Privacy policy

1. Who is responsible for your data

SmartServe Digital Solutions (Britam Tower, Upper Hill, Nairobi, Kenya) is the controller of the personal data described here, under Kenya’s Data Protection Act 2019 (and the UK GDPR, which applies to us because we offer services to students in the UK) and any other data-protection law that applies to you. Contact us at privacy@markready.co.uk.

2. What we collect

• Account details — name, email address, and optionally your country, university and level of study.
• Order content — your brief, the files you upload, and the messages you exchange with support and your tutor or editor.
• Payment records — amount, currency, status and a reference from our payment provider. We never receive or store your card number.
• Support conversations — chat transcripts, so we have a record of what was agreed.
• Technical data — aggregated, privacy-friendly analytics about how pages are used, and error reports when something breaks.

3. Why we use it, and on what basis

• To deliver your order — performance of our contract with you.
• To take payment and keep accounting records — contract, and legal obligation.
• To send service emails (receipts, status updates, delivery notices) — contract.
• To keep the service safe and enforce our integrity policy — our legitimate interest in preventing misuse.
• To send marketing email — only with your consent, and you can withdraw it from any such email.

4. Your academic work

Uploaded files are held in private storage and are not publicly accessible. Access is limited to you, the support staff handling your order, and the tutor or editor assigned to it. Access is granted through short-lived links rather than public URLs.

We do not publish, sell, resell or reuse your work, and we do not use it to train machine-learning models. We do not proactively report students to their institutions. We will disclose material only where we are legally required to, or where it is necessary to establish or defend a legal claim.

5. Who else processes your data

We use the following providers, each under contract and only to run the service:

• Supabase — Database, authentication and file storage.
• Vercel — Website hosting and delivery.
• Meta (WhatsApp) — Support conversations, including anything you send us in chat.
• Resend — Transactional email delivery.

Some of these operate outside your country. Where data is transferred internationally we rely on the safeguards those providers offer, such as standard contractual clauses.

6. How long we keep it

• Order files — 12 months after an order completes, then deleted. Ask us and we’ll delete them sooner.
• Account and order records — while your account is open, and afterwards for as long as we need them for accounting, tax and dispute-resolution purposes.
• Support conversations — up to 24 months.

7. Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can also withdraw consent to marketing at any time. Email privacy@markready.co.uk and we’ll respond within one month.

If you think we’ve got it wrong, you can complain to your local data-protection authority — but please tell us first so we can try to fix it.

8. Cookies and analytics

We use cookies that are necessary for the site to work, such as keeping you signed in. For analytics we use a privacy-friendly product that measures aggregate page usage without building advertising profiles or tracking you across other websites. Our support chat sets a cookie so a conversation survives a page refresh.

9. Security

Data is encrypted in transit and at rest. Database access is restricted by row-level security so one student’s records cannot be read by another. Staff and contractor access is limited to the orders they are working on. No system is perfectly secure, but if a breach affects your data we will tell you and the relevant authority as required.

10. Children

This service is intended for university students and is not directed at children under 16. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes

We’ll post updates here and change the date at the top. If a change materially affects how we use your data, we’ll email account holders.