麻豆传媒

Table of Contents

This Privacy Notice will inform you about:

• Types of Information the Academy Collects
• How We Collect Your Information
• How the Academy Uses Your Information
• Sharing Your Personal Information with Others
• Changes to Your Personal Information
• How Long We Keep Your Personal Information
• Children鈥檚 Privacy
• International Transfers of Your Personal Information
• How You Can Opt Out of Receiving Information from Us
• Additional Rights Applicable to European Union and EEA Residents
• Links
• Security of Personal Information
• Do Not Track
• Your California Privacy Rights
• Your Privacy Rights under Other US State Laws
• Updates to this Privacy Notice
• Our Contact Information

Types of Information the Academy Collects

We may collect the following types of Personal Information about you:

For Applicants and Students

• Your name and biographical information;
• Your physical address, email address, telephone number, or other contact information;
• Your gender, date of birth, passport number or national identity card details, country of domicile, and nationality;
• Information relating to your education, the school(s) you have attended, information regarding academic and extracurricular interests, and other student record-related information;
• Records related to your use of our facilities and services;
• Photographs, audio and/or video recordings you have sent us for identification badges or use in Academy files;
• Photographs, audio and/or video recordings of you while on campus or at Academy events;
• Information about your involvement, activities, and awards;
• Financial information including tuition, fees, financial aid, etc.;
• Information about your family or personal circumstances;
• Written and/or oral comments about you from your references;
• Sensitive Personal Information, including:
  • Information about your racial or national origin, or religious or similar beliefs;
  • Information about your health and medical conditions (e.g., disability and dietary needs); and
  • Biometric data.

For Alumni and Donors

• Your name and contact information, such as your address, email address, and telephone number, as well as your date of birth, passport number or national identity card details, country of domicile, and nationality;
• Your record of attendance at the Academy and at alumni events, as well as activities and awards for your service;
• Photographs, audio and/or video recordings you have submitted to us for use in Academy publications or online;
• Photographs, audio and/or video recordings of you while on campus or at Academy events;
• Financial information, including past donations and pledges;
• Information relating to your education and employment history; and
• Information about your family or personal circumstances.

For General Visitors to the Site

In addition to information that you choose to submit to us, we and/or our service providers may automatically collect and/or store certain information when you visit or interact with the Site (鈥�Usage Information鈥�). This Usage Information may be stored and/or accessed from your personal computer, laptop, tablet, mobile phone or other device (a 鈥�Device鈥�) whenever you visit or interact with our Site. Usage Information may include:

• Your IP address, IDFA, Android/Google Advertising ID, IMEI, or another unique identifier;
• Your Device functionality (including browser, browser language, operating system, hardware, mobile network information);
• Referring and exit web pages and URLs;
• The areas within our Site that you visit and your activities there, including remembering you and your preferences;
• Your Device location or other geolocation information, including the zip code, state or country from which you accessed the Site;
• Your Device characteristics; and
• Certain other Device data, including the time of day you visit our Site.

How We Collect Your Information

The Academy may collect Personal Information from or about you in a number of ways, for example:

From Applicants and Students

• From information you provide when you first express an interest in enrolling at the Academy;
• From information you provide when you seek admission to the Academy and complete other admissions-related processes and procedures, as well as when you enroll in courses;
• When you communicate with us by telephone, email, or via our website in order to ask questions or raise concerns;
• When you interact with us in person at events or during campus visits;
• When you interact with us during your time as a student at the Academy;
• From third party entities who you have requested or authorized to provide information, such as your previous or current school, potential colleges or universities to which you may apply, who may provide reference information about you, as well as other third-party individuals or entities that may provide information about you;
• Through the Academy鈥檚 school disciplinary procedures, the Lamont Health and Wellness Center, and/or the administration of student housing or financial services; and
• Through surveys, comment cards, and/or other feedback mechanisms.

From Alumni and Donors

• From the information you voluntarily provide to us: when you are graduating, sign up for an alumni event, make inquiries, raise concerns, or share what is going on in your life, make a donation to the Academy, or otherwise communicate with us by telephone, email, or via our website or in person at an alumni or other Academy event;
• From the information you voluntarily provide to the Academy or third parties with whom we partner when you sign up for an alumni event;
• From the information you voluntarily provide to other third-party entities to whom you have granted permission to share your information who may provide reference information about you; and
• From publicly available sources of information.
• The Academy also may combine personal information you provide to us with information available from external sources to gain updated contact information and/or a better understanding of our alumni and donors to improve our fundraising methods, products, and services.

