Privacy Policy
Last updated: September 24, 2026
This Privacy Policy explains how SPARK Questionnaire Builder ("SPARK," "we," "us," or "our") collects, uses, discloses, and safeguards information when you use our website, application, and related services (collectively, the "Service"). By creating an account, accessing, or using the Service, you acknowledge that you have read and understood this Privacy Policy.
1. Introduction
SPARK Questionnaire Builder provides tools for designing, publishing, and analyzing surveys and questionnaires for research, education, and professional use. This Policy applies to two distinct categories of individuals: (a) registered users of the Service who build and manage questionnaires ("Account Holders" or "you"), and (b) individuals who respond to questionnaires created using the Service ("Respondents"). Section 7 explains how this Policy applies differently to Respondent data.
2. Definitions
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
- "Controller" means the entity that determines the purposes and means of processing Personal Data.
- "Processor" means an entity that processes Personal Data on behalf of a Controller.
- "Questionnaire Data" means the questions, structure, and configuration of a questionnaire created by an Account Holder.
- "Response Data" means the answers and any Personal Data submitted by a Respondent when completing a questionnaire.
3. Information We Collect
3.1 Account Registration Data
When you register for an account, we collect the information you provide, which may include:
- Full name, email address, and mobile number
- Country of residence
- Profession, highest qualification, organization/institution, department, and designation
- Your account password (stored only as a one-way cryptographic hash — we never store or have access to your plaintext password)
3.2 Usage Data
We automatically collect certain information when you access the Service, including your IP address, browser type and version, device information, pages visited, time and date of access, and referring/exit pages.
3.3 Questionnaire and Response Data
We store the questionnaires you build (questions, sections, logic, and settings) and, where you choose to publish and collect responses, the Response Data submitted by Respondents. This may include any Personal Data a Respondent chooses to include in their answers or that you configure a questionnaire to collect (such as a Respondent's email address).
3.4 Uploaded Files
If a questionnaire includes a file-upload question, we store the files Respondents submit. These files are retained as part of the Response Data associated with that questionnaire.
3.5 Communications
If you contact us (for example, via our Contact Us form) or we communicate with you regarding your account (registration confirmations, approval/rejection notices, password-related notices), we retain a record of that correspondence.
4. How We Use Information
We use the information we collect to:
- Create and administer your account, including reviewing and approving registration requests
- Provide, operate, and maintain the Service, including building, publishing, and analyzing questionnaires
- Communicate with you about your account, including status changes, security notices, and responses to inquiries
- Monitor and analyze usage and trends to improve the Service
- Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity
- Enforce our Terms of Use and this Privacy Policy
- Comply with applicable legal obligations
5. Legal Basis for Processing
Where applicable data protection law (such as the GDPR) requires a legal basis for processing, we rely on the following:
| Purpose | Legal basis |
|---|---|
| Account creation and Service delivery | Performance of a contract with you |
| Security, fraud prevention, enforcement of our Terms | Legitimate interests |
| Marketing communications (where sent) | Consent, withdrawable at any time |
| Compliance with legal obligations | Legal obligation |
7. Survey Respondent Data
Where an Account Holder publishes a questionnaire and collects Response Data from Respondents, SPARK generally acts as a data processor on behalf of that Account Holder (who acts as the data controller for that Response Data), except where SPARK independently determines the purpose of processing (for example, aggregate Service analytics). Account Holders are responsible for:
- Ensuring they have a lawful basis to collect Response Data from Respondents, including any required notices or consents
- Not using questionnaires to unlawfully collect sensitive Personal Data without appropriate safeguards and legal basis
- Responding to Respondent requests regarding their own submitted data
Respondents who wish to exercise rights over data they submitted through a questionnaire should contact the Account Holder who created that questionnaire in the first instance. Where SPARK receives a direct request from a Respondent, we will make reasonable efforts to direct the request to the relevant Account Holder or assist as required by applicable law.
9. Data Retention
We retain Account Registration Data for as long as your account remains active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Questionnaire and Response Data is retained for as long as the associated questionnaire exists, or until the Account Holder deletes it, subject to our standard backup and archival cycles.
10. Data Security
We implement administrative, technical, and physical safeguards designed to protect Personal Data from unauthorized access, use, alteration, or destruction, including password hashing, access-controlled infrastructure, and role-based permissions within the Service. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Your Rights & Choices
Depending on your jurisdiction, you may have some or all of the following rights regarding your Personal Data:
- Access: request a copy of the Personal Data we hold about you
- Correction: request correction of inaccurate or incomplete data
- Deletion: request deletion of your Personal Data, subject to legal retention requirements
- Portability: request a machine-readable copy of certain data you provided
- Objection/restriction: object to or request restriction of certain processing
- Withdraw consent: where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us using the details in Section 16. We may need to verify your identity before fulfilling a request.
12. Children's Privacy
The Service is not directed to individuals under the age of 16, and we do not knowingly collect Personal Data from children. If we become aware that we have inadvertently collected Personal Data from a child without appropriate consent, we will take steps to delete it. Account Holders must not use the Service to knowingly collect Personal Data from children without complying with applicable law (such as obtaining verifiable parental consent where required).
13. International Data Transfers
Your information may be stored and processed in a country other than the one in which you reside. Where we transfer Personal Data internationally, we take steps intended to ensure appropriate safeguards are in place, consistent with applicable data protection law.
14. Third-Party Links
The Service may contain links to third-party websites or services not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policy of any third-party site you visit.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page, and, where appropriate, through additional notice (such as an email or in-app notification). Your continued use of the Service after a change becomes effective constitutes acceptance of the revised Policy.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out via our Contact Us page.