Privacy Center

As a global leader in providing digital learning systems for educators and students, McGraw Hill is deeply committed to protecting the privacy of our end users. Whether you are using Connect, ConnectEd, Achieve3000, SmartyAnts, and Actively Learn or any of our other solutions, we collect Personally Identifiable Information that we use to provide, maintain and improve the solution. We are providing the below information so that you can understand how we protect and use your information. If you are under 18, we suggest that you review this information with your parents.

This information applies to all end users of our digital learning system. Since McGraw Hill is a service provider to your institution, your institution Educational institutions are best able to provide you with a full understanding of their privacy practices and more information on how their end user’s Personally Identifiable Information (PII) is collected, shared, and used. To obtain more detailed information about how PII is collected, used, and shared by your educational institution, please contact the appropriate individual at that institution.

In limited circumstances, end users may also be customers of McGraw Hill and McGraw Hill may market to them as a customer. For example, end users may purchase products or create personal accounts in our web sites. In these circumstances, they would be treated as a customer. For more information on how your data is used as a customer, please review the Customer Data Privacy Notice. By contrast, this End User Data Privacy Notice applies to end users with respect to the information collected and processed as part of a course of instruction within the digital learning solution as determined by their educational institution or employer. Aggregated de-identified end user PII is leveraged by McGraw Hill to improve existing or develop new educational products and services.

McGraw Hill is a global organization. We follow privacy laws and regulations that are applicable to our company and our services in the areas where we do business. Should our privacy practices change, we will update it here, but more importantly, we will notify your educational institution in writing and obtain their consent before implementing any material impact to your privacy rights.

Personally identifiable information, or PII, is any information relating to an identified or identifiable natural person ("data subject") including personal data as defined under applicable local law. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

We only collect the information required to provide, maintain and improve the digital learning solution you use. When you register, or are registered within one of our digital learning solutions, we collect your name, school, instructor, class, and login information. Once you begin using one of our solutions, we collect your input to questions, technical specifications, and other information about how you use the solution. You are not required to provide PII; however, in order to use certain services, we may need to collect certain PII for that service to function properly or for us to provide you with requested information.

Depending on the product, the PII we collect includes information from the following categories:

1. Name, initials, and personal or business-related contact information

• For our digital learning systems, we collect your name/initials and contact information when you create an account. However, we collect additional PII, or confirm existing PII, if you contact customer service with an issue or question.

2. Education & professional information

• For some digital learning systems, we collect PII related to your position as an educator or student. This includes the state, district, name of school, courses, etc.

3. In some instances, we collect PII from third parties who provide single-sign-on functions via Learning Management Systems or related tools.

When you use our digital learning systems, we automatically collect certain information from you through the use of cookies, web beacons or other tracking mechanisms. This includes information about your experience such as your IP address, operating systems, pages viewed, and time spent.

Third parties also collect information automatically from you across websites and over time through the use of their own cookies, web beacons, and tracking mechanisms. This information is used to enable the functions of the digital learning system, as well as customize, maintain, and improve our digital learning systems. You may disable cookies via your browser or third party mechanisms. However, some features of our digital learning systems may not function properly without them. Third party cookies that we use include Google Analytics and Webtrends.

If you choose to communicate with or receive communications through our services via phone, text, chat, email, or any other platform for technical support, customer service, or other assistance, those interactions may be recorded and monitored to deliver the solution or information requested by you.

As mentioned above, we use your information to provide you with the digital learning solution on behalf of your school, in order to meet our contractual obligation to you or your school with respect to the service. For example, to assist with identifying users across products and providing consistent service and to enable sharing of data between our products and your school’s learning management system.

We will also process your PII to meet our legitimate interests, for example to improve the quality of services and products.

Except as described in this notice, we limit the use, collection, and disclosure of your PII to the minimum level necessary to deliver the service or information requested by you or your institution. We do not collect, use, or disclose PII that is not reasonably related to a legitimate business purpose necessary to serve you. Your information may also be used in order to maintain and/or improve our services.

Some of our digital learning solutions will use your previous responses to customize your learning experience. This customization is designed to ensure the best possible learning environment for a student without directly driving any determinative outcome.

Provision of your PII may be necessary in order to use the chosen digital learning solution. Failure to provide us with your PII may preclude you from using the digital learning solution.

We will not sell PII to other organizations, nor will we market to students using the information from their educational records (education records are defined as records directly related to a student and maintained by an educational agency or institution, or by a party acting for the agency or institution).

1. Co-branded/Other Web Sites and Features – We may share your PII with third-party business partners for the purpose of providing the service to you. These third-party business partners include cloud service providers, learning management systems (LMS), other educational software providers, etc. These business partners will be given limited access to the PII that is reasonably necessary to deliver the service, and we will require that such third parties follow the same privacy and security practices as McGraw Hill.
2. Business Transfer – In the event of a sale, merger or acquisition, we will be able to transfer your PII to a separate entity. We will require this entity to use your PII only for authorized purposes and by authorized persons in a manner consistent with the choices end users have made under this notice, and that security, integrity, and privacy of your PII is maintained.
3. Agents/Service providers – We hire other companies to perform certain business-related functions on our behalf and according to our instructions. For example, we provide your PII to service providers that host our platform data in the cloud (e.g., AWS).
4. Affiliates – McGraw Hill is a global corporation that consists of multiple organizations. We share your PII between organizations within McGraw Hill to provide, maintain, and improve our products and services. A list of the companies within the McGraw Hill group is available here.
5. Educational Institutions / Corporation – As we provide products and services to your institution / corporation, we share your data with approved individuals such as administrators or educators.
6. Law Enforcement – In the event that McGraw Hill receives a legal demand for end user data from a law enforcement agency, that request will only be honored if:

• The request complies with all laws and clearly establishes the legal need for disclosure.
• The request is related to a specific investigation and specific user accounts are implicated in that investigation.
• Whenever legally permissible, users shall receive notice that their information is being requested.

