Privacy Notice


Last Updated: 7/18/2018

Overview

This Privacy Notice explains how information is collected, used, stored, and disclosed by Magoosh. It applies to information collected when you use or access our public websites (Magoosh.com), mobile apps and software product (“Product”) (collectively, the "Magoosh Service"), or otherwise interact with us.

Changing Our Notice

We may change this Privacy Notice from time to time. If we make any changes, we will notify you by revising the "Last Updated" date at the top of this Privacy Notice and, in some cases, we may provide you with additional notice (such as adding a statement to our homepage or sending you an email notification).

If there are material changes to this Privacy Notice, we will notify you directly by email or by means of a notice on the homepage prior to the change becoming effective. We encourage you to review our Privacy Notice whenever you access the Magoosh Service to stay informed about our information practices and the ways that you can help protect your privacy.

If our information practices change at some time in the future we will post the policy changes to our public websites to notify you of these changes and provide you with the ability to opt out of these new uses. If you no longer agree with this Privacy Notice and do not wish your information to be subject to the Privacy Notice, you will need to deactivate your account with us by contacting help@magoosh.com and stop using the Magoosh Service. Your use of the Magoosh Service shall constitute your consent to the present Privacy Notice.

What Information We Collect

We may collect certain user information, including personal data.

Information You Provide To Us. We collect information you provide directly to us including when you use the Magoosh Service. This information includes personal data. This personal data will be processed for the purposes described in this Privacy Notice, as it may be amended from time to time. For example, your personal data will be used to create or modify your profile and account, access and use the Magoosh Service (including but not limited to when you watch lessons, answer practice questions, or use a mobile app), participate in any interactive features of the Magoosh Service, submit a contact or consent form, participate in a survey, or request customer support.

The personal data that we may collect directly from you includes your name, username, email address, phone number, information about your Product account preferences, transactional information (including services purchased or subscribed to and amount paid), as well as any contact or other information you choose to provide.

If you are a member of a social media network, like Facebook, you may choose to use your social credentials to create and log into your Magoosh account.

The personal data provided during payment is collected and processed by our payment processor (in most cases, Paypal or Stripe). Magoosh does not save any personal financial information, including credit card numbers, expiration dates, security codes, or postal codes.


Updating Your Information and Deactivating Your Account. You can update, correct, or modify your account information at any time by logging into your Magoosh Product account and accessing your profile page. If you need help accessing, modifying, or deactivating your account within the Product, please email help@magoosh.com. For users in the European Union (“EU”), please see the section below in this Privacy Notice titled “EU User Rights.”

Information We Collect Automatically When You Use the Magoosh Service. When you access or use the Magoosh Service, we may automatically collect information, including personal data, about you, including:

  • Usage, Log and Device Information: We collect information from your use of the Magoosh Service, such as number of visits, length of time spent using or accessing our Products, IP address (which may allow us to collect general location data), pages clicked on, system activity, hardware settings, device type, operating system, browser type, browser language, the date and time of your visit, and the URL you were on before you came to the our website. We collect information on user activity in connection with the Magoosh Service and may collect information about the features you use, the content you access, and any actions taken in connection with your access and use of the Magoosh Service.

  • Information Collected by Cookies and Other Tracking Technologies: A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the website again, the cookie allows that site to recognise your browser. Cookies may store user preferences and other information. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, some website features or services may not function properly without cookies.

    We also use third party vendor remarketing tracking technologies, including the Google Adwords tracking cookie. This means we will continue to show ads to you across the internet, specifically on the Google Content Network (GCN). As always we respect your privacy and do not collect any information that would identify you individually through the use of Google’s or any other 3rd party remarketing system.

    Our third-party vendors, including Google, use tracking technologies on web browsers in order to serve ads based on past visits to our Products, report on the performance of our ads, conduct analytics on the use of our Products, fulfill orders and other user requests, prevent fraud, improve our Products and conduct surveys relating to our users’ experiences with our Products, and communicate with our users. You can opt out and/or customise your preferences by visiting Google's Ad Settings. For more information about cookies and how to disable them, please see "Third-Party Analytics and Advertising Providers" below.