Use of Cookies and Tracking Technologies

We may use various methods and technologies to store or collect Usage Information (鈥�Tracking Technologies鈥�). Tracking Technologies may set, change, alter or modify settings or configurations on your Device. A few of the Tracking Technologies used on the Site, include, but are not limited to, the following (as well as future-developed tracking technology or methods that are not listed here):

• Cookies. A cookie is a file placed on a Device to uniquely identify your browser or to store information on your Device. Our Site may use HTTP cookies, HTML5 cookies, Flash cookies and other types of cookie technology to store information on local storage.
• Web Beacons. A Web Beacon is a small tag (which may be invisible to you) that may be placed on our Site鈥檚 pages and messages.
• Embedded Scripts. An embedded script is programming code that is designed to collect information about your interactions with the Site, such as the links you click on.
• ETag, or entity tag. An Etag or entity tag is a feature of the cache in browsers. It is an opaque identifier assigned by a web server to a specific version of a resource found at a URL.
• Browser Fingerprinting. Collection and analysis of information from your Device, such as, without limitation, your operating system, plug-ins, system fonts and other data, for purposes of identification.
• Recognition Technologies. Technologies, including application of statistical probability to data sets, which attempt to recognize or make assumptions about users and devices (e.g., that a user of multiple devices is the same user).

We may use Tracking Technologies for a variety of purposes, including:

• To allow you to use and access the Site, including for the prevention of fraudulent activity and improved security functionality or to allow you to make use of cart or payment functionality;
• To assess the performance of the Site, including as part of our analytic practices or otherwise to improve the content, products or services offered through the Site;
• To offer you enhanced functionality when accessing the Site, including identifying you when you sign into our Site or keeping track of your specified preferences or to track your online activities over time and across third-party sites; and
• To deliver content relevant to your interests on our Site and third-party sites based on how you interact with our advertisements and/or content.

You can get more information about Cookies and Tracking Technologies, and instructions on how to opt out of cookies and certain tracking technologies, in our Cookie Policy.

How the Academy Uses Your Information

For Applicants and Students

We may use Personal Information (including Sensitive Personal Information) we collect from and about you during your application to and enrollment at the Academy for the following purposes:

• Recruiting and/or admitting you as a student at the Academy;
• Facilitating academic matters, including for:
  • The provision of our teaching, learning, and research services (e.g., registration, assessment, attendance, managing progress, discipline investigations, certification, and graduation);
  • Maintaining student records; and
  • Assessing your eligibility for financial aid;
• Providing you with educational services which may not be set out in our E Book, but which are nevertheless a part of our academic and educational mission;
• Providing library, IT, media, and other information services;
• Providing support of our core services in non-academic matters, including:
  • Safeguarding and promotion of students鈥� welfare;
  • Ensuring students鈥� safety and security;
  • Managing student employment and internships;
  • Managing student housing;
  • Managing the use of social media; and
  • Managing facilities on campus.
• Administering finances, such as tuition, fees, and financial aid;
• Providing other administrative functions, such as:
  • Carrying out research and statistical analysis;
  • Carrying out audits to ensure compliance with our regulatory and legal obligations;
  • Providing operational information;
  • Promoting our services;
  • Preventing and detecting crime;
  • Dealing with disciplinary actions;
  • Dealing with complaints and inquiries; and
• Facilitating any other purpose for which you provide us with your Personal Information.

We process your Personal Information because it is necessary for the execution of a contract with you (specifically, our annual Enrollment Contract) or in order to take steps at your request prior to entering into a contract, to comply with our obligations under applicable law, because you have provided consent for us to do so, and/or to protect your interests and/or the interests of others.

For Alumni and Donors:

We may process your Personal Information because it is necessary for the performance of our duties in carrying out our mission, vision, and values; our strategic plan; and our policies, as well as to fundraise, and for other legitimate business purposes.

For All Visitors to The Site and All Categories of Data Subjects:

In addition to the areas listed above, we also may process your Personal Information because it is necessary for our legitimate business purposes. In this respect, we also may use your Personal Information for any of the following:

• To monitor and evaluate the performance and effectiveness of the Academy, including by training our employees or monitoring their performance;
• To maintain and improve the academic, administrative, financial, and human resource management of the school;
• To promote diversity, equity, and inclusion throughout the Academy;
• To seek advice on our legal rights and obligations and to identify, contact, or bring legal action against someone who may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other students or faculty, visitors to the Academy, or anyone else who could be harmed by such activities.

