Last updated: 22 October 2026

1. About this policy

This Privacy Policy explains how personal data is handled when you visit atpltests.com, create an account, use our learning tools, contact us, or make a payment or voluntary contribution.

The controller of personal data is ATPL Tests, operating ATPL Tests ("we", "our", or "us") from Poland. The platform is available to users worldwide. Our privacy contact is contact@atpltests.com.

This policy describes our processing practices. It does not replace a request for consent where consent is required.

ATPL Tests offers free access to the entire ATPL question bank, including all subjects, Practice and Mock Exams, alongside an optional paid ATPL Plus subscription. The data we process depends on the features you use and whether you subscribe to Plus.

2. Personal data we collect

The information processed depends on the features you use:

• Account and profile information: your email address, username, account credentials, account identifiers, registration details, and any name, avatar, or other profile information you choose to provide.
• Learning activity: answers, practice sessions, mock exam results, progress, session history, and related dates and activity records.
• Saved study content: collections, saved or marked questions, personal notes, flashcard activity, and study preferences where these features are used.
• Community and support content: comments, replies, mentions, question reports, messages sent to support, and related notification records.
• Membership and transaction information: membership status, subscription and renewal details, cancellation and expiry records, order history, payment or donation confirmations, transaction and payment-provider references, amounts, currencies, and billing information where applicable. This can include records of previous paid memberships.
• Technical and usage information: IP addresses, browser and device information, login and security records, pages or features used, and cookie or similar identifiers where applicable.

We receive information directly from you, generate records when you use the platform, and may receive transaction updates from payment providers.

Please avoid including unnecessary sensitive information or other people's personal data in notes, comments, reports, or support requests.

3. Why we process personal data

Where the GDPR applies, we use the following legal bases for the purposes described below:

• Providing accounts and learning services: creating and maintaining your account, saving study activity, calculating results, providing features you request, and applying the access permissions and usage limits associated with your Free or Plus plan. The basis is performance of our agreement with you, or steps you request before entering into it, under Article 6(1)(b).
• Memberships and transactions: administering Plus subscriptions, recurring payments, renewals, cancellations, donations, and related requests. The basis is Article 6(1)(b) where necessary for the relevant arrangement, and Article 6(1)(c) for applicable legal recordkeeping obligations.
• Support and service communications: responding to enquiries and sending necessary account, security, or transaction messages. The basis is Article 6(1)(b) where necessary to provide the service, or Article 6(1)(f) for our legitimate interest in responding to other enquiries.
• Security, moderation, and reliability: investigating errors and reports, preventing abuse, protecting accounts, moderating community features, and maintaining the service. The basis is Article 6(1)(f), reflecting our legitimate interests in operating a secure and reliable platform and protecting users.
• Optional analytics: understanding usage and improving the platform, on the basis of consent under Article 6(1)(a) where required. Optional tracking is not treated as necessary for an account merely because you use our website.
• Legal obligations and claims: meeting applicable legal requirements under Article 6(1)(c), and establishing, exercising, or defending legal claims under Article 6(1)(f).

We assess legitimate-interest processing against your rights and interests. If we introduce optional promotional emails, any consent required by applicable law will be requested separately.

Information needed to create an account or provide a requested feature must be supplied for that purpose. Without it, we may be unable to provide the account or feature. Optional profile details and consent to optional tracking are not required simply to maintain an account.

4. Notes, profiles, comments, and notifications

Personal study notes and collections are intended as account-specific features rather than community posts. Authorised administrators and service providers may access stored information where necessary for support, security, or service operation.

Profile information and comments may be visible to other users, depending on the feature and its visibility settings. Comments can be associated with your displayed name or username. Replies and mentions may generate notifications for the users concerned.

Do not assume that a comment is private. Information posted in areas accessible without an account may also be available to the public and search engines. Deleting an account may require separate handling of existing comments and replies; contact us if you want particular content reviewed for removal.

5. Cookies and similar technologies

The platform uses cookies and similar browser storage, including local storage, for purposes such as authentication, security, preferences, and, where enabled, analytics.

Storage strictly necessary to provide a service you explicitly request may be used without consent where permitted by law. Other storage or access requires prior consent where applicable law requires it.

Optional analytics choices can be managed through the website's cookie controls where provided. You may also contact us to withdraw consent or ask about your choices. Browser controls allow you to delete or block stored cookies and other site data, although this may affect sign-in or saved preferences. Browser settings do not replace any prior consent required for optional tracking.

6. Analytics and external services

Google Analytics: where enabled, this service helps us understand how the platform is used. Depending on configuration and your choices, it may process cookie identifiers, device and browser information, and information about interactions with the website. Such information should not be assumed to be fully anonymous. Google describes its practices in its Privacy Policy.

Google Search Console: we use this tool to understand the website's visibility and performance in Google Search. Its search-performance reports are distinct from tracking activity inside your learning account.

Stripe: we use Stripe to process ATPL Plus subscription payments, including recurring charges, and, where applicable, voluntary contributions. Stripe processes the payment and billing information needed to handle these transactions. We may receive transaction confirmations, customer and subscription identifiers, payment status, renewal and cancellation updates, and related records needed to administer your membership. Stripe may also process data for its own legal, security, and fraud-prevention purposes. See Stripe's Privacy Policy.