McGraw Hill reserves the right to disclose to third parties non-personally identifiable information about our users and their use of the McGraw Hill services. For example, McGraw Hill may disclose aggregate data about the overall patterns or demographics of the users of the McGraw Hill products or services.

If you are or were a student, instructor, or administrator at an educational institution using a McGraw Hill digital product, you must direct any requests to exercise your data subject rights to the appropriate representative at your institution. Otherwise, you may reach out to McGraw Hill directly on the requests below:

1. Access and rectification – We strive to ensure that the PII we have about you is accurate and current. You may obtain confirmation as to whether or not PII concerning you exists, regardless of whether PII has already been recorded, and be communicated such information in a readily understandable form
2. Choice & Objection to processing – With limited exceptions, you may choose to change how we use your PII at any time. However, if the PII is required in order to provide you with the service or process a transaction, you may not be able to opt-out without canceling the transaction or service. You may object, in whole or in part, on legitimate grounds, to the processing of your PII, even where such processing is relevant to the purpose of the collection. Please know that if we do receive a request to objection to the further processing of your information, you may no longer be able to access or use the digital learning solution.
3. Withdraw consent – Your educational institution is responsible for obtaining your consent, where required. McGraw Hill obtains consent from your institution to collect, process, and store your PII.
4. Restriction of processing: In specific cases (e.g., if you challenge the accuracy of the PII, while this is being checked), you can request a restriction on the processing of your PII, which can only be processed to file or defend claims.
5. Information – You have the right to be informed a) of the source of the PII; b) of the purposes and methods of the processing; c) of the logic applied to the processing, if processing is carried out with the help of electronic means; d) of the identity of the data controller and data processors; and e) of the entities or categories of entities to whom the PII may be communicated and who may have access to such PII in their capacity as data processor(s) or person(s) in charge of the processing.
6. Data portability – You have the right to export your PII from our systems in a readily accessible file type.
7. Erasure – You may request erasure, anonymization or blocking of a) PII that have been processed unlawfully; b) PII whose retention is unnecessary for the purposes for which it has been collected or subsequently processed. You can obtain certification to the effect that such operations, as well as their contents, have been notified to the entities to whom the data were communicated, unless this requirement proves impossible or involves a manifestly disproportionate effort. Since your educational institution has hired us to manage this information for them, we ask that you or your parent make any request to delete your information directly to your school. Please know that if we do receive a request to delete your information, you may no longer be able to access or use the digital learning solution.

McGraw Hill takes reasonable precautions to protect your information. When you submit PII via the digital learning system, your information is protected both online and off-line. McGraw Hill utilizes reasonable security measures to protect the security and confidentiality of your PII from unauthorized access and use.

We will retain your data for the minimum amount of time necessary to accomplish the purpose for which it was collected, and thereafter no longer than is permitted under McGraw Hill’s data retention policies. We will retain and use your data as necessary to comply with our obligations, resolve disputes and enforce agreements.

For information on the retention period that applies, reach out to the Privacy Office by emailing privacy@mheducation.com or calling +1-646-766-3199.

We recognize and acknowledge current data protection laws in the European Union, Switzerland, and around the world. To comply with privacy laws in the European Union, we have implemented appropriate contracts for the international transfer of PII, on the basis of the standard contractual clauses approved by the European Commission and other international models as required by local law, to provide a legal mechanism for transferring data to McGraw Hill locations globally. For more information on the aforementioned model contracts and how to obtain a copy of the contract, please contact the Privacy Office at privacy@mheducation.com or +1-646-766-3199.

McGraw Hill is a signatory to the Student Privacy Pledge and is committed to protecting student information. If a materially adverse change is made to this notice, we will notify your educational institution and seek their consent for this change.

It's important to note that you may have multiple relationships with McGraw Hill. For example, you may be both a customer and an end-user of our products. Each notice applies to the personal information collected and processed as part of that relationship. We do not use the personal information collected for end-users in the same manner as we use the personal information of customers.

To submit a request regarding personal information, please use the McGraw Hill Privacy Request Form.

We may modify any of the notices in our Privacy Center to reflect legal, technological, or other changes. In that event, the changes will appear here and you will be notified directly where required by law.

Please reach out to the Privacy Office with any questions regarding this Privacy Center or McGraw Hill's collection and processing of your personal information by:

Emailing us at privacy@mheducation.com

Calling us at +1-646-766-3199, or

Writing us at 1325 Ave. of the Americas, New York, NY 10019

McGraw Hill mobile applications that use information received from Google APIs will adhere to the Google API Services User Data Policy, including the limited use requirements of that policy, with respect to any transfer of data.

Google App IDs included com.Achieve3000.Student, com.smartyants.app2, com.smartyants.app1

Version 1.0 - Sept 27, 2023

©2023 McGraw Hill. All Rights Reserved.