We also may process your Personal Information for compliance with our legal obligations. In this respect, we may use your Personal Information for the following:

• To meet our audit, compliance, and regulatory obligations;
• For the prevention and detection of crime; and
• In order to assist with investigations (including criminal investigations) carried out by the police and other responsible authorities.

We also may process your Personal Information where:

• It is necessary for emergency medical purposes;
• It is necessary to protect your or another person鈥檚 vital interests; or
• We have your specific or, where necessary, explicit consent to do so.

Sharing Your Personal Information with Others

Third Party Advertising

We share information about your use of our Site, and your interaction with our ads on other websites with our advertising partners to provide you with targeted advertisements or marketing communications we believe may be of interest to you. These networks track your online activities over time and across third party websites and online services by collecting information through automated means, including through the use of the Tracking Technologies described above, and they use this information to show you advertisements that are tailored to your individual interests. The information they collect includes information about your visits to our Site, such as the pages you have viewed. This collection and ad targeting takes place both on our Site and on third-party websites that participate in the ad network. This process also helps us track the effectiveness of our communications and marketing efforts.

For more information about how targeted advertising works, visit the Network Advertising Initiative鈥檚 educational page .

You can opt out of targeted advertising by visiting the following:

Other

Aside from the instances described above, we may share your Personal Information:

• to comply with the law;
• to respond to claims or comply with legal process served on the Academy (e.g., a lawful subpoena, warrant, or court order);
• to enforce or apply our policies or agreements;
• to protect and defend our rights or property or that of our students, applicants, alumni, donors employees, visitors, or the public;
• in connection with a business transfer or sale;
• if we reasonably believe that an emergency involving immediate danger of death or serious physical injury to any person requires disclosure; and
• to other parties only with your consent.

For Students and Applicants

We also may share your Personal Information with certain third parties described below. In some cases, you will be asked to opt in to these data sharing arrangements. In those cases, you should carefully consider the possible impact that not opting in will have on provision of our core teaching, learning, and residential school services to you. Third party recipients may include:

• Our affiliates and contractors where there is a legitimate reason for their receiving the information, including:
  • Third parties who work with us to provide student support services (i.e., counseling, health services, etc.);
  • Third parties who are contracted to provide services such as dining, IT, and staffing;
  • Organizations operating software on our behalf; and
  • Internal and external auditors.
• Any study abroad programs in which you may participate;
• Governmental departments and agencies where we have a legal obligation to provide information;
• Crime prevention or detection agencies;
• Parents, guardians, and next-of-kin (where there is a legitimate reason for disclosure);
• Third parties conducting surveys;
• Third party communication providers; and
• Third party data services providers.

For Alumni and Donors:

We may share your Personal Information with our current or prospective students, administrators, staff, and other alumni. In some instances, we may use third parties to assist with fundraising efforts and collecting information about our alumni, their achievements and their updated contact information. We may also share information about your donations to the appropriate governmental agencies, should reporting be required.

Changes to Your Personal Information

We prefer to keep your Personal Information accurate and up to date. Please tell us promptly about any changes to the Personal Information you have voluntarily provided to us. This is particularly important with respect to your contact details.

Prospective Students: Please contact the Admissions Department by mail addressed to 鈥淎dmissions鈥� at the address provided at the end of this document or by email at admit@exeter.edu with 鈥淯pdate Personal Information鈥� in the subject line.

Students: Please contact the Dean of Students by phone at (603) 777-3411 or send a request by mail addressed to 鈥淒ean of Students鈥� at the address provided at the end of this document, or you may email dean_students@exeter.edu with 鈥淯pdate Personal Information鈥� in the subject line.

Alumni, Donors and all other interested parties: Please address your request to update your information to the 鈥淒irector of Business Institutional Advancement鈥� at the address provided at the end of this Notice, or you may email records@exeter.edu with 鈥淯pdate Personal Information鈥� in the subject line.

We will make good faith efforts to make requested changes in our then-active databases as soon as reasonably practicable (but we may retain prior information as business records). Please note that it is not always possible to completely remove or delete all of your information from our databases and that residual data may remain on backup media or for other reasons, such as a legitimate business reason.

