Our Commitment to Your Privacy
At AssessMinds ("we," "us," or "our"), protecting your privacy is a priority. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use our website and services (the "Platform"), including data relating to teachers, school staff, and — where the relevant feature is enabled — students. Please read this policy carefully to understand our practices regarding personal data and how we treat it.
This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
For the purposes of UK data protection law, AssessMinds acts as the data controller for personal data processed through the Platform, except where otherwise agreed in writing with an institution. If you are a student, your school or institution has arranged for your data to be added to the Platform by an authorized administrator on your behalf.
Information We Collect
We collect and process the following categories of personal data:
- Account information: first name, last name, and email address (or other login identifier) for teachers, school staff, and — where applicable — students, added by an authorized Institution Admin.
- Assessment data: assessment results, marks, and related performance information entered by teachers or institutions.
- Technical information: device and browser information, IP address, and cookies (see "Cookies & Tracking Technologies" below).
- Usage data: pages visited, actions taken, and interactions with the Platform.
We do not knowingly collect any special category data (such as health or ethnicity data) through the Platform.
Lawful Basis for Processing
We process personal data on the following legal bases under UK GDPR: performance of a contract with the institution providing the Platform to its staff and students; our legitimate interests in operating, securing, and improving the Platform, where those interests are not overridden by your rights; and, where applicable, compliance with a legal obligation.
How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Platform, including displaying assessment data to authorized teachers and administrators.
- Communicate with account holders about updates, support, or (where a teacher/admin has agreed) marketing.
- Analyze trends and usage in aggregate to improve the Platform.
- Produce anonymized or aggregated statistics that do not identify any individual.
We do not use student data for advertising, and we do not build advertising profiles of any user.
Children's Data
Student accounts are not currently supported but are planned for a future release. Where student accounts are introduced, they will be created only by an authorized Institution Admin, and the data collected about a student will be limited to a first name, last name, and an email address or other identifier used for login, together with their assessment results. We do not permit students to self-register, and we will handle any student data in line with the ICO's Age Appropriate Design Code once this feature is available.
Sharing Your Information
We do not sell or rent personal data. We may share data only with:
- Trusted service providers who help us operate the Platform (for example, hosting providers), under contractual obligations to protect the data.
- Regulatory authorities, where required by law.
- A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to equivalent privacy protections.
International Transfers
Where personal data is transferred outside the UK, we take steps to ensure it receives an equivalent level of protection, such as reliance on the UK's International Data Transfer Agreement (IDTA) or an adequacy decision, as applicable.
Data Retention
We retain personal data for as long as the associated institution's account remains active. When an individual account is deleted, the login is deactivated and can no longer be used to access the Platform; the associated personal data may continue to be retained for internal statistical and analytical purposes. You or your institution may request erasure, correction, or restriction of personal data at any time using the contact details below, and we will consider the request in line with applicable law.
Data Security
We use industry-standard security measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. However, no online platform is completely secure, and we cannot guarantee absolute security of data. In the event of a personal data breach, we will notify affected parties and the Information Commissioner's Office (ICO) where required by law.
Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you. |
| Rectification | Request correction of inaccurate or incomplete data. |
| Erasure | Request deletion of your personal data, subject to our legal obligations and the retention terms above. |
| Restriction | Request that we limit how we use your data in certain circumstances. |
| Objection | Object to processing based on our legitimate interests. |
| Portability | Request your data in a portable format, where technically feasible. |
If you are a student or staff member, requests are usually best directed to your institution's Institution Admin first, as they may hold the underlying consent record. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been mishandled.
Cookies & Tracking Technologies
We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Platform is used. You can manage or disable cookies through your browser settings; disabling essential cookies may affect your ability to use the Platform.
Third-Party Links
The Platform may contain links to third-party websites. We are not responsible for the privacy practices or content of external sites. We encourage you to review their privacy policies before interacting with them.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this policy periodically. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
AssessMinds
Email: assessmindsonline@gmail.com