Privacy Policy
Last updated: January 9, 2026
Introduction
ATL Portfolio ("we", "our", or "us") is committed to protecting the privacy and security of students, teachers, and educational institutions using our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our ATL (Approaches to Learning) portfolio management system.
Information We Collect
Student Information
- Name, email address, and profile picture
- School, programme (PYP/MYP/DP), class, and year group
- ATL evidence submissions including reflections, media files, and self-assessments
- Progress data and proficiency levels across ATL skill categories
- Personal learning goals and achievements
Teacher & Administrator Information
- Name, email address, and professional profile
- School affiliation and teaching assignments
- Assessment feedback and proficiency ratings for students
School Information
- School name, logo, country, and IB programmes offered
- Email domain for authentication purposes
- Subscription and billing information
How We Use Your Information
- To provide and maintain the ATL Portfolio platform functionality
- To enable students to document and reflect on their ATL skills development
- To allow teachers to assess student evidence and provide feedback
- To generate progress reports and analytics for students, teachers, and coordinators
- To facilitate communication between students and teachers regarding assessments
- To improve our services and develop new features
- To process subscription payments and manage school accounts
Data Access & Sharing
Within Your School:
- Students can view their own evidence, assessments, and progress
- Teachers can view and assess evidence from their assigned students only
- Coordinators can view aggregated analytics and student progress within their programme
- School Admins can manage users and view school-wide data
Third-Party Sharing:
We do not sell, trade, or share student data with third parties for marketing purposes. We may share information with:
- Service Providers: Trusted vendors who assist in operating our platform (hosting, payment processing)
- Legal Requirements: When required by law or to protect rights and safety
Data Security
We implement industry-standard security measures to protect your information, including:
- Encrypted data transmission (HTTPS/SSL)
- Secure authentication and authorization systems
- Role-based access controls to limit data access to authorized users only
- Regular security audits and updates
- Secure cloud infrastructure with data backup and recovery
Student & Parent Rights
Students and their parents/guardians have the right to:
- Access and review the student's personal information and portfolio data
- Request corrections to inaccurate or incomplete information
- Request deletion of student data (subject to school record-keeping policies)
- Withdraw consent for data processing (may affect ability to use the platform)
- Export portfolio data in a portable format
To exercise these rights, please contact your school administrator or reach out to us directly at the contact information below.
Data Retention
We retain student portfolio data for the duration of the student's enrolment in the IB programme and for a reasonable period thereafter as determined by the school's policies. Schools may request data deletion when a student graduates, transfers, or when the school's subscription ends. Billing and transaction records are retained as required by law.
Cookies & Tracking
We use essential cookies to maintain user sessions and authentication. We do not use tracking cookies or third-party analytics that collect personal information.
Children's Privacy (COPPA & GDPR)
Our platform is designed for educational use by students aged 5-18. We comply with applicable children's privacy laws including COPPA (Children's Online Privacy Protection Act) and GDPR. We collect only information necessary for educational purposes and require schools to obtain appropriate parental consent before student accounts are created.
International Data Transfers
Your data is stored and processed in data centers located in the United Kingdom. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify schools and users of any material changes via email or through the platform. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
ATL Portfolio Support
Email: privacy@atlportfolio.com
For school-specific inquiries, please contact your school administrator first.