Your school or education organisation is the data controller for school teaching, assessment and feedback use. EduTestPro processes information on the controller's documented instructions except where law requires otherwise.
Primary lawful basis: UK GDPR Art. 6(1)(e) Public task.
Where special category data is processed (for example health/SEN/safeguarding context), additional legal conditions under UK GDPR Article 9 and the Data Protection Act 2018 apply.
Data is shared only where necessary with authorised school staff and approved processors (for example hosting, email and AI service providers) under contract and access controls.
Where providers process data outside the UK, the school applies approved transfer safeguards (for example UK IDTA/SCCs) and risk controls.
Data is retained according to the school retention policy and legal obligations. Automatic retention and archive settings are managed in the Compliance Centre.
This platform uses essential cookies only (session, authentication and security). We do not run analytics or advertising cookies.
You can make a data-protection complaint through the electronic account-holder route. The controller will acknowledge complaints and investigate them without undue delay.
Open the privacy request and complaints form
AI-generated outputs in this system are suggestions only. Final educational decisions are made by staff and are not fully automated.
For privacy requests or questions, contact your school office, data protection officer or privacy lead.
DPIA reference: Available from the school privacy lead.