Privacy Policy

1. Introduction

ClassQuiz ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational quiz platform and services (the "Services") available at classquiz.co.uk and our mobile applications.

We are particularly committed to protecting student privacy and comply with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant privacy laws.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when you:

• Create an Account: Username, email address, password, name, school/organization affiliation, role (teacher/student), grade level, and account preferences
• Create Content: Quiz questions, answers, images, descriptions, and other educational content
• Participate in Quizzes: Your responses, scores, and performance data
• Contact Us: Name, email, and message content when you contact support
• Subscribe to Services: Billing information and payment details (processed securely by third-party payment processors)

2.2 Information We Collect Automatically

2.3 Information from Third Parties

We may receive information from:

• Schools and Educational Institutions: Student rosters, class assignments, institutional email addresses
• Single Sign-On Providers: Basic profile information when you use Google, Microsoft, or other SSO services
• Analytics Services: Aggregated usage statistics and performance metrics

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Create and manage your account
• Provide quiz creation and participation features
• Save your progress and quiz results
• Enable collaboration between teachers and students
• Process payments for premium features

3.2 Communication

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send educational content and feature announcements (with consent)

3.3 Improvement and Analytics

• Analyze usage patterns to improve our services
• Develop new features and educational content
• Monitor and improve platform performance
• Conduct research on educational effectiveness

3.4 Safety and Security

• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service and community guidelines
• Comply with legal obligations and protect rights

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract Performance: To provide the services you've requested
• Legitimate Interests: To improve our services, ensure security, and conduct business operations
• Legal Compliance: To comply with applicable laws and regulations
• Consent: For marketing communications and certain data processing activities (where required)
• Vital Interests: To protect the safety and wellbeing of users

For student data, we typically process information as a data processor on behalf of schools or as necessary for the educational services contracted by the school or teacher.

5. Student Data Protection

5.1 School Accounts

When ClassQuiz is used through a school account:

• We act as a data processor for the school (data controller)
• Student data is collected and used solely for educational purposes
• Schools control student accounts and can access/delete student data
• We do not use student data for advertising or commercial purposes
• Students cannot be contacted for marketing purposes

5.2 Individual Student Accounts

For students creating individual accounts:

• Parental consent is required for users under 13
• Limited data collection focused on educational functionality
• No behavioral advertising or marketing to students
• Enhanced security and privacy protections

5.3 Data Minimization

We collect only the minimum data necessary for educational purposes and delete student data when no longer needed for the educational purpose for which it was collected.

6. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in these limited circumstances:

6.1 Educational Context

• Teachers and Schools: Student quiz results and progress with their teachers and school administrators
• Classmates: Usernames and quiz scores in group activities (as configured by teachers)

6.2 Service Providers

• Cloud Hosting: Secure data storage and platform hosting
• Payment Processors: Secure payment processing for premium features
• Analytics Services: Anonymous usage analytics and performance monitoring
• Communication Services: Email delivery and support systems

6.3 Legal Requirements

We may disclose information when required by law, to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users
• Investigate potential violations of our terms

6.4 Business Transfers

In the event of a merger, acquisition, or sale, user information may be transferred as part of the transaction, subject to equivalent privacy protections.

7. Data Retention

We regularly review and delete data that is no longer necessary. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal reasons.

8. Your Rights and Choices

Under UK GDPR and other applicable laws, you have the following rights:

8.1 Access Rights

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain processing activities

8.2 Account Controls

You can:

• Update your account information and preferences
• Control privacy settings for your quizzes and content
• Download your data through account settings
• Delete your account and associated data
• Opt out of non-essential communications

8.3 Student and Parent Rights

8.4 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: privacy@classquiz.co.uk
• Use our online privacy request form
• Mail: ClassQuiz Privacy Team, [Your Address]

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

9.2 Cookie Controls

You can control cookies through:

• Browser settings to block or delete cookies
• Our cookie consent banner and preferences
• Third-party opt-out tools for analytics cookies

Note: Disabling essential cookies may affect platform functionality.

10. Data Security

We implement comprehensive security measures to protect your data:

10.1 Technical Safeguards

• Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Network Security: Firewalls, intrusion detection, and monitoring
• Regular Updates: Security patches and vulnerability management

10.2 Organizational Safeguards

• Staff Training: Regular privacy and security training
• Access Limitation: Principle of least privilege for data access
• Incident Response: Procedures for security breach response
• Third-Party Audits: Regular security assessments

10.3 Data Breach Notification

In the unlikely event of a data breach affecting personal data, we will:

• Notify relevant authorities within 72 hours (where required)
• Inform affected users without undue delay
• Provide details about the breach and our response
• Offer guidance on protective measures

11. International Data Transfers

ClassQuiz is based in the United Kingdom. If you access our services from outside the UK, your data may be transferred to and processed in the UK.

For users in the EU/EEA, we ensure adequate protection through:

• UK adequacy decisions where applicable
• Standard Contractual Clauses (SCCs) for third-party processors
• Additional safeguards as required by law

We regularly review and update our transfer mechanisms to ensure continued compliance with applicable data protection laws.

12. Children's Privacy

12.1 Age Restrictions

• Under 13: Requires verifiable parental consent
• 13-15: Enhanced protections, limited data collection
• 16-17: Standard protections with parental notification rights

12.2 Parental Rights

Parents/guardians can:

• Review their child's personal information
• Request correction or deletion of data
• Refuse further collection or use of data
• Receive notification of material changes to privacy practices

12.3 School Context

When used in schools, parental consent may not be required if the school has the authority to consent on behalf of students for educational purposes.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our services or business practices
• Legal or regulatory requirements
• Feedback from users and stakeholders

When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify users via email or platform notification
• For students, notify schools and parents as appropriate
• Provide a summary of key changes

Your continued use of ClassQuiz after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer

For complex privacy matters or regulatory concerns, you can contact our Data Protection Officer at: dpo@classquiz.co.uk

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data appropriately:

• Website: ico.org.uk
• Phone: 0303 123 1113
• Mail: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF