Privacy Policy

Last updated: 6 April 2026

1. Who we are

Hasan Consultancy Limited, a company registered in England and Wales under company number 15706745, whose registered office is at Littlehaven House, 24-26 Littlehaven Lane, Horsham, West Sussex RH12 4HT, trading as Marky, ("we", "us", "our") provides AI-powered exam marking software for schools. We are the data processor for student data and the data controller for teacher and school administrator data. Our contact email is hello@markyedu.com.

2. What data we collect

We collect and process the following categories of personal data:

  • Teacher & administrator accounts: Name, email address, school name, role, and login credentials (hashed).
  • Student data: Name, class group, and exam paper submissions (uploaded by teachers). Student data is processed on behalf of the school under a data processing agreement.
  • Parent accounts: Name, email address, and linked student relationships.
  • Usage data: Pages visited, features used, and timestamps.
  • Contact form submissions: Name, email address, school, and message content.

3. How we use your data

  • To provide AI-powered marking, analytics, and feedback services.
  • To manage user accounts and access control.
  • To generate reports, grade predictions, and revision materials.
  • To respond to enquiries and provide support.
  • To improve the accuracy and reliability of our marking algorithms.

4. Legal basis for processing

We process personal data under the following legal bases (UK GDPR):

  • Contract: To deliver the services agreed with your school.
  • Legitimate interest: To improve our service and ensure security.
  • Consent: Where required, such as for optional communications.
  • Legal obligation: To comply with UK law, including education regulations.

5. Student data & AI training

Student data is never used to train AI models. Student papers and results are processed solely to deliver marking results to the school. Data is retained only for the duration specified in the school's data processing agreement.

6. Data storage & security

  • All data is stored in the UK, in the London (europe-west2) region. This covers the application database, uploaded papers and audit logs.
  • AI processing is carried out by our AI sub-processor and is not pinned to a single region: exam paper text may be processed in the EU or in other regions operated by that provider. Stored data does not leave the UK region.
  • Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
  • Access is controlled via role-based permissions with audit logging.
  • We conduct regular security reviews and maintain incident response procedures.

7. Data sharing

We do not sell personal data. We share data only with:

  • Cloud infrastructure provider: Hosting and storage (data processing sub-processor).
  • AI model providers: Exam paper text is sent to AI APIs for marking. No student names or identifiers are included in API requests.
  • Contact form provider: Enquiries submitted through the contact form (your name, email address, school and message) are delivered by a third-party form-handling service. It is used only to pass the enquiry to us and holds no student data.

A complete, current list of our sub-processors, naming each provider, is available to schools on request and is provided as part of our data processing agreement. We will give notice before adding or replacing a sub-processor.

8. Data retention

Student data is retained for the duration of the school's subscription plus 90 days, then permanently deleted. Account data is retained until the account is deleted or the subscription ends. Contact form submissions are retained for up to 2 years.

9. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data (Data Subject Access Request).
  • Rectify inaccurate data.
  • Request erasure of your data.
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time.

Schools can export all student data via our DSAR export feature. To exercise your rights, contact hello@markyedu.com.

10. This website

This marketing website does not use cookies, tracking pixels, or analytics scripts. No personal data is collected or stored when you browse these pages. The Marky application (accessed after login) is governed by the data practices described above.

11. Children's data

Marky processes student data on behalf of schools. Schools are responsible for obtaining appropriate consent or establishing a legal basis for student data processing. We do not collect data directly from children without school authorisation.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to schools via email. The "last updated" date at the top reflects the most recent revision.

13. Contact

For privacy-related enquiries, contact us at hello@markyedu.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).