How Long We Keep Your Personal Information

We will retain your Personal Information for as long as needed to meet the uses described in the 鈥淗ow the Academy Uses Information鈥� in compliance with legal document retention obligations. Even where you have exercised one of the rights listed below with respect to your Personal Information, we will have the right to retain your Personal Information for compliance with a legal obligation, for the performance of a task carried out in the public interest, for archiving purposes in the public interest, for scientific or historical research purposes, for statistical purposes, or for the establishment, exercise, or defense of legal claims.

Children鈥檚 Privacy

Protecting children鈥檚 privacy is important to us. For that reason, no part of our Site is targeted to attract anyone under the age of 13. Users from ages 13 to 15 must represent and warrant that they are visiting the Site under the supervision of a parent or guardian and we may ask your parent or guardian to provide prior written consent for you to use the Sites. While we may collect information of children under the age of 13 when they are prospective students, we do not solicit this information from the child directly 鈥� we will seek parental consent for any personal information provided for children under the age of 16. We also will not disclose or share the information of a user under the age of 16 with any third parties. The Academy also complies with the Children鈥檚 Online Privacy Protection Act (COPPA), and if you believe we have information regarding a child under the age of 16 that you have not authorized, you may contact us at the contact information at the end of this Notice to request that we delete it. Parents may find additional information about protecting your child鈥檚 privacy .

For GDPR purposes, the Privacy Notice is not directed to 鈥渃hildren,鈥� as defined per Member State implementation legislation. Where a prospective or current student is classified as a child, we will make reasonable efforts to verify that consent is given or authorized by the holder of parental responsibility over the child, where Personal Information of the child is to be processed.

International Transfers of Your Personal Information

The Academy is located in the United States. Some of the Personal Information we process about you will be transferred to, and stored at, a destination outside the European Union (鈥�EU鈥�), the European Economic Area (鈥�EEA鈥�), Switzerland and China. For example, all Academy employees are located outside the EU, the EEA, Switzerland and China and may process Personal Information; similarly, Personal Information may be processed by one of our suppliers who is based outside the EU, the EEA, Switzerland, China or who uses storage facilities outside the EU, the EEA, Switzerland or China. When we transfer personal data outside of these areas, we take steps to make sure that appropriate safeguards are in place to protect your Personal Information. Our transfers of your personal data outside of your country are safeguarded by data processing agreements (鈥�DPAs鈥�) incorporating Standard Contractual Clauses.

In these circumstances, your Personal Information will only be transferred on one of the following legal bases:

• Where you have provided explicit consent for the transfer;
• Where the transfer is occasional and necessary in relation to a contract or a legal claim;
• Where the transfer is made on the basis of an adequacy decision;
• Where the transfer is subject to one or more appropriate safeguards for international transfers prescribed by applicable law; or
• Where the transfer is necessary for the execution of a contract with you or in order to take steps at your request prior to entering into a contract.

How You Can Opt Out of Receiving Information from Us:

We give you many choices regarding our use and disclosure of your Personal Information for marketing purposes. (Please note that EU residents may have different options described below). You may opt-out from:

• Receiving electronic communications from us: If you no longer want to receive marketing-related emails from us on a going-forward basis, you may opt-out of receiving these marketing-related emails by sending a request for list removal to privacy@exeter.edu or following the instructions for unsubscribing in the email or original text message. If you are receiving text messages from us and wish to stop receiving them, simply respond with either 鈥淪TOP鈥� or 鈥淯NSUBSCRIBE鈥� to the number from which you received the message. You will not receive further text messages unless you opt back in. If you have provided your information to the Academy, and opt-out, the Academy will put in place processes to honor your request. This may entail keeping some information for the purpose of remembering that you have opted-out.
• Our sharing of your Personal Information with unaffiliated third parties for their (or their customers鈥�) direct marketing purposes: If you would prefer that we do not share your Personal Information on a going-forward basis with unaffiliated third parties for their direct marketing purposes, you may opt-out of this sharing by emailing privacy@exeter.edu from the email that you have signed up or used in receiving services from the Academy. Please include 鈥渙pt-out鈥� or similar language in the subject line. Text messaging data and consent will not be sold or shared with third parties or affiliates for their marketing or promotional purposes.
• Our providing of student contact details to contractors to carry out surveys. These contractors will use students鈥� details only for a specific purpose pursuant to our instructions and will then delete them. (If you do not wish to participate in any of these surveys, please inform the Dean of Students by phone (603-777-3411) or by using the contact details provided at the end of this Notice.)

