Policy Statement
It is the policy of Alliant International University to fully comply with all applicable laws and regulations regarding collection and use and protection of consumer/private/personal/sensitive information.
Purpose of the Policy
The purpose of this policy is to disclose information gathering and dissemination practices for all Alliant International University’s (Alliant) website and other affiliated websites that are owned by Alliant and made available to students and prospective students, including but not limited to the Student Application, Student Portal, class discussion forums, and other Alliant online resources. All such sites will be collectively referred to in this Privacy Policy as the "Alliant Site" or "Site".
By applying to or enrolling in courses, or by applying and/or accepting employment at Alliant, or by using the Alliant Site, you accept and agree to this Privacy Policy and the Alliant Terms and Conditions of Usage. This Privacy Policy or any other content on the Alliant Site may be subject to change at any time. Your continued use of the Site following the posting of changes constitutes your acceptance of such changes.
Policy Details
I. What this Privacy Policy Covers
A. This Privacy Policy covers personally identifiable information, as defined by numerous statutes in the United States, including the California Online Privacy Protection Act and personal information, as defined by the California Consumer Privacy Act (the “CCPA”) and the California Privacy Rights Act (CPRA).
B. This Privacy Policy does not apply to information collected at any site that is not owned by Alliant, including any website reached through a link on any Alliant Site. Third-party websites are generally those that have a URL or web address other than Alliant.edu. The name and logo of Alliant may appear on third-party sites in order to notify students that the site contains information or materials specified for Alliant students or curriculum, but this Privacy Policy does not apply to information collected through the third-party sites. You are responsible for reviewing and understanding the privacy policies (if any) of any third-party websites you may access through the Alliant Site. Alliant does not assume responsibility for the privacy practices or accuracy of the sites not owned by Alliant.
C. The effective date of this Policy is January 1, 2020, with the latest updates on November 22, 2022.
D. Any changes we make to this Policy in the future will be posted on our websites and all related websites.
II. Information Alliant Collects
Alliant’s purpose for collecting personal information is to provide you with the best customer service and experience possible. We collect personal information that you voluntarily provide to us through the site when you sign up to receive more information about our programs or otherwise contact us through the forms or “chat” function that may be available on the site. We also collect information during the application, registration and matriculation process, and if you are enrolled as a student, when providing educational services to you or when you use pages of the site made available to you as a student.
Please view Alliant’s Notice of Collection here:
| Category | Examples | Collected Yes/No | In the preceding twelve (12) months, we have “sold” the following categories of personal information. |
| A. Identifiers. | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. | YES | NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
|
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). |
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. |
YES | NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
|
C. Protected classification characteristics under California or federal law. |
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | YES | NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
|
D. Commercial information. |
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
NO | NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
|
E. Biometric information. |
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. |
NO | NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
| F. Internet or other similar network activity. | Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. | YES | NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
| G. Geolocation data. | Physical location or movements. | NO | NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
| H. Sensory data. | Audio, electronic, visual, thermal, olfactory, or similar information. | YES | NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
|
I. Professional or employment-related information. |
Current or past job history or performance evaluations. |
YES | NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
|
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). |
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | YES | NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
|
K. Inferences drawn from other personal information. |
Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | YES | NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
|
L. Sensitive Personal Information. |
A consumer’s social security, driver’s license, state identification card, or passport number, a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account. A consumer’s precise geolocation. A consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership. The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication. A consumer’s genetic data. All other terms defined in the CPRA, or its implementing regulations have the same meanings when used in this notice. | NO (Information regarding race and ethnicity maybe collected for reporting purposes) |
NO (Alliant does not sell information to third parties as defined under the CCPA/CPRA). |
III. Retention Period
Alliant will process and store personal information for no longer than it is necessary for the purpose(s) specified in this policy, or as otherwise required by law or Alliant accreditation standards.
IV. Privacy of Children
Alliant is prohibited from selling personal information of consumers between the ages of 13 and 16 without first obtaining affirmative opt-in consent (1) from the consumer or (2) from a parent or legal guardian. Alliant educational programs and services are not directed to children under the age of 13. As such, Alliant does not knowingly request or collect information from children under the age of 13. It is possible that by fraud or deception Alliant may be provided or receive information pertaining to children under 13. Upon notification and verification, we will immediately delete the information pertaining to children under 13 from our servers. If you become aware that your child or any child under your care has provided us with information without your consent, please contact us immediately:
V. Information Alliant Collects Automatically
A. Our Site makes use of non-persistent anonymous session cookies to track anonymous aggregated statistics of the site. Cookies are files that websites send to your computer or other Internet-connected device to uniquely identify your browser or to store information or settings in your browser. Such cookies are stored after you leave our website, and then deleted by your browser. Web site functions are not hindered if you have cookies turned off. Please note, however, that without cookies, you may not be able to use all of the features of our Online Services. You can find more information about cookies at http://www.allaboutcookies.org and http://www.youronlinechoices.eu.
