Privacy Policy

We collect video and audio data during exam sessions solely for the purpose of proctoring. This data is encrypted in transit and at rest using AES-256 encryption.

Personal information (name, email, organisation) is collected at account registration to identify users and manage access. Candidate identity documents may be captured during ID verification flows — these are processed and then discarded unless an institution requires retention.

Technical data including browser type, device identifiers, and connection quality are collected to maintain service performance and detect anomalies.

Exam session recordings and behavioral data are used exclusively to verify candidate identity and detect potential violations of exam rules. This data is never sold, licensed, or shared with third parties for commercial purposes.

We use account information to provide you with access to the platform, send service notifications, and process payments. We may use aggregated and anonymised data for product improvement.

We will never use candidate data to train AI models without explicit institutional consent.

Exam session recordings are retained for the period configured by your organisation (typically 30–90 days) and then permanently deleted. Administrators may adjust this within the platform settings.

Account data is retained for the lifetime of your account plus 30 days after deletion request, to allow for dispute resolution.

Payment records are retained for 7 years to meet UK financial regulations.

Under UK GDPR and relevant data protection laws, you have the right to access, correct, or delete your personal data at any time. Candidates may request access to their session data through their institution's administrator.

You have the right to object to processing, request data portability, or lodge a complaint with the Information Commissioner's Office (ICO) in the UK.

To exercise any of these rights, contact us at privacy@proctoredge.com.

ProctorEdge does not sell your data. We share data only with: (a) the institution that administered your exam, (b) service providers who process data on our behalf under strict data processing agreements, and (c) law enforcement where legally required.

All sub-processors are listed in our Data Processing Agreement available on request. Key sub-processors include cloud hosting (AWS/GCP), email delivery, and payment processing (Paystack, Stripe).

We apply industry-standard security practices including AES-256 encryption, TLS 1.3 in transit, SOC 2-aligned controls, multi-factor authentication for staff, and regular third-party penetration testing.

Data residency options are available for UK, EU, and Nigeria to support organisations with local data sovereignty requirements.

We use strictly necessary cookies for session management and authentication. We use analytics cookies (with your consent) to understand platform usage patterns. We do not use advertising cookies.

You may manage cookie preferences through the cookie banner on first visit or by contacting us.

Data Controller: Hulkpage Limited, 6 Brown Street, Northampton, NN1 2PE, United Kingdom.

For privacy queries: privacy@proctoredge.com

This policy was last updated in May 2026.