SMS/Text Messaging Privacy

麻豆传媒 is committed to upholding the highest standards of privacy for all personal information collected through our text messaging services. We do not sell, rent, distribute, or trade your personal data to third parties without your explicit consent unless legally required to do so. Any information shared with third parties is exclusively for the purpose of delivering our services to you. We assure you that your data will never be shared with third parties for marketing purposes.

You have the right to access, correct, or delete your personal information at any time, and we are committed to handling your data in a secure and transparent manner.

If you no longer wish to receive text messages from us, you can opt out at any time by replying with the word 鈥楽TOP鈥� or 鈥楿NSUBSCRIBE鈥� to the number from which you received the message. Upon receiving your request, we will promptly remove you from our messaging list, and you will no longer receive further text communications from us.

Links

For your convenience, the Site and this Privacy Notice may contain links to other websites. Please be aware that the Academy is not responsible for the privacy practices, advertising, products, services, or the content of such other sites. You are encouraged to use common sense when sharing your Personal Information, and we encourage our users to be aware when they leave our site and to read the privacy notices of each and every website that collects personally identifiable information. None of the links on the Site should be deemed to imply that the Academy endorses or has any affiliation with the third-party link. This Privacy Notice applies solely to information collected by the Academy and not by any other sites or third parties.

Security of Your Personal Information

The Academy takes reasonable and appropriate measures to protect and secure Personal Information from loss, misuse, unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in the processing and the nature of the Personal Information. However, no data transmission over the Internet, mobile networks, wireless transmission, or electronic storage of information can be guaranteed to be completely secure. Accordingly, we cannot guarantee or warrant the security of any Information you transmit to or from our Site, and you provide us with your information at your own risk. Please see our Terms of Use for additional information.

Do Not Track

Do Not Track (鈥�DNT鈥�) is a web browser setting that requests that a web application disable its tracking of an individual user. When you choose to turn on the DNT setting in your browser, your browser sends a special signal to websites, analytics companies, ad networks, plug in providers, and other web services you encounter while browsing to stop tracking your activity. Various third parties are developing or have developed these signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer鈥檚 online activities over time and across third-party websites or online services, but there is currently no industry or legal standard for what a company should do when a DNT signal is detected. Because of this, we currently do not respond to DNT signals. You can learn more about Do Not Track .

Additional Rights Applicable to Residents of the European Union and EEA

If you are a resident of the EU or EEA, you have additional rights under the General Data Protection Regulation (鈥�GDPR鈥�), including the right to access, rectify, download or erase your information, as well as the right to restrict and object to certain processing of your information. While some of these rights apply generally, certain rights apply only in certain limited circumstances. We describe these rights below.

Under GDPR, you have the following rights:

• To obtain access to the Personal Information that we hold about you;
• To object on grounds relating to your particular situation to our processing activities where you feel they have a disproportionate impact on your interests, rights, and freedoms;
• If you believe that your Personal Information that we possess is, or has become, incorrect or is incomplete, you may request to review, revise, correct, or update any of the Personal Information we may have about you free of charge;
• To restrict the processing activities related to your Personal Information (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before Direct withdrawal);
• To request that we erase your Personal Information;
• To have Personal Information, which you have voluntarily provided to us, produced in a structured, commonly used, and machine-readable format, including for the purpose of transmitting it to another party; and
• To require us not to send you marketing communications.

If you are a resident of the EU or EEA, you may initiate a request to access, reject, correct, restrict, or erase your Personal Information, or where you may initiate a request for transfer of your Personal Information or initiate a request that we refrain from sending you marketing information by sending us a request at privacy@exeter.edu and write 鈥淕DPR Request鈥� in the subject line. You may also write to us at the address at the end of this Privacy Notice. Please note that the above individual rights are not absolute, and we may be entitled to refuse requests where certain exceptions apply. Please note that where our processing of your Personal Information relies on your consent and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services. Should you wish to raise a concern about our use of information (without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.

Additional Rights Applicable to Residents of China

If you are a resident of China, you have additional rights under the Personal Information Protection Law (鈥�PIPL鈥�), including the right to access, rectify, download or erase your information, as well as the right to restrict and object to certain processing of your information.

