Updated on August 12, 2020 to include statement regarding EU Standard Contractual Clauses.
Updated on February 26, 2020 to include updated language about the United Kingdom.
Acadamigo respects your privacy and strives to keep all of your data safe and secure. We do not sell, rent, or lease any data to third parties.
Here's a simple summary of our service, practices, and policies:
With respect to personal data received or transferred pursuant to the Privacy Shield Framework, Acadamigo is subject to the investigatory and enforcement powers of the US Federal Trade Commission. In certain situations, Acadamigo may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Under the Onward Transfer Principle, Acadamigo remains responsible and liable for any personal data from EU member countries, the United Kingdom, or Switzerland that we share with third parties for external processing on our behalf.
If you have questions or concerns regarding our privacy practices, please contact us at firstname.lastname@example.org. If you have privacy or data-use concerns that we have not addressed to your satisfaction, please contact JAMS, our US-based third-party dispute resolution provider (free of charge) at https://www.jamsadr.com/eu-us-privacy-shield. In the event that your concern still hasn't been sufficiently addressed, you may be entitled to a binding arbitration under Privacy Shield and its Principles, described more fully at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
Our Data Processing Agreement (updated August 9, 2020) includes the EU Standard Contractual Clauses for data transfers between EU and non-EU countries.
We use Dropbox and Google Drive to provide a secure mechanism for you to transfer data to us, for us to transfer our reports back to you, and as a place for us to store your data and our work. By using our service, you consent to our use of Dropbox and Google Drive to store and transfer your data.
Both Dropbox and Google Drive comply with the General Data Protection Regulation and are certified by Privacy Shield. You can find their certifications by visiting https://www.privacyshield.gov/list.
Acadamigo does not offer or provide any products or services for students, and we do not collect personal data from them directly.
Schools send us data that they themselves have collected or that they have obtained from the IB.
That data typically includes only the IB-related information found in the Candidate, Subject, and Component CSV files and School Statistics PDFs downloaded from the IB.
Those files include:
Student names, IB registration numbers, IB personal codes, IB category, IB exam subjects and subject components for which the students were registered (including level and language), IB exam sessions (year and month), predicted, awarded, raw, moderated, and scaled IB marks, scores, and grades (including EE/TOK points), IB diploma outcomes and requirement codes, and IB school numbers.
Some schools send us additional student information to be used when producing their reports, including such things as gender, university outcomes, EAL status, inclusive arrangements, etc.
We accept this data from each school for the express purpose of providing our service, at their request, of producing our IB Score Reports, which are visualizations and statistical analyses of a school's IB results.
Our websites do not contain any third-party advertisements. They do have a few links to third-party sites, none of which promote other products or services.
If you send us an email, you are obviously sharing some personal information with us, such as your email address, your name as it appears on your email account, the IP address from which the email originated, and similar information regarding anyone you include in the email exchange. We will respond to your initial and subsequent emails and may send several follow-ups to ensure that we're being responsive.
If you are a client or have written us asking for information about our services, we may use your contact information to send reminder emails about ordering reports or to further inform you of the services we provide. We may also send surveys to clients to gather feedback about our services.
We will retain emails for as long as needed to provide contracted services. We will also retain and use emails as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
If you no longer wish to receive communication from us, please let us know at email@example.com. We will honor your request as soon as possible.
Our websites contain a list and map of schools that have ordered our reports. You can see the current list and map HERE. We also display unsolicited testimonials after receiving permission from the individuals who wrote them. You can see the testimonials HERE. Upon request by the appropriate individual, we will remove from our websites the name of any school or testimonial. If you have any questions or concerns, please contact us at firstname.lastname@example.org.
We strive to keep your personal information safe and secure at all times.
We maintain reasonable and appropriate physical, electronic, and procedural safeguards to help protect personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction.
We encourage schools to send us their data files by sharing a Dropbox or Google Drive folder with us.
Both Dropbox and Google Drive participate in the EU-US and Swiss-US Privacy Shield Framework. They also comply with the privacy and security requirements of many other countries and agencies. If you would like to check their compliance with particular legislation or their certification with a particular agency, please visit their websites or contact them directly.
Our accounts with Dropbox and Google Drive are protected with strong passwords and two-factor authentication. We encourage our clients to use the same methods to prevent breaches on their end. We are not responsible for the security of our clients' systems.
Our local hard drives are fully encrypted using AES-256 technology and strong passwords.
Unfortunately, no set of security safeguards is guaranteed to be impenetrable.
If you have any questions about the security of your personal information, please contact us at email@example.com.
Our reports analyze and display five years of data, and most of our client schools order new reports each year. So that schools only need to send us their most recent data files each year, we retain the data that we have received from schools, as well as the reports that we have produced for them. We will delete a school's data and their reports upon request, after confirmation from the appropriate individual.
We will retain school data for as long as needed to provide contracted services. We will also retain and use school data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Under the Privacy Shield Framework, residents of the EU, the United Kingdom, and Switzerland may request to review the personal information we maintain about them, and to correct, amend, or delete that information where it is inaccurate. To make such requests, please contact us at firstname.lastname@example.org. We will respond to your request within 30 days. We may limit or deny access to personal data in cases where, in our reasonable judgment, the burden or expense would be disproportionate to the risks to your privacy or where the rights of persons other than you would be violated, or as otherwise permitted by the Privacy Shield Principles.
We do not interact with students. If a student were to contact us requesting access or seeking correction or deletion of his or her data, we would direct the student to our client, the school. We would also notify and work with the school to reach an acceptable agreement that keeps everyone in compliance with all applicable laws and regulations.
If we are involved in a merger, acquisition, partnership, or sale of our assets, emails and client contact information may be transferred as part of that deal. We will not, however, transfer any student data, including IB Score Reports already produced, without explicit consent from the relevant school.