1. INTRODUCTION
1.1 This Privacy Policy sets out how Markquill ("Company", "we", "us" or "our") collects, processes, stores, uses and discloses personal data when you access or use our online academic assessment and feedback platform (the "Platform") and related services (the "Services").
1.2 By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing and use of your personal data in accordance with its terms.
1.3 This Privacy Policy should be read together with our Terms of Service and any other policies made available on the Platform.
2. PERSONAL DATA WE COLLECT
2.1 We may collect personal data that you voluntarily provide to us, including your name, email address, account credentials, educational information, uploaded examination papers, answer scripts, coursework, feedback requests, communications and any other information submitted through the Platform.
2.2 We may also automatically collect technical and usage information when you access the Platform, including your IP address, device information, browser type, operating system, access times, pages viewed and interactions with the Platform.
2.3 Where you choose to include personal information within uploaded submissions or communications, such information may also be processed by us for the purposes of providing the Services.
3. HOW WE USE PERSONAL DATA
3.1 The Company may collect, process, use, store and otherwise handle personal data for all purposes reasonably necessary or incidental to the operation of the Platform and the provision of the Services.
3.2 Without limiting the generality of Clause 3.1, personal data may be processed for the purposes of:
- (a) creating, administering and maintaining user accounts;
- (b) processing and assessing academic submissions;
- (c) generating marking reports, grades, annotations and educational feedback;
- (d) communicating with Users regarding their accounts, submissions or the Services;
- (e) processing payments and preventing fraudulent transactions;
- (f) monitoring compliance with the Terms of Service;
- (g) detecting, investigating and preventing fraud, abuse, unauthorised access or other unlawful activities;
- (h) improving, testing and developing the Platform and Services;
- (i) conducting internal audits, quality assurance, staff training and operational reviews;
- (j) complying with legal, regulatory and contractual obligations; and
- (k) any other purpose reasonably connected with the operation of the Platform or Services.
4. LEGAL BASIS FOR PROCESSING
4.1 Where applicable data protection laws require a legal basis for processing, we rely on one or more of the following grounds: the performance of a contract with you, your consent, compliance with legal obligations and our legitimate interests in operating and improving the Platform.
4.2 Our legitimate interests include maintaining platform security, preventing misuse, improving service quality, conducting analytics and ensuring the efficient operation of our business.
5. DISCLOSURE OF PERSONAL DATA
5.1 The Company may disclose personal data to its employees, directors, officers, contractors, professional advisers, affiliates and authorised service providers where such disclosure is reasonably necessary for the operation of the Platform or the provision of the Services.
5.2 Personal data may also be disclosed to third-party service providers engaged by the Company, including providers of cloud hosting, payment processing, cybersecurity, customer support, analytics, communications, software development, artificial intelligence tools, data storage and other technology services.
5.3 The Company may disclose personal data where required or permitted by applicable law, regulation, court order, governmental authority or regulatory body, or where the Company reasonably believes such disclosure is necessary to:
- (a) comply with legal obligations;
- (b) enforce these Terms or any other agreement;
- (c) investigate suspected unlawful activity;
- (d) prevent fraud or security incidents;
- (e) protect the rights, property or safety of the Company, its Users or any third party; or
- (f) establish, exercise or defend legal claims.
6. DATA RETENTION
6.1 We retain personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including the provision of the Services, compliance with legal obligations, dispute resolution, fraud prevention and enforcement of contractual rights.
6.2 Retention periods may vary depending on the nature of the personal data and the applicable legal or operational requirements.
6.3 The Company may retain personal data beyond the closure of a User account where continued retention is reasonably necessary for legal compliance, regulatory requirements, fraud prevention, dispute resolution, enforcement of contractual rights, quality assurance, internal auditing or legitimate business purposes.
7. DELETION AND BACKUP COPIES
7.1 Users may request deletion of their personal data where permitted by applicable law.
7.2 We may retain certain information where continued retention is necessary for legal, regulatory, security, accounting or dispute resolution purposes.
