SurveyMonkey and Privacy Rights

SurveyMonkey is complying with applicable privacy regulations like the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Our features help you to be compliant.

Wufoo customers and form respondents may be entitled to exercise rights under privacy laws, and we'll do our best to help customers comply with requests they may get from respondents.

To learn more about how we manage EU customer data, or enter into a data processing agreement in the EU, please review Wufoo Data Transfer and EU Laws. If you're in California, you can fill out this form to get a copy of our CCPA addendum.


Depending on your location, you may have certain rights regarding your data:

  • Right of Access: Find out what kind of personal information is held about you and get a copy of this information.
  • Right of Rectification: Ask for your information to be updated or corrected.
  • Right to Data Portability: Receive a copy of the information you've provided under contract so you can provide it to another organization.
  • Right to Restrict Use: Ask for your personal information to stop being used in certain cases, including if you believe that the personal information about you is incorrect or the use is unlawful.
  • Right to Object: Object to use of your information where a party is processing it on legitimate interest basis, and object to have your personal information deleted.
  • Right to Erasure (also known as Right to be Forgotten or a Data Deletion Request): Request that your personal information be deleted in certain cases.

Account holders can view, edit, delete, and download a lot of data directly or contact us for additional info.

These articles can help you manage your personal data:

Depending on your location as a Wufoo account holder, and the location of your respondents, you may be required to respond to privacy requests from people who ask to exercise their rights.

Form respondents are people who filled out a form sent by a Wufoo account holder. If you're a respondent with a request, you should contact the account holder who is responsible for editing, deleting, or giving you a copy of your responses.

If you’re unable to get in touch with the account holder, contact us with the following:

  • Form link, or web page you used to fill out the form
  • Approximate date and time you filled out the form
  • Your name and email address
  • Any response you provided that can be used to identify you

Since Wufoo doesn't control the response data account holders collect, we can't directly handle these requests, but we'll do our best to identify and put you in contact with the account holder.

A site visitor can be anyone who visits a Wufoo webpage. Site visitors can delete personal data that might be stored about them by clearing cookies, opting out of cookies, and unsubscribing from marketing emails.

How account holders can comply with GDPR requests

As an account holder, depending on your location and the location of your respondents, you may be required to respond to requests from people who ask to exercise certain privacy rights. Since SurveyMonkey is not the controller of the response data you collect, we can't directly handle these requests for you, but we'll do our best to help you comply with requests you might get from your respondents.

These articles can help you manage response data:

If you're unable to fulfill a respondent's request using the information above, contact us.

How Wufoo complies with data requests

If you're unable to exercise your rights using the information above, you want to exercise your right to be forgotten, or you want to make a data deletion request, contact us. We respond to these requests within 30 days. However, it may take longer to complete the request. We'll be sure to let you know these details over email.

If you're in the European Union and you're not satisfied with how we managed your request, you can contact your local data protection supervisory authority. You can find your local authority on the ODPC Website. Our European entity is SurveyMonkey Europe UC, which operates in Ireland under the remit of the Irish Office of the Data Protection Commissioner.