Articles on: GDPR

Privacy Statement Australia

Last Updated: 18 August 2025


Introduction


Privacy and security are at the heart of everything we do at No More Marking Ltd. This policy outlines how we collect, hold, use, and disclose personal information. We provide a suite of secure, cloud-based products to schools to improve assessment. In providing these services, we process personal information on behalf of the schools that instruct us. For the purposes of privacy law, your school is the primary entity that controls your information, and we process it based on their instructions. This policy explains our commitments to protecting your privacy.


Our Name and Contact Details


If you have any questions about this policy or our privacy practices, please contact us:


What Personal Information We Collect and Hold


We only collect the minimum personal information required to provide our assessment services to schools. The school provides this information to us. This may include:

  • Student Information: First Name, Last Name, Date of Birth, Year Group, Gender, and optional identifiers such as UPN, class group, or Pupil Premium status.
  • Student Work: Scanned images of written work and typed responses submitted for assessment.
  • Teacher Information: Email address, text comments, and audio comments related to assessments.


How We Collect and Hold Personal Information


How We Collect Information

Your school collects your personal information and uploads it to our secure platform, typically via a spreadsheet file. Scanned images of student work are also uploaded by the school for assessment.

How We Hold and Secure Information

We take the security of personal information very seriously. We hold information on secure cloud infrastructure and protect it through a range of measures. Encryption: All personal information is transported using modern encryption (SSL/TLS). Information is also encrypted "at rest" when stored on our systems. We use field-level encryption for certain personally identifiable data where necessary. Secure Storage: Our primary data storage and databases are hosted by Amazon Web Services (AWS) and MongoDB Atlas in data centres located in Ireland. Access Controls: Internal access to personal information is strictly limited to staff who require it to perform their jobs. We use role-based identities and password protection for all our systems. Staff Vetting: All staff with access to personal data undergo security checks, such as the Disclosure and Barring Service (DBS) check in the UK or the equivalent National Bureau of Investigation check in the Philippines.


Why We Collect, Use and Disclose Personal Information


The purpose of collecting, holding, and using your personal information is to provide our assessment services to your school. This includes: associating assessment scores with the correct students for analysis and reporting back to the school, processing student work using our comparative judgement methodology, using Artificial Intelligence (AI) to mark multiple-choice tests, and transcribing teacher audio comments to produce reports for pupils. We may share anonymised extracts of writing for research purposes. We do not sell your personal information or share it with third parties for their own marketing purposes.


Disclosure of Personal Information


We only disclose personal information in the following circumstances: To Your School: As the primary purpose of our service is to provide assessment results and analysis back to your school. To Our Service Providers (Sub-processors): We use a number of third-party service providers to help us deliver our platform. We have agreements in place that require them to protect your information. These include providers for AI processing, website hosting, database management, user authentication, and customer support. As Required by Law: We may be required to disclose information if compelled by law.


Overseas Disclosure of Personal Information


To provide our services, we may disclose personal information to recipients located outside of Australia. We take reasonable steps to ensure these overseas recipients handle your information in accordance with the Australian Privacy Principles. The countries where your information may be disclosed are: The Philippines: Our directly employed technical support staff are based here and assist with checking assessment scripts. Ireland and other EU countries: Our primary website hosting, database, and customer support systems are located in data centres in Ireland, Germany, the Netherlands, and Belgium. United States: We use AI service providers (Anthropic and OpenAI) located in the US to help with tasks like transcribing audio comments and automated judging. We rely on contractual clauses with these providers to ensure an adequate level of data protection.


How to Access and Correct Your Personal Information


You have the right to request access to and correction of the personal information we hold about you. Because we process your information on behalf of your school, you should direct any requests for access or correction to your school in the first instance. We are committed to assisting schools with these requests. Upon receiving a request from your school, we will help them to provide you with access to your information or make any necessary corrections.


How to Make a Complaint


If you believe your privacy has been breached, please follow these steps: First, contact us using the details in this policy and provide the details of your complaint. We will investigate the issue and aim to resolve it with you promptly. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Updated on: 01/10/2025

Was this article helpful?

Share your feedback

Cancel

Thank you!