How We Use Information Collected

We use the information collected through the Magoosh Service in order to facilitate provision of the Magoosh Service and engage with you about our products and offerings. We may use the information that we collect:

  • To provide, operate, maintain, and improve the Magoosh Service;
  • To enable you to access and use the Magoosh Service that you request, including sending you technical notices, updates, alerts, and support and administrative messages;
  • To provide and deliver the services and features you request, process and complete transactions, and send you related information, including purchase confirmations and receipts;
  • To respond to your comments, questions, and requests, and provide customer service and support;
  • To communicate with you about services, features, surveys, newsletters, offers, promotions, events, and provide other news or information about Magoosh and our select partners;
  • To process and deliver survey entries and rewards;
  • To review and analyse trends, usage, and activities in connection with the Magoosh Service and for marketing or advertising purposes;
  • To investigate and prevent fraudulent transactions, unauthorised access to the Magoosh Service, and other illegal activities;
  • To personalise and improve the Magoosh Service, and provide content and/or features that match your interests and preferences or otherwise customise your experience on the Magoosh Service; and
  • For other purposes about which we notify you in advance or for which we receive your consent, as necessary.

Social media network credentials enable them and us to link your activities with your personal registration information at their site, including name, email address, and profile image. The social network may (with your permission) notify your friends or connections about your activities in our Services and use tracking technologies to monitor your online activities to serve targeted ads. The social media networks' privacy policy and terms apply to your use of their platforms. Your browser or device may allow you to block these technologies but you should visit the third party website and review their privacy policy and your registration profile or account to find out your options.

How We Use Cookies

We use cookies to understand and save your preferences for future visits and compile aggregate data about Product traffic and Product interaction so that we can offer better Product experiences and tools in the future.

We may contract with third-party service providers to assist us to serve ads based on past visits to our Products, report on the performance of our ads, conduct analytics on the use of our Products, fulfill orders and other user requests, fraud prevention, improve our Products and conduct surveys relating to our users’ experiences with our Products, and communicate with our users. For instance, we use Google Analytics Demographics and Interest Reporting, which includes data from interest-based advertising or third-party audience data (such as age, gender, and interests), for all of the purposes listed above. Third party vendors, including Google, use cookies to serve ads based on a user’s prior visits to our Products. This allows us to make special offers and continue to market our services to those who have shown interest in our service. For more information about cookies and how to disable them, please see "Third-Party Analytics and Advertising Providers" below.

Data Retention and Erasure

We will maintain certain data for a period of 7 years from the date of your last log in or other study activity in order to keep accurate records for tax purposes. After 7 years from your last activity, we will permanently delete all such personally identifying information. We will keep all other personally identifying information for at least one year after your last login, but in no event longer than seven years. Regardless of the retention period described in this section, we may be required to retain data for longer to comply with legal, regulatory, or audit obligations. Other historical study information may be anonymized and kept at Magoosh’s discretion.

What Information We Share or Disclose to Others

We will not share personal data about you with any third parties except as described in this Privacy Notice, or as defined in an agreement with us in connection with the Magoosh Service (including a Data Processing Addendum, as applicable). Information that may be shared, pursuant to any applicable agreements, includes:

Third-Party Service Providers. We may share your information with third-party service providers who are working on our behalf and require access to your information to carry out that work, such as to process payment or as it relates to a Product feature. These service providers are authorised to use your personal data only as necessary to provide services to Magoosh. As required by the European Union’s General Data Protection Regulation, Magoosh enters into Data Processing Addendums with its Third-Party Service Providers that process personal data of users in the EU.

Third-Party Analytics and Advertising Providers. Magoosh makes use of certain third-party analytics and advertising providers (“TPAAPs”) to, among other things, serve advertisements to Magoosh and our users on third-party websites across such TPAAPs’ networks. Magoosh allows TPAAPs to track our users’ browsing history on our Products using first-party cookies (such as the tools we use to store your Product preferences) and third-party cookies (such as the Google Analytics cookie or the DoubleClick cookie). TPAAPs may use the information stored by the cookies to, among other things, evaluate your use of a website, prepare reports of website activities for website operators, including us, on the performance of advertising campaigns, other services associated with the website and Internet usage, to serve ads based on past visits to our Products, analytics and optimization on the use of our Products, order fulfillment and other user requests, fraud prevention, Products improvement and user surveys, attribution, and communications with our users. The information tracked and stored by the cookies enables TPAAPs to optimize and serve interest-based ads to Magoosh’s users on third-party websites and mobile apps. By using or accessing our Products, you agree to the forwarding of data to TPAAPs and the processing by such TPAAPs of the data collected from you in the manner and for the purposes described above.

