Last updated: 06/11/2025

Learner data is at the heart of everything we do at Learner Happiness. Protecting this data is our absolute priority. We have implemented comprehensive technical and organisational measures to ensure your survey data is stored, processed, and analysed safely in full compliance with UK GDPR and international data protection standards.

Technical Security

We maintain the highest security standards throughout our data handling process:

• Local data processing - All survey analysis is conducted on secure, encrypted local systems in the UK, never on external cloud platforms

• Industry-standard encryption - All data is protected with AES-256 encryption both in transit and at rest

• Secure survey platform - We use QuestionPro, a GDPR-compliant survey platform with ISO 27001:2022 certification and SOC 2 audited data centers, hosted on EU servers

• Device security - All processing devices use full-disk encryption (FileVault) with multi-factor authentication

• Regular security reviews - Ongoing assessment of security measures and immediate implementation of updates

• Secure backup systems - Encrypted backups with tested recovery procedures ensure data integrity

• Access controls - Strict role-based access controls ensure only authorized personnel can access data

Third-Party Processors

QuestionPro Survey Platform:

• ISO 27001:2022 certified

• GDPR compliant with EU data hosting

• SOC 2 audited data centers

• Acts solely as a data processor under our instructions

• Does not use survey data for any other purpose

How We Help Schools Comply with GDPR

Comprehensive legal documentation - Our service agreements include detailed GDPR provisions and clearly define joint data controller relationships with full legal compliance.

Learner privacy protection - Survey results are anonymised and only reported for groups of 10 or more learners to prevent individual identification.

Transparent consent process - Clear privacy notices explain data use, retention periods, and learner rights before survey participation.

Data minimization - We collect only the data necessary for analysis: anonymous survey responses, year group, and optional gender information.

Local data control - All processing occurs within the UK/EU with no unauthorised international transfers.

Secure data retention - Survey data is retained for 7 years for longitudinal research, after which it is securely deleted. We provide secure deletion procedures and institutional deletion rights on request.

Academic research safeguards - Research collaboration with London School of Economics uses only anonymised data with separate ethical approval and data protection agreements, unless stated otherwise in individual data sharing agreements with your institution.

Opt-out options - Schools can opt out of LSE data sharing by specifying this in their service agreement.

Your Data Rights

Learners and parents have comprehensive rights under UK GDPR:

• Right to information about how data is processed

• Right to access personal data (though surveys are anonymous)

• Right to object to processing

• Right to request data deletion

• Right to complain to the Information Commissioner's Office

Contact us about data rights: hello@learnerhappiness.co.uk

Data Breach Response

In the unlikely event of a data breach:

• We will notify the ICO within 72 hours of becoming aware

• We will notify affected institutions without undue delay

• We will take immediate containment and remediation steps

• We will conduct a full investigation and implement corrective measures

Regulatory Compliance

• ICO Registration: 00010694360

• UK GDPR compliant - Full compliance with UK Data Protection Act 2018

• Professional standards - Adherence to educational sector safeguarding requirements

• Regular compliance reviews - Annual policy updates and procedure verification

• ISO 27001:2022 alignment through our survey platform provider

Data Processing Transparency

What we collect:

• Anonymous survey responses about educational experience and wellbeing

• Year group information for demographic analysis

• Optional gender identity (learners may skip this question)

• School/college name for institutional reporting

What we don't collect:

• Learner names or contact details

• IP addresses or device identifiers

• Any information that could identify individual learners

How we use data:

• Generate anonymised institutional insight reports

• Benchmark against sector trends

• Conduct longitudinal analysis to track improvements

• Share anonymised data with London School of Economics for educational research (schools can opt out)

Data retention and deletion:

• Survey data retained for 7 years for longitudinal research

• After 7 years, data is securely and permanently deleted

• Schools can request earlier deletion at any time (30-day response time)

• All deletion includes backups and archived copies

Data flow:

1. Students complete anonymous survey via QuestionPro (EU hosted)

2. Learner Happiness downloads and analyses data on secure UK systems

3. Individual school reports generated and delivered

4. Anonymised, aggregated data used for benchmarking

5. Anonymised, aggregated data shared with LSE for research (unless opted out)

6. After 7 years, all data securely deleted

Questions About Security?

Our commitment to data protection means you can trust us with your most important asset - your learners' voices. For specific questions about our security measures or data protection practices:

Email: hello@learnerhappiness.co.uk

Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

Contact Information

Email: hello@learnerhappiness.co.uk

ICO Registration: 00010694360