1. Data Controller

SHAMEER AHAMED LTD("we", "us", "our") is the data controller for personal data processed through Boost My Mark. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We collect and process the following data:

Account data: Email address and authentication details (managed by Clerk)
Submitted answers: Text and images you submit for marking
Marking results: AI-generated feedback, marks, and levels
Usage data: Number of marking attempts, IP address for usage tracking
Payment data: Payment details processed by Stripe (we do not store card numbers)
Technical data: Browser type, device information, and cookies

3. Legal Basis for Processing

We process your data under the following legal bases:

Contract: To provide the marking service you have requested
Legitimate interest: To prevent fraud, abuse, and to improve the Service
Consent: For analytics cookies (you can withdraw consent at any time)
Legal obligation: To comply with tax and accounting requirements

4. How We Use Your Data

To provide AI-powered marking and feedback on your submitted answers
To manage your account and process payments
To track and enforce free trial limits
To improve the accuracy and quality of our marking service
To communicate with you about the Service

5. Data Sharing

We share data with the following third-party processors:

Clerk (authentication) — processes your email and login credentials
Stripe (payments) — processes payment information
OpenRouter / OpenAI (AI processing) — processes submitted answers to generate marks and feedback
Cloudflare (hosting) — serves the website and may process technical data
Google Cloud (infrastructure) — hosts the backend API and database

Some of these processors may transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

6. Cookies

We use the following types of cookies:

Essential cookies: Required for authentication and core functionality (always active)
Analytics cookies: Help us understand how you use the Service (require consent)

You can manage your cookie preferences through the cookie banner or your browser settings.

7. Data Retention

Account data: Retained while your account is active, deleted within 30 days of account deletion
Submitted answers and results: Retained for the duration of the exam season (until August)
Payment records: Retained for 6 years as required by UK tax law
Usage tracking data: Retained for 12 months

8. Your Rights (UK GDPR)

You have the right to:

Access your personal data
Rectify inaccurate personal data
Erase your personal data ("right to be forgotten")
Restrict processing of your personal data
Data portability — receive your data in a structured format
Object to processing based on legitimate interest
Withdraw consent for analytics cookies at any time

To exercise any of these rights, contact us at privacy@boostmymark.com. We will respond within 30 days.

9. Children's Privacy

Boost My Mark is intended for GCSE students aged 13 and above. Users under 18 should have parental consent before using the Service. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), secure authentication, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.

11. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. Contact

For privacy-related queries, contact us at privacy@boostmymark.com

Privacy Policy