Privacy notice - IDL

Data controller and contact details

Scottish Borders Council (including your child's school) is the data controller. We are responsible for ensuring your child's personal information is handled safely and lawfully.   

Protecting your child's identity

Before using any application, we assess if we can achieve our goals without using personal data:

  • Anonymisation: We use non-identifiable data where possible for general reporting.
  • Pseudonymisation: Teachers use anonymised names and create usernames and passwords for pupils, reducing the use of directly identifying inforamtion within IDL.   

Information we use and why

We have determined that the minimum data required to run IDL is: an anonymised first name and surname, a teacher-created username and password, date of birth and assessment scores. We use this to:

  • Create and manage the correct pupil account and provide access to IDL literacy and numeracy activities.
  • Measure progress, calculate standard scores against age-related expectations, and help teachers plan appropriate learning and intervention.

Legal basis and safety measures 

  • Lawful Basis: We process this data under Public Task, as it is part of our official legal duty to provide education and monitor pupil progress under the Education (Scotland) Act 1980 and the Education (Scotland) Act 2016.
  • Security: We have conducted a Data Protection Impact Assessment (DPIA). IDL uses secure servers, encryption and other security measures, and access is restricted to authorised teacher administrators and a very limited number of IDL staff where needed to provide the service.
  • Retention: Learner data is held while the school’s annual subscription is active. If the subscription ends, IDL deletes learner data, including backups, approximately one month after the contract ends. Schools must also delete accounts when pupils leave, move school or no longer need the service.

Data sharing and decision making

  • Who sees it: Access is restricted to relevant school staff and IDL (the provider). IDL uses Amazon Web Services (AWS) to host and store the service data in the UK. IDL and its service providers may only process the data to provide and support the service.
  • Progress information: Teachers can view completed lessons, task results, standard scores, and the start and end time of activities. A very limited number of IDL staff can access scores only where required to produce a report requested by the school.
  • No Automated Decisions: IDL does not make automatic decisions about your child. A teacher uses their professional judgment to decide the next steps for your child.

Your rights and complaints 

Depending on your child’s age and capacity (usually from age 12 in Scotland), they or their parent/guardian can ask to access or correct their data, restrict its use, or object to the processing. For concerns or to exercise these rights, please contact the Headteacher or visit: scotborders.gov.uk/DPYourRights.

Complaints: Please contact us at dataprotection@scotborders.gov.uk first. You also have the right to contact the Information Commissioner’s Office (ICO): Phone: 0303 123 1113 | Web: ico.org.uk/concerns