To find out more about how you may also exercise your choices regarding our TPAAP’s cookies, including hyperlinks to opt-out of each TPAAP’s cookies or instructions on how to opt-out of each TPAAP’s cookies, please refer to the website available here. To opt out of Google Analytics for Display Advertisers and customized Google Display Network ads, visit the Ads Preferences Manager. For more information on how we serve ads based on past visits to our Products, report on the performance of our ads, conduct analytics on the use of our Products, fulfill orders and other user requests, fraud prevention, improve our Products and conduct surveys relating to our users’ experiences with our Products, and communicate with our users, including how to opt-out, you can contact us at help@magoosh.com.

For more information about interest-based advertising, please visit the Network Advertising Initiative (“NAI”) website, and the Digital Advertising Alliance (“DAA”) website, and the European Interactive Digital Advertising Alliance (“EIDAA”) websites. You can opt out of interest-based advertising by following the instructions below. Please note that the opt-out will apply only to the specific browser or device from which you opt out, and therefore you will need to opt out separately on all of your browsers and devices. If you delete or reset your cookies or mobile advertising identifiers, change browsers, or use a different device, any opt-out cookie or tool may no longer work and you will need to opt out again.

Disabling Cookies. Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies or to prompt you before accepting such a cookie. Please note that, if you choose to remove or reject browser cookies, this could affect the availability or functionality of the Magoosh Service. When accessing the Magoosh Service, you will be prompted to choose to continue or learn more about adjusting your browser settings.

Compliance with Laws. We may disclose your information to a third party: (a) if we believe that disclosure is reasonably necessary to comply with any applicable law, regulation, legal process, or government request; (b) to enforce our agreements and policies; (c) to protect the security or integrity of the Magoosh Service; (d) to protect Magoosh, our customers, or the public from harm or illegal activities; (e) to respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing the death or serious bodily injury of any person; or (f) as otherwise directed by you.

Business Transfers. We may share or transfer your personal data in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. Your personal data may be part of the transferred assets. Data processing for this purpose is a legitimate business interest. You may be notified thereafter of any such change in ownership or control.

Aggregated and/or Anonymised Data. We may also share aggregated and/or anonymised information that does not directly identify you individually with third parties. For example, in an ongoing effort to better understand and serve the users of the Magoosh Service, we may conduct research on customer demographics, interests and behavior based on the personal information, interviews, and other data provided to us. This research may be compiled and analysed on an aggregate basis, and we may share this aggregated data with our agents and business partners. This aggregated information does not identify you personally. We may also disclose aggregated user statistics in order to describe the Magoosh Service to current and prospective business partners, and to other third parties for other lawful purposes.

Links To Third-Party Websites

We may place links on the Magoosh Service, including the Magoosh Blog. When you click on a link from our Product to a third-party website, your activity and use is governed by that website’s policies; not by those of Magoosh. We encourage you to review their privacy and user policies.

How We Store Information

By using and accessing the Magoosh Service, you understand and agree to the storage of information and any other personal data on Magoosh’s server and cloud-based solutions located in the United States, or as defined in an agreement with us (including a Data Processing Addendum, as applicable).

How We Secure Information

We have adopted reasonable physical, technical and organisational safeguards against accidental, unauthorised or unlawful destruction, loss, alteration, disclosure, access, use or processing of information we collect.

You may access your Product account information and our Product only through the use of an individual user ID and password. To protect the confidentiality of personal data and information, you must keep your password confidential and not disclose it to any other person. To keep your account secure, always log out and close your browser when you finish your session. Please advise us immediately if you believe your password has been compromised in any way. You may also select the “Log out of all sessions” option on your profile page to close all other browser sessions for your account. Please note that we will never ask you to disclose your password to us.

Unfortunately, the transmission of information via the Internet and apps is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to us. Any transmission of personal information is at your own risk. We are not responsible for any circumvention of any privacy settings or security measures.

If you have any questions about the security of your personal data, you can contact us at help@magoosh.com.

Our Global Data Privacy and Protection Practices

Magoosh updated our internal governance structure in light of the General Data Protection Regulation (“GDPR”), including policies, procedures, staff training, security measures, and this Privacy Notice.

Currently, Magoosh uses Standard Contractual Clauses as the basis for Magoosh’s approach to cross-border transfers. These Standard Contractual Clauses provide appropriate safeguards with respect to the protection of the privacy and fundamental rights and freedoms of individuals and the exercise of the corresponding rights.

EU User Rights

For all requests surrounding your personal data or questions about your rights per this Privacy Notice, please contact us at help@magoosh.com , and we will respond promptly.

