MarkMate

1. Introduction

MarkMate ("we", "our", or "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data.

2. Data Controller

MarkMate is the data controller for personal data collected through our service. For school-related data, schools may act as data controllers with us as a data processor.

3. Data We Collect

Account Information

Name and email address
Password (stored securely hashed)
School affiliation

Student Data

Student names
Assessment grades and feedback
Class assignments

Technical Data

IP address (for security purposes)
Browser type and version
Session information

4. How We Use Your Data

To provide and maintain our service
To authenticate you and keep your account secure
To communicate with you about your account
To process payments (via Stripe)

5. Legal Basis for Processing

Contract: Processing necessary to provide our service to you
Legitimate interests: Security, fraud prevention, service improvement
Consent: Where you have given explicit consent

6. Data Sharing

We share data with the following third-party processors:

Stripe: Payment processing
Wonde: School MIS integration (where enabled)

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it.

8. Your Rights

Under GDPR, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Erasure: Request deletion of your data
Portability: Receive your data in a portable format
Object: Object to processing based on legitimate interests
Restrict: Request restriction of processing

To exercise any of these rights, contact us at privacy@markmate.co.uk.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption, secure authentication, and regular security reviews.

10. Children's Data

Our service processes student data on behalf of schools. Schools are responsible for ensuring appropriate consent and legal basis for processing student data.

11. Cookies

We use essential cookies only. See our Cookie Policy for details.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the service.

13. Contact Us

For privacy-related inquiries, contact us at privacy@markmate.co.uk.

14. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data correctly.