Skip to main content

Data protection and privacy/GDPR

Prolific is committed to protecting the privacy of everyone we work with, including our participants, researchers and website visitors. This article is a high-level summary of how we handle your personal data and the rights you have. Our Privacy Notices set out the full detail, and you should read them for the complete picture. If anything in this article differs from our Privacy Notice(s), the Privacy Notice applies.

All users

Prolific works with participants, researchers and visitors around the world. Depending on where you live, data protection laws give you rights over your personal data, and you can exercise those rights by contacting us.

If you are in the UK, you can read guidance from the Information Commissioner's Office at www.ico.org.uk . If you are based elsewhere, your local data protection authority may offer similar guidance.

We process personal data including your account details, your correspondence with us and, for participants, where relevant, profile and screening data. We use it to operate and secure our platform, provide our services, pay participants and communicate with you. Our Privacy Notice explains what we collect, our lawful bases, who we share data with, our use of cookies and web storage, and any international transfers of your data.

We won't keep your data for longer than necessary.

For participants, this means that if your account has been inactive for 14 months, your account will be permanently closed and your data deleted. You'll receive email notifications ahead of this deadline — first at 6 months, then at 12 months of inactivity — giving you the opportunity to log in and keep your account active.

💡 To make sure you receive these important emails, we recommend adding no-reply@prolific.com to your safe senders list.

We will not contact you for marketing purposes unless you have explicitly opted in to receive such communication. We may, however, contact you for other purposes for our legitimate interests as outlined in our Privacy Notice.

We are registered as a data controller with the UK Information Commissioner's Office. Our data protection registration number is ZA317731. Our Data Protection Officer's contact details are: dpo@prolific.com


Making a data access or deletion request

If you'd like a copy of the personal data we hold about you (a Data Subject Access Request), or you'd like us to delete your personal data, click the link below.

This opens our support chatbot. Select "Submit a Data request" and provide:

  1. details of your request

  2. your name

  3. your Participant ID (if you are a participant)

  4. where you are based

We'll handle your request in line with applicable data protection law, and we may need to confirm your identity before we proceed.


Your other rights

Depending on where you live, you may also have other rights over your personal data, such as rectification, restriction, objection and portability. You can read about these in our Privacy Notice.


Making a complaint

If you're unhappy with how we've handled your personal data, you can raise a complaint with us using the same link above. You also have the right to complain to a data protection regulator. In the UK that is the Information Commissioner's Office (www.ico.org.uk); if you are based elsewhere, you can contact your local data protection authority.


Researchers

If you are a researcher, you are responsible for meeting your own data protection obligations as a controller for any personal data you collect through Prolific, including giving participants the information required by law and making sure any international transfers are lawful. Our Privacy Notice explains how we handle your personal data. You can read about what you may not request in a study in Prolific Practices and Security Systems.


Participants

As a participant, we process your profile information for demographic screening. This may include special category data (such as data about health, race or beliefs) where you choose to provide it in response to screening questions; you can withdraw your consent for our processing of such data at any time by deleting the relevant screening answers. We also process payment data to pay your rewards. We do not share directly identifying data with researchers except in cases of fraud, misconduct or a breach of confidentiality; any pseudonymised demographic data is shared by reference to your Prolific ID only. If you take part in a study, any personal data you provide to the researcher is handled by that researcher as a separate controller - see Personal information in studies. Our Privacy Notice explains all of this in full.

Did this answer your question?