Under the PIPL, you have the following rights:

• To obtain access to the Personal Information that we hold about you;
• To object on grounds relating to your particular situation to our processing activities where you feel they have a disproportionate impact on your interests, rights, and freedoms;
• If you believe that your Personal Information that we possess is, or has become, incorrect or is incomplete, you may request to review, revise, correct, or update any of the Personal Information we may have about you free of charge;
• To restrict the processing activities related to your Personal Information (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before Direct withdrawal);
• To request that we erase your Personal Information;
• To have Personal Information, which you have voluntarily provided to us, produced in a structured, commonly used, and machine-readable format, including for the purpose of transmitting it to another party; and

By providing your Personal Information listed above to us, you consent to the transfer that information to 麻豆传媒 in the United States via our Standard Contractual Clauses.

If you are a resident of China, you may initiate a request to access, reject, correct, restrict, or erase your Personal Information, or where you may initiate a request for transfer of your Personal Information at privacy@exeter.edu and write 鈥淧IPL Request鈥� in the subject line. You may also write to us at:

麻豆传媒

20 Main Street

麻豆传媒 NH 03833

ATTN: General Counsel

EMAIL: privacy@exeter.edu

Should you wish to raise a concern about our use of information (without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.

Your California Privacy Rights

This section of the Privacy Notice applies solely to California residents. We adopt this Section to comply with the California Consumer Privacy Act of 2018 (鈥�CCPA鈥�) as amended by the California Privacy Rights Act (鈥�CPRA鈥�). Any terms defined in the CCPA or CPRA have the same meaning when used in this Section.

California residents have the following rights:

• To know the categories of personal information being collected about you, the purposes for which the categories of information are collected or used, and whether that information is sold or shared;
• To know the length of time we intend to retain each category of personal information;
• To know whether your personal information is sold or disclosed and to whom;
• To access your personal information;
• To delete the information you have provided to us, with certain exceptions;
• To correct your personal information;
• To opt out of the sale of personal information;
• To know if Sensitive Personal Information (鈥�SPI鈥�) is being collected about you, the categories of SPI being collected, the purposes for which the categories of SPI are collected or used, and whether the SPI is sold or shared;
• To limit the use of your SPI if it is used for cross-contextual behavioral advertising or for the purposes of inferring characteristics about you; and
• Not to be discriminated against, even if you exercise your privacy rights.

The sections above describe in detail what categories of information we collect and the purposes for which we use that information.

Request for Information, Correction, or Deletion

California consumers have the right to request, under certain circumstances, that a business that collects personal information about the consumer disclose to the consumer the information listed below for the preceding 12 months:

• The categories of personal information collected about you;
• The categories of sources from which the personal information is collected;
• The business or commercial purpose for collecting, selling or sharing personal information;
• The categories of third parties to whom the business discloses personal information; and
• The specific pieces of personal information collected about you.

Please note that if we collected information about you for a single one-time transaction and do not keep that information in the ordinary course of business, that information will not be retained for purposes of a request under this section. In addition, if we have de-identified or anonymized data about you, we are not required to re-identify or otherwise link your identity to that data if it is not otherwise maintained that way in our records.

You can also request that we correct or delete your personal information. There may be certain exceptions to our obligation to correct or delete your information such as if you have an existing account or transaction with us or if we have a legitimate business reason to keep your information.

Personal Information Collected

In compliance with California law, the Academy provides the following information about our collection of certain types of personal information about you during your relationship with us, as stated above. In particular, the Site has collected the following categories of Personal Information from consumers within the last twelve (12) months of the Effective Date of this Notice (as set forth in the California Consumer Privacy Act):

Personal Information Sold or Shared

We have sold or shared (as those terms are defined in the CCPA) to third parties the following Categories of Personal Information in the last twelve (12) months:

We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age.

Personal Information Disclosed for Business Purposes

We have disclosed the following categories of Personal Information for business purposes in the last twelve (12) months:

Right to Opt Out

As a California resident, you also have the right, at any time, to tell us not to sell personal information 鈥� this is called the 鈥渞ight to opt-out鈥� of the sale of personal information. We do not sell Personal Information, but we recognize that some privacy laws define 鈥減ersonal information鈥� in such a way that making available identifiers linked to you for a benefit may be considered a 鈥渟ale.鈥� To opt-out of this, please contacting us using the information in the Our Contact Information section below.