B. We may use third-party web analytics services on our Online Services, such as those of Google Analytics. These service providers use cookies and web beacons to help us analyze how users use the Online Services. The information collected by the cookies and Web beacons (including your IP address) will be disclosed to these service providers, who use the information to evaluate your use of the Online Services. Google Analytics transmits website use data to Google servers. Google Analytics does not identify individual users or associate your IP address with any other data held by Google. We use reports provided by Google Analytics to help us understand website traffic and usage of the Online Services. To find out more about Google Analytics use of data, please visit “How Google uses data when you use our partners’ sites or apps”, (located at http://www.google.com/policies/privacy/partners/) for more information. For information about how Google uses the information, see the Google Privacy Policy. To learn about opting out of Google Analytics, you may visit http://tools.google.com/dlpage/gaoptout.
VI. Interest Based Advertising
A. The Online Services permits data collection for internet-based advertising. Alliant and third-party vendors, including Google, use cookies to inform, optimize, and serve ads based on past visits to our Online Services. More specifically, the Online Services have implemented and use display advertising, and we utilize Google Analytics to implement a specific feature called remarketing. Remarketing is a feature of Google Ads that allows us to optimize the delivery of ad content specifically targeted to a visitor’s interests based upon previous visits to our Online Services. Please visit http://support.google.com/analytics/answer/2611268 for more information about remarketing lists in Google Analytics.
B. If you do not want to use the remarketing feature from Google, you can disable it by changing the appropriate settings at http://www.google.com/settings/ads.
C. There is also a Google Analytics opt-out browser add on that you can download at http://tools.google.com/dlpage/gaoptout/.
VII. What is NOT Personal Information
A. Publicly available information from government records.
B. De-identified or aggregated consumer information.
C. Information excluded from the CCPA/CPRA's scope, like:
- health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
- personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.
VIII. Use and Sharing of Information
A. We may use or disclose the personal information we collect for one or more business purposes including but not limited to:
- To fulfill or meet the reason for which the information is provided. For example, if you provide us your personal information in order to receive information about program offerings at Alliant.
- To provide you with email alerts, event registrations and other notices concerning Alliant, or events or news, that may be of interest to you.
- To improve our website and present its contents to you.
- For testing, research, analysis and continuous quality improvement.
- As necessary or appropriate to protect the personal, property or safety rights of us, our students, or others.
- To determine your student status during the enrollment process and may share information with governmental authorities and their contractors, with other institutions of higher learning and their contractors, and with our contractors that help us to communicate with such governmental agencies, institutions, and their contractors.
- To provide your personal information to our affiliated schools and branch campuses.
- Share your personal information with companies, individuals, contractors that provide support services to Alliant or students.
- To comply with federal regulations such as the Family Educational Rights and Privacy Act ("FERPA") or other governmental regulations or respond to law enforcement requests and as required by applicable law or court order.
- To comply with regional or professional accreditation standards.
- As described to you when collecting your personal information or as otherwise set forth in the CCPA/CPRA.
- For other legitimate academic and administrative operations such as fraud reduction, public safety or protection of property and other rights.
B. We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
C. Our site makes use of various forms. By submitting your e-mail address to Alliant.edu, through a form or e-letter sign up, your e-mail address may be automatically added to one of our email Newsletter Subscriber Lists, unless you choose not to subscribe by selecting “do not subscribe to newsletter” on the request form.
D. We may monitor and retain incoming and outgoing communications for quality assurance and training purposes.
E. Your email address and other information is protected by Alliant International University and will not be sold or redistributed to other third-party companies. We periodically send email Newsletters to our e-list about news, events and information about Alliant International University. You may opt out of receiving email Newsletters or email promotions at any time by clicking on the “unsubscribe” link at the bottom of our E-News or by contacting us at:
Phone: 1-858-635-4734
Email: Compliance@Alliant.edu
Postal Address:
Alliant International University
Attn: Office of Compliance
10455 Pomerado Road
San Diego, CA 92131
IX. Sharing Personal Information
A. We may disclose your personal information to a third party for business purposes. When we disclose personal information for a business purpose, we may enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
B. We disclose your personal information for a business purpose to the following categories of third parties:
- Our affiliates.
