BUZZEGA™

Privacy Policy

United Kingdom · applies to Buzzega accounts and games

1. Information We Collect

We collect information that you provide directly to us, including:

  • Account Information: Name, email address, password
  • Profile Information: Optional profile picture, organisation details
  • Game Data: Questions, game settings, player responses, scores
  • Payment Information: Billing address and payment method (processed securely through third-party providers)
  • Usage Data: Device information, IP address, browser type, pages visited

2. Legal Basis for Processing (UK GDPR)

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our legal bases for processing include:

  • Contract: Processing necessary to provide our services
  • Consent: Where you have given explicit consent
  • Legal Obligation: To comply with UK law
  • Legitimate Interests: For business purposes that do not override your rights

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Platform
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyse trends, usage, and activities
  • Detect, prevent, and address technical issues and fraudulent activity
  • Personalise your experience and deliver relevant content
  • Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: With third-party service providers who perform services on our behalf under strict data processing agreements
  • Legal Compliance: To comply with legal obligations, court orders, or respond to lawful requests
  • Safety and Protection: To protect the rights, property, and safety of Buzzega™, our users, or others
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with appropriate safeguards)

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication
  • Secure cloud infrastructure
  • Staff training on data protection

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, accounting, or regulatory purposes.

7. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Update or correct inaccurate information
  • Right to Erasure: Request deletion of your personal data (subject to certain exceptions)
  • Right to Restrict Processing: Request restriction of processing in certain circumstances
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
  • Right to Lodge a Complaint: File a complaint with the Information Commissioner's Office (ICO)

To exercise these rights, please contact us at privacy.uk@buzzega.com.

8. Cookies and Tracking Technologies

Buzzega™ uses only strictly necessary cookies. We do not use advertising cookies, tracking pixels, or any third-party analytics service, and we do not track you across other websites.

  • Authentication: keeps you signed in to your host account
  • Security (CSRF): protects your account against cross-site request forgery

We also store some information in your browser's local storage so the app works — your current game session, sound preferences and display settings. This stays on your device and is not transmitted to us for analysis. Clearing your browser data removes it.

Because these are strictly necessary to deliver a service you have requested, they are exempt from the consent requirement under the Privacy and Electronic Communications Regulations (PECR). If we ever introduce analytics or non-essential cookies, we will ask for your consent first and update this policy before doing so.

9. Children's Privacy

Buzzega™ is designed for educational use, including with children. Our ready-made game library includes content built for Kindergarten through Grade 12, and children are expected to play.

Children play as guests, not account holders. A child joins a Host’s game using a game PIN and a display name. We do not ask a Player for an email address, a password, a date of birth, or any other personal detail.

Hosting requires an account, and a minimum age of 13. A Host is typically a teacher, parent or group organiser, but a Host may be as young as 13. Thirteen is the age at which a child can consent to their own data being processed by an online service in the UK, under the UK GDPR and the Data Protection Act 2018. Below that age we would need verifiable parental consent, which a sign-up form cannot provide, so we do not permit the account. Buying a paid plan separately requires the account holder to be 18 or over.

Age Appropriate Design. We have tried to follow the Information Commissioner’s Age Appropriate Design Code: we collect the minimum we need from Players, spectating is off unless a Host turns it on, we do not profile children or use their data for marketing, and there is no advertising in a game.

What we collect about a child player. Only the display name they enter, the answers they submit, their score, and technical data needed to run the game (such as a temporary session identifier). The Host chooses whether a display name is a real first name or a nickname, and we recommend nicknames when playing with children.

Host responsibility. Where a Host uses Buzzega™ with children, the Host is responsible for obtaining any parental or guardian consent required by their school, organisation or local law, and for ensuring display names do not reveal more than intended.

Retention. Player display names, answers and scores belong to the Host’s game record and are deleted when the Host deletes the game or their account.

Spectating is switched off by default, so a game is not observable by anyone the Host has not invited. A Host must deliberately enable it per game.

We aim to follow the ICO’s Age Appropriate Design Code: we collect the minimum needed to run a game, apply privacy-protective defaults (spectating off), and do not profile children or use their data for marketing.

If you are a parent or guardian and believe a child’s information has been collected in a way you did not intend, contact us at privacy.uk@buzzega.com and we will delete it.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of the United Kingdom. We ensure appropriate safeguards are in place for such transfers, including:

  • Standard Contractual Clauses approved by the UK authorities
  • Adequacy decisions by the UK Government
  • Other lawful transfer mechanisms under UK GDPR

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you without human intervention.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We will also notify you via email for significant changes that affect your rights.

13. Contact Us and Data Protection Officer

If you have questions or concerns about this Privacy Policy or wish to exercise your rights, please contact us at:

Buzzega™ UK Privacy Team
Email: privacy.uk@buzzega.com
Address: 25 Old Broad Street, London EC2N 1HN, United Kingdom

Data Protection Officer:
Email: dpo.uk@buzzega.com

14. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Website: https://ico.org.uk
Telephone: 0303 123 1113

Last Updated: January 31, 2026