Mark My Papers Ltd – Privacy Statement
General Data Protection Regulation (GDPR) Privacy Notice
The personal information you give us is important. We want to offer services which work well for you and so understanding your requirements is important to us. In this Privacy Notice, we explain what information we collect from you, how we collect it and how we store and use it.
Who we are
We are Mark My Papers Ltd a company registered in England and Wales No.12323860. (“the Company”, “MMP” “we”, “us” or “our”). Our Registered Office is 27 Old Gloucester St, London WC1N 3AX. Mark My Papers Ltd is registered with the Information Commissioner’s Office (ICO) as a Data Controller under the reference ZA488440. We provide educational services including exam marking, moderation, assessment and creation of teaching, learning and exam materials.
This privacy notice applies to all clients, advisors, consultants, examiners, suppliers and other third parties. It applies to all personal data that we process, regardless of the media on which those personal data are stored, e.g. electronically, on paper or on other materials. The Company will make every endeavour to abide by the principles and terms of the Data Protection Act 2018 and undertakes to take all possible care to protect clients’, advisors’, consultants’, examiners’, suppliers’ sensitive data.
Protecting Your Personal Data
Your Personal Data is protected by law. The law states that we can only process your Personal Data when there is a genuine reason to do so and it must be one of the following:
- To fulfil any contract that we have with you, or
- When it is our legal duty, or
- When it is in our legitimate interest, or
- When you have consented to it.
A legitimate interest is when we have a business or commercial reason to use your information. Your data is still protected and we must not process it in a way that would be unfair to you or your interests. If we rely on our legitimate interest as a reason to process your Personal Data, we will tell you what that is.
Using Mark My Papers website
The only way MMP’s website will collect data on a contact is if the contact chooses to send MMP a message through the ‘Contact Us’ page, which requests name and email address details and details of your enquiry. Please see our website privacy statement here.
The data we collect
The type and level of personal information we collect includes:
The name of your school, tutor group, company or organisation; your name, your position.
For pupils and students at schools: Candidate numbers, year group, teacher name.
For private students, home educated students – parent or Guardian and candidate name and candidate numbers
For teaching professionals/ tutors – name, position.
For those working for us and with us: Name, the terms and conditions of your agreement to work for us, fee payments, benefits, work patterns and history.
- Contact: e-mail address, address and telephone number.
- Assessments: A history of examination marking, moderation, assessment results; marks and grades awarded and reports and materials provided to you as part of a service.
- Financial: Bank account details.
- Transaction: Purchase order details of services requested/provided to you and payments made to/from us.
- Marketing: Preferences when you receive communications from us and our third parties. The technologies used, and any related correspondence.
- Survey: Comments and opinions provided in response to a survey.
- Recruitment: Education, qualifications, occupation, work history, referees, training and skills development, nationality.
- Performance: Reviews and rating, development plans and related correspondence.
- Communication: Emails you send to us or receive via our email system.
Collecting your data
We may collect personal data from you if you:
- Contact us with an enquiry about our services
- Submit work to be marked or assessed or use any of our services
- Use our website. See our website privacy statement here
- Interact with us through social media, email, post, text or phone
- Apply to work with/for us, work with/for us, have worked with/for us, are an advisor or consultant to us
What we do with your data
Your personal information supports a range of different purposes and activities. The types of data we use, the legal base(s) we rely on when processing them and our legitimate interests listed here are:
Purpose / Activity
Type of Data
|To mark and assess tests, essays and examination papers and maintain a permanent record of the results. To supply teaching and learning material, moderation reports, comparisons and reviews of exam papers, materials, results supplied by our clients|
|To develop, deliver and publicise educational products, standards, qualifications, resources and training|
|To manage our relationship with you, including: providing you with any information, products or services that you request from us; notifying you about changes to our products, services, events, terms and conditions or privacy notice; statistical analysis, market research, marketing and support.|
|To create an account, register you as a new customer and administer your account.||· Performance of a contract with you.|
|To process and deliver your assignment including: delivery of services and service features, recording your order details; keeping you informed about the order status; taking and processing payments, collecting money owed to us; and assisting fraud prevention and detection.|
|To register you for email updates, and recommend products and services and events that may be of interest to you.||· Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy).|
|To gather your opinions on our products and services, or on your experiences of education.||· Consent.|
|To improve our customer service, monitor quality, resolve complaints and ensure compliance with regulations through contact capture, webforms and call recording.||· Necessary for our legitimate interests (to monitor quality and performance, resolve complaints, improve call handling practice and train staff to improve customer service).|
|To support law enforcement bodies in the prevention, detection and prosecution of crime.|
|To support the awareness of safeguarding issues relating to candidates. To include actions to inform relevant persons/organisations and /or authorities of concerns brought to our attention in the material submitted by our clients.|
In the case of those seeking to work for/with, currently working for/with and having worked for/with MMP (ONLY):
To attract and recruit the right people for our business, and manage their working relationship with us, including job role and responsibilities, salary or fee payments, progression, training and performance management and disciplinary or grievance procedures.
