location
Amazon Web Services Cloud infrastructure USA, Australia, Canada, Germany
MongoDB Atlas Cloud database USA, Australia, Canada, Germany
Twilio SMS messaging services USA
Mandrill Email messaging services USA
Open AI Generative AI USA

We do not otherwise reveal your personal data to non-Joyous persons or businesses for their independent use unless:

  • You request or authorize it.
  • The information is provided to our agents, vendors or service providers who perform functions on our behalf.
  • The information is provided to comply with the law (for example, compelled by law enforcement to comply with a search warrant, subpoena, or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others.

The Joyous website connects with third party services such as LinkedIn and others. If you choose to share information from the Joyous website through these services, you should review the privacy policy of that service. If you are a member of a third party service, the aforementioned connections may allow that service to connect your visit to our site to your personal data.

Changes to our privacy notice

Joyous keeps its privacy notice under regular review and places any updates on this web page. The date at the top of this Privacy Notice indicates when it was last revised.

How to contact us

Joyous has appointed Steve Allan as an internal Data Protection Officer for you to contact if you have any questions about Joyous’ privacy policy, Joyous’ data policies, practices or the data we hold on you. If you would like to exercise your data protection rights, please direct your query to Joyous’ Data Protection Officer via our email hello@joyoushq.com.

In order to verify your identity when making the request, please include the following information:

• Name

• Email Address

• Nature of your request (i.e. access, correction, deletion, etc.)

We may send you an email to the specified email address asking you to verify your request and ownership of the email address.

You may authorize an agent to make a data access request on your behalf. Agent requests shall include the information listed above, as well as a letter of authorization signed by you. Please note that when making a request through an agent, you will still need to verify your identity according to the process described above.

We have appointed Joyous B.V. as Joyous’ EU representative under Article 27 of the GDPR. You may contact our EU representative at hello@joyoushq.com