Privacy policy

Who we are

GCSE Feedback is the trading name of GCSE Feedback Ltd, registered in England and Wales, 71-75 Shelton Street, London WC2H 9JQ. We are the data controller for the personal data described here. Contact us at privacy@gcsefeedback.co.uk.

What we collect

• Account details: name, email address, password hash, and year group or subject where you give them.
• Purchase records: what was bought, when, and the payment reference returned by our payment processor. We never see or store full card numbers.
• Uploaded work: photographs or scans of the scripts you submit for marking, plus the marker's annotations and reports.
• School and tutor contacts: name, role, institution and email for organisational accounts.
• Usage data: pages visited, device type and approximate location derived from IP, used only in aggregate.

Why we use it

We process account and purchase data to perform our contract with you. We process uploaded scripts to deliver the marking you paid for. We process usage data on the basis of legitimate interests, to keep the service working and to understand which pages help. We send marketing email only where you have opted in, and every message carries an unsubscribe link.

Who sees your script

A script is visible to the assigned marker, to a moderator when a piece is sampled for quality assurance, and to support staff resolving a specific query. Markers work under a confidentiality agreement, access scripts through our platform only, and may not download or retain them.

Children's data

Most students using GCSE Feedback are 14 to 16. Accounts for under-16s must be created and paid for by a parent, guardian or school, who is the account holder. We do not send marketing email to a student account and we do not use student data for advertising or profiling of any kind.

How long we keep it

• Marked scripts and reports: for the life of your account, so you can re-read them.
• Account data: deleted within 30 days of you closing the account.
• Purchase and invoice records: six years, as UK tax law requires.
• Aggregate, non-identifying performance statistics: retained indefinitely.

Processors we use

We use third parties for payment processing, transactional email, cloud hosting and error monitoring. All are bound by data processing agreements and all store data in the UK or EEA, or under approved transfer safeguards.

Your rights

You may request a copy of your data, correct it, have it erased, restrict or object to processing, or ask for it in a portable format. Email privacy@gcsefeedback.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We use a small number of cookies: one to keep you signed in, one to remember your basket across gcsefeedback.co.uk and app.gcsefeedback.co.uk, and privacy-respecting analytics that do not track you across other websites. No advertising cookies are set.

Changes

When we change this policy materially we will email account holders at least 14 days beforehand. The date at the top always reflects the current version.