Other external payment pages or services identify the provider involved when you use them. Their handling of information is also governed by their own privacy notices.

7. Who receives personal data

We do not sell, rent, or trade your personal data. Information may be disclosed to:

• hosting, storage, backup, email-delivery, maintenance, and security providers supporting the platform;
• analytics providers, subject to the applicable configuration and consent requirements;
• payment providers when you choose to make a transaction;
• other users or the public where you choose to use a feature with that visibility;
• professional advisers and public authorities where necessary for legal obligations or legitimate legal claims.

Service providers acting as processors handle data on our instructions under the applicable data-processing arrangements. Some recipients, including payment providers for certain activities, act as independent controllers.

8. International processing

Users may access ATPL Tests worldwide. Service providers may also process information in countries outside Poland or the European Economic Area (EEA).

Where a transfer of personal data outside the EEA falls under the GDPR, the applicable transfer requirements must be met. Depending on the recipient and destination, the relevant mechanism may be an adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, with additional measures where necessary.

Contact us for information about the destinations and safeguards applicable to a particular provider or transfer, and how to obtain a copy or explanation of relevant safeguards.

9. How long information is kept

Retention depends on the purpose and category of information:

• Account and learning records: while your account remains in use, unless you delete particular records using available features or exercise an applicable right to erasure. Following account closure, retention is limited to information still needed for the purposes described below.
• Changing or ending a Plus subscription: returning to Free does not by itself delete your account, learning history, notes, or collections. Free-plan limits may restrict access to some saved content or features while the associated data remains stored under the retention rules described in this policy.
• Comments and replies: while the relevant discussion remains available, subject to moderation and applicable deletion requests. Account closure does not necessarily remove every contribution automatically.
• Support correspondence and reports: for the handling and resolution of the matter, and afterwards only where needed for a related dispute, security issue, or applicable legal obligation.
• Security and technical records: for a limited period determined by their diagnostic or security purpose and, for records relevant to an incident, the time needed to investigate and address it.
• Transaction records: for the period required by applicable accounting, tax, or other recordkeeping laws, and where necessary for related claims.
• Analytics and browser storage: according to the relevant tool's configured retention or expiry settings, your choices, and the applicable legal requirements.

Backup copies can remain until their scheduled replacement or deletion. Account deletion does not imply immediate erasure from every backup. Retention after a deletion request remains subject to applicable legal requirements and safeguards.

Where retention is necessary for claims, the applicable limitation period and any pending proceedings determine how long the relevant records are needed. You can contact us for more information about the retention applying to your data.

10. Your privacy rights

Subject to the conditions and exceptions in applicable law, your rights may include:

• access to your personal data and a copy of it;
• correction of inaccurate or incomplete information;
• erasure of personal data;
• restriction of processing;
• objection to processing based on legitimate interests, and to direct marketing;
• portability of eligible data where processing is automated and based on consent or a contract;
• withdrawal of consent at any time, without affecting processing lawfully carried out before withdrawal.

These rights are not described as being available only to EU residents. Where our processing falls under the GDPR, the rights it provides apply according to its scope and conditions. Other applicable privacy laws may provide additional rights.

To make a request, email contact@atpltests.com. We may request proportionate information to verify your identity. For GDPR requests, we normally respond within one month. If a permitted extension is necessary because of complexity or the number of requests, we will notify you within that month and explain the reason.

You may complain to a competent data-protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO): uodo.gov.pl/en. Where applicable, you may also complain to the authority in the country of your habitual residence or place of work.

11. Account closure and deletion

You can update account information using available account settings and contact us to request account closure or deletion of personal data.

Deletion rights are subject to legal exceptions. We may retain information necessary for a legal obligation or the establishment, exercise, or defence of legal claims. We will explain any applicable reason for refusing or limiting a request.

Where applicable, data may instead be anonymised so that it no longer identifies you. Existing comments, transaction records, and backup copies require handling according to the relevant purposes and legal requirements described above.

Cancelling a Plus subscription and requesting account deletion are separate actions. Cancellation alone does not request erasure of your personal data. If you want to close your account and have an active subscription, please also check its cancellation status or contact us so we can help address both requests.

12. Children and younger users

ATPL Tests is designed for aviation study and is not specifically directed at young children. Requirements relating to younger users depend on applicable law and the particular processing involved.

Where processing relies on consent and applicable law requires a parent or guardian to authorise that consent, the required authorisation must be obtained. A single age threshold is not assumed to apply in every country.

If you believe that a child's personal data has been collected or used without the required legal basis or authorisation, contact us so that we can investigate and take appropriate action.

13. Security and learning calculations

We use technical and organisational measures designed to protect personal data, including access controls and secure connections. No online service can guarantee absolute security. Keep your account credentials confidential and notify us of suspected unauthorised access.

The platform automatically calculates practice and mock exam results and learning statistics from your activity. These are study features; they do not issue official aviation qualifications or make licensing decisions.

14. Changes and contact

We may update this policy to reflect changes to the platform, data-processing practices, or legal requirements. The updated version will show a revised date. Where required by law, we will provide an additional notice or request fresh consent before the relevant processing takes place.

For privacy questions or requests, contact:
Trading as ATPL Tests
Operated from Poland
Email: contact@atpltests.com
Website: https://atpltests.com