Parents' Guide to Data Protection & GDPR in the Double Marker Project

Welcome to the Double Marker project, designed by No More Marking. We partner with your child's school to deliver high-quality, diagnostic feedback on GCSE English Language and Literature mock examinations while significantly reducing teacher marking workloads.

We understand that your child's data privacy is of paramount importance. This guide explains how we collect, process, and protect student data in strict compliance with UK GDPR and Data Protection legislation.

1. Key Roles: Who Controls Your Child's Data?

Under the UK General Data Protection Regulation (UK GDPR):

• The School is the Data Controller: The school retains legal ownership and ultimate control over your child’s personal data. We only process data based on the school's explicit, written instructions.
• No More Marking is the Data Processor: We act on the school's behalf to provide secure, cloud-based assessment services. We do not have a direct contract with pupils or parents; instead, we operate under a legally binding Article 28 GDPR agreement with the school.

2. What Personal Data Do We Collect?

We only collect and process the absolute minimum data necessary to allocate grades and generate detailed academic feedback [30]. This is limited to:

• First Name and Last Name (used solely to associate exam marks with the correct pupil in school reports)
• Date of Birth (optional)
• Year Group and Gender
• Teaching or Registration Class (optional)
• Pupil Premium Status (optional, to help schools monitor group-level progress)
• Scanned images of written mock exam scripts
• Typed transcriptions of student writing

No Special Category Data: We do not collect or process any sensitive personal data (such as medical records, biometric data, or ethnicity) for written mock examinations.

3. How is Your Child's Data Protected?

We have invested heavily in secure, modern infrastructure to protect pupil information [34]:

• Data Residency (Ireland): All persistent pupil data, including scanned images of exam papers, is hosted securely on Amazon Web Services (AWS) S3 servers located in Ireland (EU).
• Secure Database: Our primary database storing school and student information is hosted on MongoDB Atlas, running on secure AWS infrastructure in Ireland.
• State-of-the-Art Encryption: All data transferred between the school and our platform is encrypted using modern SSL protocols and ciphers (TLS 1.2+). Data is also encrypted at rest (when stored on disk).
• Rigorous Staff Vetting: Internal access to data is strictly restricted to personnel who require it for their job roles. UK-based staff undergo enhanced Disclosure and Barring Service (DBS) checks. Philippine-based technical support staff may remotely access secure cloud systems for quality checks, but data is never stored or transferred offshore to the Philippines; all offshore staff work under standard UK employment contracts and undergo equivalent National Bureau of Investigation security clearance.

4. How is AI Used, and Is My Child's Data Safe?

The Double Marker system uses advanced, enterprise-grade Artificial Intelligence (AI) to transcribe handwritten mock scripts and run an initial Comparative Judgement analysis.

We have established strict legal safeguards to ensure absolute privacy:

• STRICTLY NO AI MODEL TRAINING: Under our enterprise agreements, our AI sub-processors (Google Gemini and OpenAI) are strictly prohibited from training their models on your child’s writing, scripts, or personal data.
• Anonymised Processing: Before any marking begins, we use Google Cloud Vision (restricted to EU servers) to perform initial document checks to separate handwritten responses from student-identifying details (like names printed on front covers). This ensures that the primary marking is focused purely on the work itself.
• Transient Data Handling: When AI processing occurs, the data is encrypted in transit, processed instantly, and only held temporarily (up to a maximum of 30 days solely for abuse monitoring) before being permanently deleted from the AI sub-processor’s systems. No personal student data is permanently stored in the United States.

5. How Long is Data Kept?

• Active Subscriptions: We retain your child's assessment data for as long as the school holds an active subscription, enabling teachers to track academic progress over time.
• School Control over Erasure: The school has absolute control over data deletion. If a school deletes an exam task, all associated pupil data, scanned scripts, and transcriptions are permanently and immediately erased from our platform.
• Right to Erasure: Schools can request complete data removal at any time by emailing support@nomoremarking.com We will permanently delete all requested data within 5 working days.

Further Questions?

If you have any questions regarding your child’s participation in the Double Marker project, please contact your school's designated coordinator. You can also view our full privacy practices at www.nomoremarking.com/contact.

Updated on: 19/08/2026