Is Quizlet GDPR compliant?
Yes. We take our obligations to user privacy and data protection seriously. We have a dedicated Privacy team and have worked diligently to ensure that we're compliant with the requirements of the General Data Protection Regulation (GDPR).
Where in the world is Quizlet's data stored?
Quizlet is provided through services located in the United States. Because the US has different data protection standards from the European Union, we make use of transfer mechanisms approved by the European Commission to ensure adequate levels of data protection when we transfer data from the European Economic Area to the US. These transfer mechanisms include our participation in the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework, as well as the use of model contracts and the standard contractual clauses.
Does Quizlet have a privacy team?
We do! We've always taken data privacy seriously and we have consistently devoted resources to ensuring user privacy and security. Our team includes a Data Protection Officer who has been certified in both privacy program management and European data protection and privacy standards. The team can be reached at firstname.lastname@example.org.
How does Quizlet secure my data?
We take great care to ensure the security of our services and your data. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. Two examples:
- Our website and mobile apps are protected by HTTPS encryption.
- When you enter your credit card information on our order forms, that information is encrypted and protected by our third-party payment providers.
We also maintain a robust security program and a bug bounty program. If you have any questions about security on our website or mobile apps, you can contact us at email@example.com.
What is a lawful basis? What is Quizlet's?
The GDPR requires that any processing of personal data have a lawful basis, which is a technical term for the legal right of the data controller to process personal data. The GDPR specifics several lawful bases, and we may use a few different ones when we process your personal data. These include the following:
Performing the contract we have with you.
In some cases, we need some personal data in order to fulfill our obligation to provide Quizlet under our Terms of Service.
Legal and regulatory compliance.
In some cases, laws or regulations require us to collect and use your data. For example, tax laws require us to retain certain records for users who engage in financial transactions on Quizlet.
With your consent.
In some cases, we ask for your consent to process your data for a specific purpose, like giving you access to use a specific product feature. When we ask for your consent in this context, you can always revoke that consent by disabling that feature.
To pursue our legitimate interests.
Sometimes we rely on what is known as our legitimate interest. This is a technical term in data protection law that means Quizlet has a good and fair reason to process your data and requires that we do so in ways that don't hurt your interests or rights. When we require your data to pursue our legitimate interests, we use it in ways that you would reasonably expect as part of running Quizlet and that do not materially impact your rights, freedom, or interests.
Data subject rights
How can I access my personal data on Quizlet?
You can access your personal information in your Quizlet account any time by logging in to Quizlet and going to your Settings and profile pages.
How can I update (rectify) my information on Quizlet?
You can update your personal information in your Quizlet account any time by logging in to Quizlet, going to your Settings, and making changes there. You can also update content you've added to Quizlet, like your study sets.
How can I delete my data from Quizlet?
You can delete your personal data from Quizlet any time by logging in and deleting your account from your Settings.
How can I request that Quizlet stop processing my data?
If you don't want Quizlet to process your personal data anymore, you can log in to Quizlet and delete your account from your Settings.
How can I export my data from Quizlet?
You can download a copy of your sets using the Export function on each set's page. We store a limited amount of your personally identifiable information when you sign up, like your email address, which you can access in your Settings.
How do I withdraw my consent from Quizlet?
In general, we make sure that you have the option to remove your consent for particular features directly within Quizlet. When you enable a feature, you're providing consent. To revoke your consent, you can disable the feature. These settings are located throughout Quizlet in places relevant and related to the features they enable.
How can I object to how Quizlet is processing my data?
If you have a question, concern, or want to object to a specific type of processing, please email our Privacy team at firstname.lastname@example.org and they will review your request. We may need to confirm your identity before granting access or changing your information.
None of these answered my question, and I need more help. What can I do?
If you need further help, you can email email@example.com and a member of our Privacy team will get back to you. We may need to confirm your identity before granting access to or otherwise changing your information.
Our goal is to make sure that you understand how we're processing your data and the care we take to protect your privacy. We hope you'll come to us with any questions or concerns so we can help!
If you aren't satisfied with our response, you can approach your local data protection authority.