Mark My Papers Ltd - Privacy Statement

Mark My Papers Ltd – Privacy Statement

General Data Protection Regulation (GDPR) Privacy Notice

The personal information you give us is important. We want to offer services which work well for you and so understanding your requirements is important to us. In this Privacy Notice, we explain what information we collect from you, how we collect it and how we store and use it.

Who we are

We are Mark My Papers Ltd a company registered in England and Wales No.12323860. (“the Company”, “MMP” “we”, “us” or “our”). Our Registered Office is 27 Old Gloucester St, London WC1N 3AX. Mark My Papers Ltd is registered with the Information Commissioner’s Office (ICO) as a Data Controller under the reference ZA488440. We provide educational services including exam marking, moderation, assessment and creation of teaching, learning and exam materials.

This privacy notice applies to all clients, advisors, consultants, examiners, suppliers and other third parties. It applies to all personal data that we process, regardless of the media on which those personal data are stored, e.g. electronically, on paper or on other materials. The Company will make every endeavour to abide by the principles and terms of the Data Protection Act 2018 and undertakes to take all possible care to protect clients’, advisors’, consultants’, examiners’, suppliers’ sensitive data.

Protecting Your Personal Data

Your Personal Data is protected by law. The law states that we can only process your Personal Data when there is a genuine reason to do so and it must be one of the following:

To fulfil any contract that we have with you, or
When it is our legal duty, or
When it is in our legitimate interest, or
When you have consented to it.

A legitimate interest is when we have a business or commercial reason to use your information. Your data is still protected and we must not process it in a way that would be unfair to you or your interests. If we rely on our legitimate interest as a reason to process your Personal Data, we will tell you what that is.

Using Mark My Papers website

The only way MMP’s website will collect data on a contact is if the contact chooses to send MMP a message through the ‘Contact Us’ page, which requests name and email address details and details of your enquiry. Please see our website privacy statement here.

The data we collect

The type and level of personal information we collect includes:

Identity:

The name of your school, tutor group, company or organisation; your name, your position.

For pupils and students at schools: Candidate numbers, year group, teacher name.

For private students, home educated students – parent or Guardian and candidate name and candidate numbers

For teaching professionals/ tutors – name, position.

For those working for us and with us: Name, the terms and conditions of your agreement to work for us, fee payments, benefits, work patterns and history.

Contact: e-mail address, address and telephone number.
Assessments: A history of examination marking, moderation, assessment results; marks and grades awarded and reports and materials provided to you as part of a service.
Financial: Bank account details.
Transaction: Purchase order details of services requested/provided to you and payments made to/from us.
Marketing: Preferences when you receive communications from us and our third parties. The technologies used, and any related correspondence.
Survey: Comments and opinions provided in response to a survey.
Recruitment: Education, qualifications, occupation, work history, referees, training and skills development, nationality.
Performance: Reviews and rating, development plans and related correspondence.
Communication: Emails you send to us or receive via our email system.

Collecting your data

We may collect personal data from you if you:

Contact us with an enquiry about our services
Submit work to be marked or assessed or use any of our services
Use our website. See our website privacy statement here
Interact with us through social media, email, post, text or phone
Apply to work with/for us, work with/for us, have worked with/for us, are an advisor or consultant to us

What we do with your data

Your personal information supports a range of different purposes and activities. The types of data we use, the legal base(s) we rely on when processing them and our legitimate interests listed here are:

Purpose / Activity

Type of Data

Lawful Basis

To mark and assess tests, essays and examination papers and maintain a permanent record of the results. To supply teaching and learning material, moderation reports, comparisons and reviews of exam papers, materials, results supplied by our clients	Identity Contact Assessment Transaction Communication	Performance of a contract with you. Necessary for our legitimate interests (eg to deliver, maintain and develop our core products and services in a regulated environment). Legal obligation.
To develop, deliver and publicise educational products, standards, qualifications, resources and training	Identity Contact Marketing Survey Assessment	Performance of a contract with you. Necessary for our legitimate interests (eg to maintain and develop our core products and services in a regulated environment).
To manage our relationship with you, including: providing you with any information, products or services that you request from us; notifying you about changes to our products, services, events, terms and conditions or privacy notice; statistical analysis, market research, marketing and support.	Identity Contact Marketing Communication Assessment	Performance of a contract with you. Necessary for our legitimate interests (eg to keep our records updated and to study how customers use our products and services).
To create an account, register you as a new customer and administer your account.	Identity Contact	· Performance of a contract with you.
To process and deliver your assignment including: delivery of services and service features, recording your order details; keeping you informed about the order status; taking and processing payments, collecting money owed to us; and assisting fraud prevention and detection.	Identity Contact Financial Transaction Marketing Communication	Performance of a contract with you. Necessary for our legitimate interests (eg to recover debts due to us).
To register you for email updates, and recommend products and services and events that may be of interest to you.	Identity Contact	· Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy).
To gather your opinions on our products and services, or on your experiences of education.	Identity Contact Survey Marketing	· Consent.
To improve our customer service, monitor quality, resolve complaints and ensure compliance with regulations through contact capture, webforms and call recording.	Identity Contact	· Necessary for our legitimate interests (to monitor quality and performance, resolve complaints, improve call handling practice and train staff to improve customer service).
To support law enforcement bodies in the prevention, detection and prosecution of crime.	Identity Communication	The legitimate interest of helping staff, consultants and advisors to prevent detect and prosecute crime. Necessary to comply with a legal obligation
To support the awareness of safeguarding issues relating to candidates. To include actions to inform relevant persons/organisations and /or authorities of concerns brought to our attention in the material submitted by our clients.	Identity Contact	The legitimate interest of helping relevant persons/organisations and/or authorities investigate concerns identified by us or our staff/examiners in connection with the safety of candidates Necessary to comply with a legal obligation

In the case of those seeking to work for/with, currently working for/with and having worked for/with MMP (ONLY):

To attract and recruit the right people for our business, and manage their working relationship with us, including job role and responsibilities, salary or fee payments, progression, training and performance management and disciplinary or grievance procedures.