Right to Limit Use of Sensitive Personal Information

California consumers have the right to limit the use of each type of Sensitive Personal Information for each purpose with each type of third-party partner. Consumers can revoke this permission at any time. Please note that we only keep your Sensitive Personal Information for a limited time, and only for the transaction for which it is required. Currently, we do not provide your Sensitive Personal Information to any third parties other than those service providers that are necessary for us to provide our offerings to you.

Right Not to Be Discriminated Against

We will not discriminate against you for exercising any of your rights under the CCPA. Unless permitted by California law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, as permitted by California law, we may offer you certain financial incentives that can result in different prices, rates, or quality levels. Any permitted financial incentive we offer will reasonably relate to the value of your Personal Information, for instance, if you sign up for a newsletter with us, we may provide you with discounts for future services. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

Third Party Marketing

California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us a list of what personal information (if any) we disclosed to third parties for their own direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. We do not currently disclose personal information protected under this section to third parties for their own direct marketing purposes.

Exercising Your California Privacy Rights

You or your authorized agent may make a request to access, correct, delete, opt-out of the sale of your Personal Information, or limit the use of your Sensitive Personal Information by contacting us using the information in the Our Contact Information section below.

If you use an authorized agent to submit your request, we may require proof of the written authorization you have given. We also may require you to confirm your identity and your residency to obtain the information, and you are only entitled to make this request twice in a 12-month period. For emails, please include 鈥淐alifornia Privacy Rights鈥� as the subject line. You must include your full name, email address, and attest to the fact that you are a California resident. We will acknowledge your request within 10 days and respond to your request within 45 days or let you know if we need additional time. If you make this request by telephone, we may also ask you to provide the request in writing so that we may verify your identity. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.

Your Privacy Rights under Other US State Laws

If you are a resident of Colorado, Connecticut, Utah or Virginia, you have the right, upon a verified request, to:

• To confirm whether a controller is processing your personal data and to access such personal data;
• To correct inaccuracies in your personal data;
• To delete your personal data;
• To obtain a copy of your personal data that you previously provided to us in a portable, and if technically feasible, readily usable format, if processing is carried out by automated means;
• To opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

To exercise these rights, you or your authorized agent may make a request to confirm, access, correct, delete, obtain a copy, or opt-out of the processing of your personal data for targeting advertising, sale, or profiling by contacting us using the information in the Our Contact Information section below.

If you use an authorized agent to submit your request, we may require proof of the written authorization you have given. We also may require you to confirm your identity and your residency in order to obtain the information. For emails, please include 鈥淧rivacy Rights鈥� as the subject line. You must include your full name, email address, and attest to the fact that you are a resident of Colorado, Connecticut, Utah or Virginia. We will process your request within 45 days or let you know if we need additional time or cannot process your request. If you make this request by telephone, we may also ask you to provide the request in writing so that we may verify your identity. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.

Right to Opt Out Under Applicable State Laws

Residents of Colorado, Connecticut and Virginia have the right to opt out of the sale of their Personal Information and targeted advertising. To exercise your right, please click contacting us using the information in the Our Contact Information section below.

California residents may have additional rights, as shown in the 鈥淵our California Privacy Rights鈥� section above.

Opt-Out Preference Signals

Some browsers and browser extensions support opt-out preference signals such as the Global Privacy Control (鈥�GPC鈥�) that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales. GPC is a web browser-level setting, maintained by either a browser or a browser extension, that a user or privacy-focused technology can set. In certain regions, when we detect such a signal, we will make reasonable efforts to respect your choices as required by applicable law.

Appeals of Our Decisions

In some states, you may appeal to us if we refuse to take action on your exercise of certain rights described above. To appeal such a refusal, please contact us using the information in the Our Contact Information section below with the subject line 鈥淎ppeal of Refusal to Take Action on Privacy Request鈥� and provide the relevant information in the email. If your appeal is denied, residents of certain states can contact their attorney general as follows:

Updates to this Privacy Notice

The Academy reserves the right, at our sole discretion, to change, modify, add, remove, or otherwise revise portions of our policies and this Privacy Notice at any time, consistent with the requirements of applicable law. When we do, we will post the revision(s) on our website at www.exeter.edu/privacy. If we change the Privacy Notice in a material way, we will provide appropriate notice to you. The 鈥淓ffective Date鈥� at the top of this Privacy Notice reflects the date of the most recent revisions. If you are concerned about how your personal information is used, please visit our Site often for this and other important announcements and updates.