- Service providers. Third parties to whom you or your agents authorize us to disclose your personal information in connection with application, enrollment, matriculation or financial aid at Alliant.
- Partners- we may share information with third party partners such as identification and demographic information, transactional information, research and feedback, and social media information.
- Social Networks- we may share information with social media platforms. Depending on your privacy settings and actions on such network, we may share contact information, identification and demographic information, device information and identifier, connection and usage, and social media information.
- Service Providers- we engage vendors to perform services for academic and business purposes on our behalf and share information with them to enable them to provide us with services, including, but not limited to career services, research and analytics, hosting, transaction and payment processing, marketing, fraud prevention, identity management, acquisition and other services. Service providers may use such information for their operational purposes in order to provide their services to us.
- Federal, State, and Academic, Law Enforcement and other Authorities- we share any of the categories of information we collect, as appropriate, with these third parties to comply with reporting or disclosure requirements; protect and enforce the legal right, privacy, and safety of Alliant International University, our students and employees; protect against possible fraud or other illegal activity, and to otherwise comply with appropriate administrative and legal processes.
- Accreditors- we may share any of the categories of information we collect, as applicable, with accrediting entities.
- Sale or Transfer of All or Part of Our Business or Assets- In the event the Alliant International University is involved in a merger, acquisition, transfer of control, bankruptcy, reorganization or sale of assets, or diligence associated with such matters, we may share or transfer the information described in this Privacy Policy as part of that transaction.
C. We also may disclose “Directory Information” of students or graduates to alumni associations, professional organizations, or the Alliant Education Foundation. For more information about “Directory Information” please the section in this Privacy Policy entitled Family Educational Rights and Privacy Act ("FERPA").
D. Consumer or website visitor information is not sold or redistributed to any other companies or outside parties. In the preceding twelve (12) months, we have not sold any personal information. This notwithstanding, you may submit a request to not sell any of your personal information or limit the use of your personal information by using one of the links below:
X. Your Rights and Choices
A. The CCPA/CPRA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA/CPRA rights and explains how to exercise those rights.
You have the right, at any time, to direct Alliant to limit its use of the sensitive personal information it collects, to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer. You also have the right to “request to correct” inaccurate personal information that Alliant is or maybe maintaining about you.
B. Access to Specific Information and Data Portability Rights - You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
- The specific pieces of personal information we collected about you.
- The categories of personal information we have collected about you.
- The categories of sources from which the personal information is collected about you.
- Categories of personal information that we sold or disclosed for a business purpose about you.
- The categories of third parties with whom we share or to whom we sold or disclosed your personal information for a business purpose.
- The business or commercial purpose for collecting or selling personal information
- If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
- sales, identifying the personal information categories that each category of recipient purchased; and
- disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
XI. Deletion Request Rights
A. You have the right to request that Alliant delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your recent personal information from our records, unless an exception applies.
B. Your request will be denied where there is a need for Alliant to preserve evidence in litigation and avoid sanctions for spoliation of evidence.
C. We may also deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
- Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
- Comply with a legal obligation including compliance with state and federal regulations.
- Comply with accreditation standards
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
XII. Exercising Access, Data Portability, and Deletion Rights
A. To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:
- Calling us at 1-858-635-4734
- Emailing us at Compliance@Alliant.edu
- Visiting our website at the link:
B. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.
C. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
D. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
E. Making a verifiable consumer request does not require you to create an account with us. However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal information associated with that specific account.
F. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
G. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
“Disproportionate effort” within the context of a business responding to a consumer request means the time and/or resources expended by the business to respond to the individualized request significantly outweighs the benefit provided to the consumer by responding to the request. For example, responding to a consumer request to know may require disproportionate effort when the personal information which is the subject of the request is not in a searchable or readily-accessible format, is maintained only for legal or compliance purposes, is not sold or used for any commercial purpose, and would not impact the consumer in any material manner. In contrast, the benefit to the consumer of responding to a request to correct inaccurate information that the business uses and/or sells may be high because it could have a material impact on the consumer, such as the denial of services or opportunities. Accordingly, in order for the business to claim, “disproportionate effort,” the business would have to demonstrate that the time and/or resources needed to correct the information would be significantly higher than that material impact on the consumer. A business that has failed to put in place adequate processes and procedures to comply with consumer requests in accordance with the CCPA/CPRA and these regulations cannot claim that responding to a consumer’s request requires disproportionate effort.