Identity
Contact
Recruitment
Financial
Transaction
Performance
Survey
Communication

Performance of a contract with you.
Necessary to comply with a legal obligation.
Necessary for our legitimate interests (eg to monitor performance, to gather employee feedback).

We may process your personal data using more than one lawful basis, this depends on the activity.

We’ll use your personal data for the reason we collected it. Unless we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your information for an unrelated purpose, we’ll let you know and explain the legal basis for this.

We may process personal data without your consent, in compliance with the above rules. Where it’s required or permitted by law.

We’ll keep your personal data:

for as long as necessary
for the purpose(s) its provided for
and to meet our accounting, reporting and legal obligations.

How we store and protect data

We keep personal data confidential and within a secure infrastructure. Should we print data, it will be stored under lock and key. Digitally stored data is protected by recognised anti-hacking, anti-virus programmes and behind an enhanced firewall.

Access to your personal data is only given to those who have a business need to know it. They can only access it with on our instructions. All Company Directors and Administration staff are subject to a confidentiality agreement

We have procedures in place to deal with any suspected personal data breach. We’d let you and the UK Information Commissioner know of a breach where we’re required to do so.

How we share your information

We may share your personal information with the following:

HMRC and Government agencies, regulators and other authorities when required to by law.
Our Board of Advisors.
Our professional advisers including auditors, lawyers, bankers and insurers who provide professional advice, accounting, banking, legal, insurance, or to meet our audit responsibilities.
If you’ve given consent for us to share your data with a third party, we may pass your data onto that third party.
Fraud prevention agencies.
A party linked with you or your business’s products or services.
Organisations that introduce you to us.

If you choose not to give Personal Information

Not providing your Personal Data may prevent us from meeting legal obligations, fulfilling a contract or performing services required and may mean we are unable to provide you with our services.

Transferring Personal Data outside the European Economic Area

The data protection legislation restricts transfers of personal data to countries outside the European Economic Area (EEA) in order to ensure that the level of data protection afforded to data subjects is maintained. The Company does not transfer personal data to countries outside the EEA.

Marketing

We may use your personal information to tell you about relevant services, products and offers. This is what we mean when we talk about ‘Marketing’.

The personal information we have for you is made up of what you tell us, and data we collect when you buy our products, use our services or from third parties we work with. We may study this to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant to you.

We can only use your personal information to send you marketing messages if we have either your consent or a ‘legitimate interest’. That is when we have a business or commercial reason to use your information.

You can ask us to stop sending you marketing messages by contacting us at any time at admin@markmypapers.com.

Whatever you choose, you’ll still receive correspondence, invoices and other important information connected to the services we have supplied to you.

Your rights in connection with your personal information

As a data subject, you have a number of statutory rights. Subject to certain conditions, and in certain circumstances, you have the right to:

Request access to your personal information – this is usually known as making a data subject access request and it enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
Request rectification of your personal information – this enables you to have any inaccurate or incomplete personal information we hold about you corrected.
Request the erasure of your personal information – this enables you to ask us to delete or remove your personal information where there’s no compelling reason for its continued processing.
Restrict the processing of your personal information – this enables you to ask us to suspend the processing of your personal information, e.g. if you contest its accuracy and so want us to verify its accuracy
Object to the processing of your personal information – this enables you to ask us to stop processing your personal information where we are relying on the legitimate interests of the business as our legal basis for processing and there is something relating to your particular situation which makes you decide to object to processing on this ground
Data portability – this gives you the right to request the transfer of your personal information to another party so that you can reuse it across different services for your own purposes.

If you wish to exercise any of these rights, please contact us at admin@markmypapers.com. We may need to request specific information from you in order to verify your identity and check your right to access the personal information or to exercise any of your other rights. This is a security measure to ensure that your personal information is not disclosed to any person who has no right to receive it.

In the limited circumstances where you have provided your consent to the processing of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. This will not, however, affect the lawfulness of processing based on your consent before its withdrawal. If you wish to withdraw your consent, please contact us. Once we have received notification that you have withdrawn your consent, we will no longer process your personal information for the purpose you originally agreed to, unless we have another legal basis for processing.

If you believe that the Company has not complied with your data protection rights, you have the right to make a complaint to the Information Commissioner’s Office (ICO) at any time. The ICO is the UK supervisory authority for data protection issues.

Changes of business ownership and control

Mark My Papers Ltd may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of Mark My Papers Ltd. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this privacy policy, be permitted to use the Data for the purposes for which it was originally supplied to us. We may also disclose Data to a prospective purchaser of our business or any part of it. In these instances, we will take steps with the aim of ensuring your privacy is protected.

Changes to this privacy notice

The Company reserves the right to update or amend this privacy notice at any time. We will issue you with a new privacy notice when we make significant updates or amendments. We may also notify you about the processing of your personal information in other ways.

Contact

If you have any questions about this privacy notice or how we handle your personal information, please contact us at admin@markmypapers.com

Data controller: Mark My Papers Ltd

Date 1^st July 2023