Date of Last Revision: June 30, 2020
Consistent with this policy, we collect information in the following ways:
Information We Collect About You
Voluntarily Provided Information
Categories of personal information we may collect about you include:
- full name
- email address
- postal address
- social security number
- tax identification number
- identification number
- date of birth
- phone number
- course assignments (e.g., papers), and tests
- job title
- alien registration number
- financial data and documents
- academic data and documents
- identity verification data and documents
Please see Appendix A below for additional information on the categories of personal information that we collect.
We collect many of the types of personal information listed above directly from you when you use the Services or otherwise interact with us, especially as a student or applicant. In some cases, if you are enrolling in a course or program or buying books, or utilizing online commerce functions to purchase goods or services, you may be required to provide credit card information for billing purposes. If making a request for admission or transfer credit, you may also be required to provide information related to prior academic history, employment, or military service. If you choose not to provide this personal information, you may be unable to receive some of the services we offer.
We also collect personal information when you voluntarily provide it or make it available to us by (1) logging into, or creating an account on one of our online Services; (2) providing feedback to us through a feedback tool; (3) posting a review or making other comments on any Interactive Features (hereinafter defined) available in our online Services; or (4) logging-in to our online Services through a social media platform or similar tool, if available. Each manner in which we collect personal information about you identified above occurs only when you voluntarily provide information to us.
We may offer through our online Services public forums, newsfeeds, blogs, message boards, social media pages and similar tools (collectively, “Interactive Features”). The posts or comments you make on Interactive Features may be public and viewed by others. As such, you should use care before posting information about yourself, including personal information, online. You acknowledge and understand that you have no expectation of privacy or confidentiality in the content you submit to Interactive Features. Except where required by applicable law, we assume no obligation to remove personal information from postings to Interactive Features and you disclose any personal information in your postings at your own risk.
Information Created in the Course of Your Use of the Services
Cookies and Automatically Collected Information
We may collect the following information automatically through your use of the online Services:
- IP/MAC address
- online identifiers
- log-in details
- E-campus and course activity data.
Most browsers are initially set to accept cookies. You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether or not to accept it. You can find more information regarding management of your cookies at About Cookies.
Where required by applicable law, and in particular where automatically collected personal information is not strictly necessary for us to provide you with any part of the online Services you have specifically requested, we obtain your consent for the use of these automatic collection technologies, web beacons, and other tracking technologies described above through a website banner.
Our online Services may collect certain information automatically from your mobile device when you use one of our mobile applications, including the type of mobile device you use, your mobile device’s unique device identifier, your IP address, and information about the way you use our online Services. We use this information in an aggregate fashion to track access to our websites, but we do not disclose site usage by individual IP addresses, and web server logs are held for a period of time before being deleted from our systems.
Our online Services may collect precise information about the location of your mobile device, but only with your express consent. Once you have consented to the collection of the precise location of your mobile device, you may adjust this consent by managing your location preferences through the settings of your mobile device.
You can stop all collection of information by our online Services by uninstalling our mobile application through the standard uninstall process offered through your mobile device.
We may collect personal information about you from other sources, such as other academic institutions, social media platforms, the APUS learning management system, employers (at the request or consent of the student), and student data repositories.
Third Party Websites
We may provide links to third-party websites. You acknowledge that such links are provided for your convenience only and do not constitute an endorsement by us of such third-party websites. Since we do not control these third-party websites and are not responsible for the contents of any linked-to, third-party websites or any hyperlink in a linked-to website, we assume no responsibility for the privacy practices of such websites. We encourage you to review the privacy policies posted on those, and all, third-party websites.
How We Use Personal Information
We may use your personal information for the following purposes:
- Identification and authentication: We use your identification information to verify your identity when you access and use the online Services and to ensure the security of your personal information. This is so we can comply with our contractual obligations to you. We also use certain information to verify student identities and detect fraud during examinations (e.g., keystroke pattern information).
- Operating the Services and Providing Other Services to You: We process your personal information to provide the Services you have requested and other services for which we have an agreement with you, for example, if you are enrolled as a student or are seeking to enroll as a student. This is so we can comply with our contractual obligations to you or in furtherance of entering into a contract with you.
- Improving our Services: We analyze information about how you use the Services to provide an improved experience for our customers of all our Services, including product testing and site analytics. It is in our legitimate business interests to use the information provided to us for this purpose, so we can understand any issues with the Services and improve them.
- Communicating with you: We may use your personal information when we communicate with you, for example if we are providing information about changes to the terms and conditions or if you contact us with questions. It is in our legitimate interests that we are able to provide you with appropriate responses and provide you with notices about the Services.
- Marketing: We may use your personal information to send you newsletters or information about us or third party products and services that may be of interest to you. We may also analyze user personal information in order to better understand our users and their interests and inform our marketing strategies. It is in our legitimate business interests to provide more relevant and interesting advertising messages. Where necessary, we will obtain your consent before sending such marketing messages.
- Complying with our obligations: We may process your personal information to, for example, carry out fraud prevention checks or comply with other legal or regulatory requirements, where this is explicitly required by law. We may also process special categories of personal information, such as sex, race, and ethnicity in order to carry out obligations in the field of employment.
- Customizing your experience: When you use the Services, we may use your personal information to improve your experience of the Services, such as by providing interactive or personalized elements on the online Services and providing you with content based on your interests;
- We may also anonymize your personal information in such a way that you may not reasonably be re-identified by us or any other company, and may use this anonymized information for any other purpose.
Disclosures of Personal Information
We do not share, rent, swap or authorize any third party to use personal information submitted by users of our Services for the third party’s own purposes. However, certain laws may treat our sharing of personal information with third parties for certain advertising or analytics purposes as “sales.” Please see Appendix A below for further information about these disclosures. Applicable law requires businesses to disclose whether they have actual knowledge that they sell the personal information of minors under the age of 16. We confirm that we do not knowingly sell such information.