XIII. Response Timing and Format
A. Alliant endeavors to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.
B. If you have an account with us, Alliant will deliver a written response to that account. If you do not have an account, Alliant we will deliver a written response by mail or electronically, at your option.
C. Any disclosures Alliant provides will only cover the 12-month period preceding the verifiable consumer request's receipt. The response Alliant provides will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, Alliant will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
D. Alliant does not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
XIV. Non-Discrimination/ Non-Retaliation
Alliant will not discriminate against you for exercising any of your CCPA/CPRA rights. Unless permitted by the CCPA/CPRA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
XV. Other California Privacy Rights
California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request you may email us at Compliance@Alliant.edu or by writing us as at:
Alliant International University
Attn: Office of Compliance
10455 Pomerado Road
San Diego, CA 92131
XVI. Individual Rights Under the EU GDPR
A. Individual data subjects covered by National University System EU General Data Protection Regulation Privacy Policy are afforded the following rights:
- Right of access – you have the right to request a copy of the information that we hold about you.
- Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
- Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
- Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
- Right of portability – you have the right to have the data we hold about you transferred to another organization.
- Right to object – you have the right to object to certain types of processing such as direct marketing.
- Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
- Right to judicial review – if Alliant refuses your request under rights of access, we will provide you with a reason as to why.
- Right to complain – you may make a complaint about how your personal data is being processed by Alliant.
B. All personal data and sensitive personal data collected or processed by Alliant and/or its affiliates complies with the security controls and safeguards of FERPA, GLBA, CCPA/CPRA and PCI.
XVII. Family Educational Rights and Privacy Act ("FERPA")
Alliant complies with the Family Educational Rights and Privacy Act of 1974 (FERPA), as amended, and the implementing regulations issued, which provide students with safeguards for the accuracy, completeness, and privacy of their educational records. Annual notice is given to students summarizing their rights under this law. Copies of Alliant’s policies and procedures under the Family Educational Rights and Privacy Act of 1974 are available on the Alliant website. Please note that FERPA is applicable to information you provide only if you are or become a student of Alliant. FERPA permits the disclosure of "directory information" without prior written consent. Alliant designates the following information as Directory Information: student name, student ID, address, telephone number(s), e-mail address, parent’s name(s), date and place of birth, major field of study, participation in officially recognized activities and sports, dates of attendance, degrees and awards received, and most recent previous school attended. Alliant may use and disclose directory information that students provide, as set forth in the FERPA policy published in the university catalog. If you do not want such information about you to be disclosed, please log into the Alliant portal and complete the Opt-in form under Profile/My Ferpa, or submit a written request to the registrar’s office at Registrar@Alliant.edu. Please note that you may opt out of disclosure of Directory Information only if you are now or become a student of Alliant.
Colorado Consumer Privacy Act (CPA)
If you reside in Colorado, you have the right to opt out of targeted, the sale of personal data, and certain types of profiling.
Nevada Privacy Rights
If you reside in Nevada, you have the right to ask us at any time to review the personal information that we have collected through our website or the services we provide and to request changes. Subject to the terms of applicable Nevada Law, you may also submit a request directing us not to sell certain covered personal information we have collected or will collect about you.
Virginia Consumer Data Privacy Act (CDPA)
If you are a reside in Virginia, you have the right to access data and request that businesses delete personal information.
Exercise Your Rights
To exercise your rights under the Colorado CPA, Nevada Privacy Rights Act, and the Virginia CDPA, you may contact us by calling 858-635-4734, emailing us at Compliance@Alliant.edu, or by writing us at:
Alliant International University
Attn: Office of Compliance
10455 Pomerado Road
San Diego, CA 92131
XVIII. Changes to Our Privacy Notice
Alliant reserves the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Website and update the notice's effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.
XIX. Contact Information
If you have any questions or concerns about this notice, the ways in which Alliant collects and uses your information described here and your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us by calling 1-858-635-4734, emailing us at Compliance@Alliant.edu or by writing us at:
Alliant International University
Attn: Office of Compliance
10455 Pomerado Road
San Diego, CA 92131