Last updated:
Fast Feedback is committed to protecting the privacy and security of all users. This Privacy Policy explains what data we collect, how we use it, and your rights under UK GDPR.
1. Data Protection Summary
- All data is processed and stored on UK-based Microsoft Azure servers
- Data in transit is protected by SSL/TLS
- Data at rest is protected by encryption
- We never sell, share, or use personal data for marketing
- Data can be deleted on request at any time
Fast Feedback’s Data Protection Officer (DPO) is:
Tom Rye — tom@fastfeedback.co.uk
2. Free Teacher Accounts (No Personal Pupil Data)
Free teacher accounts are designed for sandbox use, experimentation, and training only. They must not be used with any real or identifiable pupil data.
Teachers with free accounts provide:
- First name
- Surname
- Email address
- Login credentials (passwords encrypted)
This data is processed under the lawful basis of Contract. No Data Processing Agreement (DPA) is required for free accounts.
3. School Accounts (Real Pupil Data)
Schools using Fast Feedback with real pupil or staff data must have a signed DPA in place. The school is the Data Controller, and Fast Feedback is the Data Processor.
We process the following data for school accounts:
- Teacher names and emails
- Pupil names (first + surname)
- Pupil quiz responses (typed or OCR-converted)
- Class/group associations
- Anonymous technical metadata such as IP addresses
We do not collect special category data. We do not store raw handwriting images after OCR processing unless explicitly required for debugging or auditing.
All pupil data is processed solely to deliver the Fast Feedback service.
4. OCR & AI Processing
Handwritten or scanned responses uploaded to the platform are processed using Optical Character Recognition (OCR).
Only the extracted text is saved; the original image is deleted unless needed temporarily for audit or system troubleshooting.
Extracted text may then be processed using an Azure-hosted GPT model for:
- Marking suggestions
- Reteach content generation
- Similarity scoring
Azure acts as a sub-processor under the school’s DPA. All processing is performed entirely within the UK Fast Feedback Azure tenant.
5. Cookies & Technical Data
Cookies may be used to:
- Keep you logged in
- Maintain secure user sessions
- Store user preferences
- Improve platform functionality
Disabling cookies may impact performance or prevent login.
Technical data such as:
- IP addresses
- Browser type
- Device information
may be collected for security, logging, and debugging purposes.
6. Data Retention & Deletion
- Free teacher accounts: teachers may delete their data at any time.
- School accounts: all pupil data is deleted at the end of the trial or upon request.
- Quiz questions: created or uploaded by teachers/schools may be retained to support the global question bank.
- Backups: may temporarily retain deleted items but are automatically erased after a fixed retention period.
Requests for deletion can be made via tom@fastfeedback.co.uk.
7. Your Rights
Under UK GDPR, you have the right to:
- Access your data
- Rectify inaccurate data
- Request deletion
- Restrict processing
- Object to processing
- Lodge a complaint with the Information Commissioner’s Office (ICO)
More information: www.ico.org.uk