Right to Access, Rectification, or Erasure. You have the right to access, update, correct, or delete your personal data. You also have the right to rectify any inaccuracies in your personal data.

Right to Restrict Data Processing. You have the right to restrict the processing of your personal data upon request if it is (a) inaccurate or unlawful, (b) under contest, or (c) no longer being processed for the original purpose. Magoosh may continue to process the data if it is necessary to resolve legal claims, for the protection of the rights of another person, or for reasons of important public interest. If Magoosh objects to the restriction of data processing, we will notify you promptly after receiving your request.

Right to Data Portability. You have the right to request and obtain your personal data that you provided to us or that we collected through your consent or contractual agreements. We will provide your information in a commonly used, machine-readable format promptly, but no longer than 90 days from the initial request depending on the complexity and volume of requests. If circumstances arise where we are unable to complete your request, we will promptly provide a relevant explanation, as well as inform you of additional steps that you may take.

Retaining Your Personal Information and Data. We will retain your personal data to comply with our legal obligations, resolve disputes, and enforce our agreements. We will retain your personal information for as long as your Magoosh Product account is active or as needed to provide you with the Magoosh Service, but no longer than the period necessary to fulfill the purposes outlined in this Privacy Notice.

Receiving Promotional and Other Communications. We will obtain your consent before sending you promotional, newsletter or Product information emails that we feel may interest you. We may obtain consent from you through a website contact or consent form or by email. You may opt out by either checking the relevant box on the communication consent form, by following the opt-out instructions provided in our emails to you, or by emailing us with your specific request. If you opt out, we may still send you non-promotional communications, such as security alerts and notices related to your access to or use of the Magoosh Service or those about your Product account or our ongoing business relations.

Withdrawing Your Consent. You may withdraw any consent you previously provided to us for the processing of your personal data. As required by applicable law, we will apply your preferences going forward, within a reasonable amount of time. Even where you withdraw your consent, we may still process your personal data for limited purposes, for example, to give effect to your request or to safeguard our business. In some circumstances, withdrawing your consent to our use or disclosure of your personal information will mean that you cannot use our Product or Magoosh Service.

Lodging a Complaint with a Supervisory Authority. You have the right to submit a complaint to an EU supervisory authority if you believe that your personal data has been processed in a manner that is not compliant with the GDPR. You also have the right to submit a complaint to an EU supervisory authority if Magoosh is unable to comply with your right of data portability or does not respond to your request within a timely manner.

California Residents

If you are a California resident and have an established business relationship with us, you can request a notice disclosing the categories of personal information we have shared with third parties, for the third parties’ direct marketing purposes, during the preceding calendar year. To request a notice, please submit your request to help@magoosh.com, with “California Shine the Light Inquiry” in the subject line. You may also opt out of our sharing of your personal data we have shared with third parties, for the third parties’ direct marketing purposes by emailing us at help@magoosh.com.

Our Policy Toward Children

In compliance with COPPA, the Children’s Online Privacy Protection Act , and the Federal Trade Commission’s Children’s Online Privacy Protection Act Final Rule, the Magoosh Service is not directed to children under the age of 13 and does not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us at help@magoosh.com. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. The vast majority of Magoosh products are not designed for children under the age of 13. When we do create products targeted to children (such as our Alexa spelling app), we do not collect any personal information, as defined in the Federal Trade Commission’s Children’s Online Privacy Protection Act Final Rule, from children online. Please note, if you are under the age of 13, you may not use any Magoosh Service that requires account creation or the collection of personal information.

If you are a California resident under the age of 18 and a registered user of our Magoosh Service, you may request that we remove content and information that you post on our Magoosh Service. To obtain removal of such content or information, please send an email with a detailed description of the specific content or information you would like removed to help@magoosh.com. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted, since the content and information may remain in our databases, may remain visible in a manner that does not identify you, or may have been re-posted by another user. There may be other circumstances in which applicable laws do not require or allow removal even if requested.

Data Protection Officer

Effective from 25 May 2018, Magoosh will appoint a Data Protection Officer if and when required by GDPR Article 37 and by the Data Protection Laws. The Privacy team, including any appointed Data Protection Officer, may be reached at help@magoosh.com or via the contact information provided below.

Contacting Us

If you have any questions about this Privacy Notice, please contact help@magoosh.com or:

Magoosh

Attn: Director of Operations

2020 Milvia St. Suite 220

Berkeley, California 94704

help@magoosh.com

(510) 214-0212