Privacy Notice — Quizzley

1. Who we are

Quizzley is operated by Dapt UK Ltd, a company registered in England and Wales (company no. 12841536), with its registered office at 3rd Floor, The Coade, 98 Vauxhall Walk, London, SE11 5EL, trading as "Quizzley" ("we", "us", "our"). We act as the data controller for the personal data we collect through this site and the Quizzley service. You can contact us at any time via our contact page.

2. What we collect and why

Account data (name, email, login credentials) — to create and manage your account.
Quiz content you create — to provide the service.
Usage and device data (IP address, browser, pages visited, AI usage counters) — to operate, secure and improve the service.
Support and enquiry messages — to respond to you.
Subscription and order data — handled by our payment provider Paddle (see below).

Our legal bases are: performance of a contract (providing the service you signed up for), legitimate interests (security, fraud prevention, product improvement), consent (where required, e.g. non-essential cookies), and legal obligation.

3. Who we share data with

Paddle.com Market Limited — our Merchant of Record, which processes payments, manages subscriptions, handles tax compliance and issues invoices on our behalf.
Hosting and infrastructure providers (e.g. Supabase, Cloudflare) — to run the platform.
AI processing providers — to power optional AI quiz generation features.
Professional advisers and authorities — where required by law.

We do not sell your personal data.

4. International transfers

Some of our providers are located outside the UK/EEA. Where data is transferred, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep your personal data only for as long as needed to provide the service and meet legal obligations. Account data is retained while your account is active and deleted or anonymised after closure. Enquiry messages are retained for up to 24 months.

6. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time. You may also lodge a complaint with the UK Information Commissioner's Office (ICO). We aim to respond to requests within one month — contact us via the contact page.

7. Security

We use appropriate technical and organisational measures including encryption in transit, access controls and audit logging. No system is 100% secure, but we work to protect your data and notify you of material incidents where required.

8. Cookies

We use essential cookies to keep you signed in and to operate the service. We may use limited analytics cookies to understand usage. You can manage cookies in your browser settings.

9. Changes

We may update this notice from time to time. Material changes will be communicated via the service or by email.