We may share your personal information with third parties under the following circumstances:
- Service providers and business partners: We may share your personal information with our service providers and business partners that perform marketing services and other business operations for us for the purposes set forth above. For example, we may partner with companies to process secure payments, fulfill orders, optimize services, serve online behavioral advertising, send newsletters and marketing messages, support email and messaging services, and analyze information.
- Affiliates: We may share your information with affiliated companies for the purposes set out above.
- Where required by law: We may share your personal information with law enforcement agencies, courts, other government authorities or other third parties where we believe necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party. Agencies that regulate our activities to which personal information may be disclosed include, but are not limited to: the U.S. Department of Education, The Higher Learning Commission of the North Central Association of Colleges and Schools, the Accrediting Bureau of Health Education Schools, agencies of the states of West Virginia, Virginia and Ohio, other state agencies, the U.S. Department of Veterans Affairs, other federal agencies, and/or the various military service branches.
- In the context of a transaction: We may share your personal information with potential transaction partners, service providers, advisors, and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell or transfer all or a portion of our assets or business. Should such a sale or transfer occur, we will use reasonable efforts to obligate the entity to which we transfer your personal information to use it in a manner that is consistent with this Privacy Notice.
We may also share de-identified aggregate information that may not reasonably be re-identified by us or any other company with third parties and advertisers so they can measure the effectiveness of any advertisements viewed in connection with our Services. For example, we may tell advertisers the number of users who clicked on a particular advertisement.
Family Educational Rights and Privacy Act (FERPA)
The Family Educational Rights and Privacy Act of 1974 (FERPA), as amended, requires certain educational institutions, including us, to establish and publish a written institutional policy regarding student privacy rights under FERPA. The law provides that except in limited circumstances the institution must not disclose, without appropriate consent, the education records of its students. For more information, please visit the applicable educational institution’s website.
Information Security and Storage
As part of our commitment to maintaining reasonable security, the organization has taken commercially reasonable steps to protect the information it has gathered about you, including adopting the Core Set of Principles developed by the Corporate Governance Task Force on Information Security Governance.
Our Services use Secure Sockets Layer (SSL) protocol for financial transactions and where personal information is submitted. We are in compliance with the Payment Card Industry Data Security Standard (PCI-DSS). We do not maintain credit card data in our systems, but securely transfer related information between us and payment processing and management service providers.
We retain your personal information for as long as we have a relationship with you and longer if for legitimate business purposes. When deciding how long to keep your personal information after our relationship with you has ended, we take into account our legal obligations. We may also retain records to investigate or defend against potential legal claims.
Non-U.S. Website Users
By creating an account or logging-in to our online Services from outside the United States, your personal information and other information will be sent directly to the United States for processing where data protection and privacy regulations may be different than other parts of the world, such as the European Union, and which may not offer an equivalent level of protection to that in the European Union or certain other countries.
We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to provide adequate protections for your personal information. For more information on the appropriate safeguards in place and to obtain a copy of such safeguards, please contact us at the contact information set forth below.
Customer Service and how to Acquire Additional Information
We are committed to providing every user -- including students, applicants, and other persons who contact us -- with prompt, high-quality support at all times. Email is the primary form of contact for users, including our students, and we encourage you to email us with questions, comments and concerns. You may also contact us by telephone. Additional information can be found at: https://www.apus.edu/about/contact/index.
Residents of the European Economic Area
If you are a resident of the European Economic Area (EEA), you have certain rights regarding the personal information we hold about you, subject to local law. These may include the rights to access, correct, delete, restrict or object to our use of, or receive a portable copy in a usable electronic format of your personal information. You also may have a right to lodge a complaint with your local data protection or privacy regulator.
We encourage you to contact us at the contact information set forth below to update or correct your information if it changes or if the personal information we hold about you is inaccurate. Where you have provided your consent to any use of your personal information, you can withdraw this consent at any time.
Please note that we may require additional information from you in order to honor your requests.
If you would like to discuss or exercise any rights you may have under law, please contact us at the contact information set forth below.
Residents of California
If you are a resident of California, you have certain rights pursuant to the California Consumer Privacy Act. These include the right to:
- Request information about the personal information that we collect about you and the manner in which we process and disclose that information;
- Obtain the specific pieces of personal information that we have collected about you within the past 12 months;
- Delete certain personal information that we have collected from you;
- Opt-out of our sale of any of your personal information to third parties; and
- You may go to this page to learn more about exercising this right: Do Not Sell My Personal Information
- Not be discriminated against as a result of exercising any these rights.
If you or your authorized agent would like to discuss or exercise such rights, please contact us at DataPrivacy@apus.edu with your first and last name, Student ID (if any), mailing address, and phone number, along with which right you would like to exercise, or contact us at: 1-888-712-0683. As a part of this process, we may use existing account verification systems and/or require that you or your authorized agent provide certain information to us for verification purposes.
Additionally, please see Appendix A for further detail on the categories of personal information that we collect and disclose.
Changes to this Policy
Our contact information is as follows. Where applicable law requires the identification of a controller, that is:
American Public University System, Inc.
111 West Congress Street
Charles Town, WV 25414
Collection and Disclosure of Personal Information
Category of Personal Information Collected
Do we disclose any information in this category to third parties for “business purposes?” If so, to whom?
Do we “sell” any information in this category to third parties? If so, to whom?
Characteristics of protected classifications under California or federal law
Internet or other electronic network activity information
Audio, electronic, visual, or similar information
Professional or employment-related information
Inferences drawn from other personal information