We may process your personal data using more than one lawful basis, this depends on the activity.
We’ll use your personal data for the reason we collected it. Unless we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your information for an unrelated purpose, we’ll let you know and explain the legal basis for this.
We may process personal data without your consent, in compliance with the above rules. Where it’s required or permitted by law.
We’ll keep your personal data:
- for as long as necessary
- for the purpose(s) its provided for
- and to meet our accounting, reporting and legal obligations.
How we store and protect data
We keep personal data confidential and within a secure infrastructure. Should we print data, it will be stored under lock and key. Digitally stored data is protected by recognised anti-hacking, anti-virus programmes and behind an enhanced firewall.
Access to your personal data is only given to those who have a business need to know it. They can only access it with on our instructions. All Company Directors and Administration staff are subject to a confidentiality agreement
We have procedures in place to deal with any suspected personal data breach. We’d let you and the UK Information Commissioner know of a breach where we’re required to do so.
How we share your information
We may share your personal information with the following:
- HMRC and Government agencies, regulators and other authorities when required to by law.
- Our Board of Advisors.
- Our professional advisers including auditors, lawyers, bankers and insurers who provide professional advice, accounting, banking, legal, insurance, or to meet our audit responsibilities.
- If you’ve given consent for us to share your data with a third party, we may pass your data onto that third party.
- Fraud prevention agencies.
- A party linked with you or your business’s products or services.
- Organisations that introduce you to us.
If you choose not to give Personal Information
Not providing your Personal Data may prevent us from meeting legal obligations, fulfilling a contract or performing services required and may mean we are unable to provide you with our services.
Transferring Personal Data outside the European Economic Area
The data protection legislation restricts transfers of personal data to countries outside the European Economic Area (EEA) in order to ensure that the level of data protection afforded to data subjects is maintained. The Company does not transfer personal data to countries outside the EEA.
We may use your personal information to tell you about relevant services, products and offers. This is what we mean when we talk about ‘Marketing’.
The personal information we have for you is made up of what you tell us, and data we collect when you buy our products, use our services or from third parties we work with. We may study this to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant to you.
We can only use your personal information to send you marketing messages if we have either your consent or a ‘legitimate interest’. That is when we have a business or commercial reason to use your information.
You can ask us to stop sending you marketing messages by contacting us at any time at email@example.com.
Whatever you choose, you’ll still receive correspondence, invoices and other important information connected to the services we have supplied to you.
Your rights in connection with your personal information
As a data subject, you have a number of statutory rights. Subject to certain conditions, and in certain circumstances, you have the right to:
- Request access to your personal information – this is usually known as making a data subject access request and it enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- Request rectification of your personal information – this enables you to have any inaccurate or incomplete personal information we hold about you corrected.
- Request the erasure of your personal information – this enables you to ask us to delete or remove your personal information where there’s no compelling reason for its continued processing.
- Restrict the processing of your personal information – this enables you to ask us to suspend the processing of your personal information, e.g. if you contest its accuracy and so want us to verify its accuracy
- Object to the processing of your personal information – this enables you to ask us to stop processing your personal information where we are relying on the legitimate interests of the business as our legal basis for processing and there is something relating to your particular situation which makes you decide to object to processing on this ground
- Data portability – this gives you the right to request the transfer of your personal information to another party so that you can reuse it across different services for your own purposes.
If you wish to exercise any of these rights, please contact us at firstname.lastname@example.org. We may need to request specific information from you in order to verify your identity and check your right to access the personal information or to exercise any of your other rights. This is a security measure to ensure that your personal information is not disclosed to any person who has no right to receive it.
In the limited circumstances where you have provided your consent to the processing of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. This will not, however, affect the lawfulness of processing based on your consent before its withdrawal. If you wish to withdraw your consent, please contact us. Once we have received notification that you have withdrawn your consent, we will no longer process your personal information for the purpose you originally agreed to, unless we have another legal basis for processing.
If you believe that the Company has not complied with your data protection rights, you have the right to make a complaint to the Information Commissioner’s Office (ICO) at any time. The ICO is the UK supervisory authority for data protection issues.
Changes of business ownership and control
Changes to this privacy notice
The Company reserves the right to update or amend this privacy notice at any time. We will issue you with a new privacy notice when we make significant updates or amendments. We may also notify you about the processing of your personal information in other ways.
If you have any questions about this privacy notice or how we handle your personal information, please contact us at email@example.com
Data controller: Mark My Papers Ltd
Controller’s representative (if any): Russell Elgar-Parsons
Date 1st July 2021