SurveyMonkey is complying with applicable privacy regulations like the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Our features help you to be compliant.
Wufoo customers and form respondents may be entitled to exercise rights under privacy laws, and we'll do our best to help customers comply with requests they may get from respondents.
To learn more about how we manage EU customer data, or enter into a data processing agreement in the EU, please review Wufoo Data Transfer and EU Laws. If you're in California, you can fill out this form to get a copy of our CCPA addendum.
Rights
Depending on your location, you may have certain rights regarding your data:
Account holders can view, edit, delete, and download a lot of data directly or contact us for additional info.
These articles can help you manage your personal data:
Depending on your location as a Wufoo account holder, and the location of your respondents, you may be required to respond to privacy requests from people who ask to exercise their rights.
Form respondents are people who filled out a form sent by a Wufoo account holder. If you're a respondent with a request, you should contact the account holder who is responsible for editing, deleting, or giving you a copy of your responses.
If you’re unable to get in touch with the account holder, contact us with the following:
Since Wufoo doesn't control the response data account holders collect, we can't directly handle these requests, but we'll do our best to identify and put you in contact with the account holder.
A site visitor can be anyone who visits a Wufoo webpage. Site visitors can delete personal data that might be stored about them by clearing cookies, opting out of cookies, and unsubscribing from marketing emails.
How account holders can comply with GDPR requests
As an account holder, depending on your location and the location of your respondents, you may be required to respond to requests from people who ask to exercise certain privacy rights. Since SurveyMonkey is not the controller of the response data you collect, we can't directly handle these requests for you, but we'll do our best to help you comply with requests you might get from your respondents.
These articles can help you manage response data:
If you're unable to fulfill a respondent's request using the information above, contact us.
How Wufoo complies with data requests
If you're unable to exercise your rights using the information above, you want to exercise your right to be forgotten, or you want to make a data deletion request, contact us. We respond to these requests within 30 days. However, it may take longer to complete the request. We'll be sure to let you know these details over email.
If you're in the European Union and you're not satisfied with how we managed your request, you can contact your local data protection supervisory authority. You can find your local authority on the ODPC Website. Our European entity is SurveyMonkey Europe UC, which operates in Ireland under the remit of the Irish Office of the Data Protection Commissioner.