BMA Post Results Portal
Policies

In accordance with our legal obligations under the Data Protection Act 2018 ("DPA 2018"), the UK General Data Protection Regulation ("UK GDPR"), the Data (Use and Access) Act 2025 ("DUAA 2025") and the requirements of the Joint Council for Qualifications ("JCQ"), the policies relevant to the Brampton Manor Academy Post Results Portal ("the Portal") are provided below.

This page covers the Portal's privacy policy, information security practices, and support information.

This policy is supplementary to Brampton Manor Academy's existing policies, including the Academy's Privacy Notice for Pupils. Where there is any conflict or inconsistency between this policy and any existing Academy policy, the existing Academy policy shall prevail.

Privacy policy
Who we are

Brampton Manor Academy ("the Academy", "we", "our" or "us") is the controller of personal data obtained via the Portal. As controller, we are the organisation legally responsible for deciding how and for what purposes your personal data is used. We take your privacy very seriously.

Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share any information relating to you ("your personal data") in connection with your use of the Portal. It also explains your rights in relation to your personal data and how to contact us or a relevant regulator in the event you have a complaint.

This privacy policy is supplementary to, and should be read alongside, the Academy's Privacy Notice for Pupils, which can be found here. In the event of any conflict or inconsistency between this policy and the Academy's existing policies (including the Privacy Notice for Pupils), the existing Academy policy shall prevail.

What this policy applies to

This privacy policy relates to your use of the Portal only. The Portal is a secure online platform that enables students to:

  • Request post-results services, including exam script reviews, access to scripts, clerical re-checks, and appeals to the relevant awarding organisation; and
  • Re-enrol into the Sixth Form (for current Year 12 students), including declaring subject drop requests and future intentions.

Throughout the Portal we may link to other websites owned and operated by third parties, including awarding organisations and the Academy's main website. Those third-party websites may gather information about you in accordance with their own privacy policies. For privacy information relating to those websites, please consult their policies as appropriate.

Personal data we collect

The personal data we collect about you depends on the particular activities carried out through the Portal. We collect and use the following personal data:

  • Identity and contact information - your full name and school email address;
  • Account details - your login credentials and account activity on the Portal;
  • Examination information - the subjects, awarding organisations, and post-results services you request (including script reviews, clerical re-checks, and appeals);
  • Sixth Form enrolment information (where applicable) - your subject choices, subject drop requests, and future intentions as declared through the enrolment process;
  • Communications - any correspondence you send to us through the Portal or by email in connection with your requests; and
  • Usage information - information about how you access and use the Portal, including log data and session information.

You must provide the personal data marked as required on the Portal in order to use the relevant features. Where providing personal data is optional, we will make this clear at the point of collection.

How your personal data is collected

We collect personal data about you:

  • Directly - when you register for and use the Portal, submit a post-results service request, complete the Sixth Form re-enrolment process, or contact us through the Portal; and
  • From the Academy - we may receive or verify certain information about you (such as your enrolment status or examination entries) from the Academy's internal systems in order to administer your requests.
Who we share your personal data with

We share your personal data only where necessary. The organisations with whom we may share your personal data include:

  • Awarding organisations (such as AQA, OCR, Edexcel/Pearson, and WJEC/Eduqas) - to process your post-results service requests in accordance with JCQ procedures;
  • Amazon Web Services, Inc. ("AWS") - for secure cloud hosting and storage of Portal data in the eu-west-2 (London) region, and for the delivery of email notifications via Amazon Simple Email Service ("Amazon SES");
  • Academy staff - members of the Academy's examinations and sixth form teams who need access to your data to administer your requests; and
  • Regulators, law enforcement, and courts - where required or permitted by law, including the Information Commissioner's Office ("ICO"), the Office of Qualifications and Examinations Regulation ("Ofqual"), and other relevant authorities.
Cookies

The Portal uses strictly necessary cookies to enable core functionality, including maintaining your authenticated session while you are logged in. These cookies are essential to the operation of the Portal and are placed automatically when you access it. No consent is required for strictly necessary cookies.

We do not use cookies for advertising, analytics, or tracking purposes on the Portal. If this changes, we will update this policy and seek your consent where required by law.

Information Security

The Academy takes the security of personal data seriously and has implemented appropriate technical and organisational measures to protect personal data processed through the Portal against accidental loss, unauthorised access, alteration, disclosure, or destruction.

Specific measures include:

  • Encryption in transit - all data transmitted between your device and the Portal is encrypted using Transport Layer Security ("TLS");
  • Encryption at rest - all data stored by the Portal, including documents and database records, is encrypted at rest;
  • Access controls - access to personal data is restricted to Academy staff who have a legitimate need to access it in the performance of their duties;
  • Cloud infrastructure - data is held with Amazon Web Services ("AWS") in their eu-west-2 (London) region, which is subject to AWS's extensive physical, environmental, and technical security controls; and
  • Email security - automated email communications from the Portal are delivered via AWS Simple Email Service ("Amazon SES"), which provides authenticated and encrypted email delivery.

We also have procedures in place to respond to any suspected personal data breach. Where we are legally required to do so, we will notify you and the ICO of any such breach without undue delay.

Notwithstanding our security measures, you should be aware that the transmission of information over the internet is never completely secure. You are responsible for keeping your Portal login credentials confidential and for ensuring that you log out of the Portal when you have finished using it, particularly on shared devices.

Support

If you require assistance with using the Portal, including help with submitting a request or understanding a decision, please contact your Head of Year or the Examinations Office.

For questions about your personal data or this privacy policy, please contact the Academy directly.