7.3 Backup copies of data may continue to exist for a reasonable period following deletion in accordance with our disaster recovery and business continuity procedures.
7.4 The Company shall not be obliged to delete any information where retention is required by law, necessary for the establishment, exercise or defence of legal claims, required for fraud prevention, security monitoring or legitimate business operations.
8. DATA SECURITY
8.1 We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
8.2 Such measures may include access controls, encryption where appropriate, secure servers and monitoring of platform activity.
8.3 Notwithstanding the foregoing, no method of transmission over the internet or electronic storage is completely secure and we do not guarantee absolute security of personal data.
8.4 Users acknowledge that the transmission of information over the internet is inherently insecure and that the Company cannot guarantee that information transmitted electronically will be free from interception, corruption, delay or unauthorised access.
9. INTERNATIONAL TRANSFERS
9.1 Personal data may be transferred to, stored in or processed in jurisdictions outside your country of residence where we, our affiliates or our service providers operate.
9.2 Where such transfers occur, we will take reasonable steps to ensure that personal data receives an appropriate level of protection in accordance with applicable data protection laws.
9.3 By using the Platform, Users expressly consent to the transfer, storage and processing of their personal data in jurisdictions where the Company's service providers or infrastructure are located, provided that the Company implements reasonable safeguards where required by applicable law.
11. ANALYTICS AND SERVICE IMPROVEMENT
11.1 We may collect and use aggregated, anonymised or pseudonymised data for analytics, performance monitoring, research and service improvement purposes.
11.2 Such data may be used to improve marking consistency, enhance user experience, develop new features and support internal quality assurance processes.
11.3 Where data has been anonymised such that it can no longer reasonably identify an individual, we may retain and use that information indefinitely.
12. COMMUNICATIONS
12.1 By using the Platform, you consent to receive electronic communications from us relating to the Services.
12.2 Such communications may include account notifications, security alerts, transactional messages, updates to our policies and, where permitted by law, marketing communications.
12.3 You may opt out of marketing communications at any time, although you may continue to receive essential service-related communications necessary for the operation of your account.
12.4 Users acknowledge that certain communications relating to account security, legal notices, billing, maintenance, changes to policies or the provision of the Services are mandatory and cannot be opted out of while the User maintains an account.
13. CHILDREN'S PRIVACY
13.1 The Platform may be used by students under the age of 18.
13.2 Where required by applicable law, we may seek consent from a parent or legal guardian before processing personal data relating to a minor.
13.3 We do not knowingly collect more personal data from minors than is reasonably necessary for the provision of the Services.
14. USER RIGHTS
14.1 Subject to applicable law, users may have rights to access, correct, update, restrict, object to or request deletion of their personal data.
14.2 Users may also have the right to withdraw consent where processing is based on consent.
14.3 Requests relating to personal data may be submitted using the contact details provided below.
14.4 The exercise of any data subject rights shall be subject to applicable law and the Company reserves the right to refuse or limit any request where permitted by law, including where compliance would adversely affect the rights of another person, prejudice ongoing investigations, compromise security or conflict with the Company's legal obligations.
15. CHANGES TO THIS PRIVACY POLICY
15.1 We may amend this Privacy Policy from time to time to reflect changes in our practices, operational requirements or legal obligations.
15.2 Any updated version will be made available on the Platform and will take effect from the date specified in the updated policy.
15.3 Continued use of the Platform after any amendment takes effect constitutes acceptance of the revised Privacy Policy.
15.4 The Company reserves the right to transfer, assign or disclose personal data as part of any merger, acquisition, corporate restructuring, sale of assets, financing transaction or transfer of all or substantially all of its business, provided that the recipient agrees to process such personal data in a manner substantially consistent with this Privacy Policy or as otherwise permitted by applicable law.
15.5 Where such a transaction occurs, Users acknowledge that their personal data may form part of the transferred business assets.
16. CONTACT INFORMATION
16.1 If you have any questions regarding this Privacy Policy or our handling of personal data, you may contact us using the contact details provided on the Platform.
16.2 The Company will use reasonable efforts to respond to privacy-related enquiries within a reasonable period.