This Privacy Policy describes how The Collegiate School (“we,” or “us”) collects, uses, discloses, and processes your Personal Information (“you” and “your”), as well as rights that you may have regarding that information.  We reserve the right to change this Privacy Policy at any time.  If we change our Privacy Policy, we will post an updated version on this website.  Please check back periodically to see if our Privacy Policy has been updated.  Updates to the Privacy Policy will be referenced by the "Last Updated and Effective Date" date shown above.  

Set forth below are the categories of Personal Information we collect and that have collected in the preceding 12 months, the categories of sources from which the Personal Information was collected and the business or commercial purpose for such collection.  Please note that we may not collect all of the information referenced below regarding you and we may not use your Personal Information for all purposes set forth in this Privacy Policy.

Category of Personal Information	What We Collect	Categories of Sources from which Personal Information Collected	Business or Commercial Purposes for Collection
PERSONAL INFORMATION
Personal Identifiers	Real name Alias Postal address Unique personal identifier Online identifier Internet protocol address Email address Account name Signature Characteristics or description Telephone number Insurance policy number Bank account number Credit card number Debit card number Other financial information Medical information Health insurance information	Directly from you Our service providers	Performing services. Processing payments.
Protected Characteristics	Race Color Religion (includes religious dress and grooming practices)  Sex/gender  Gender identity, gender expression  Marital status  Medical Condition (genetic characteristics, cancer or a record or history of cancer)  Age (over 40)	Directly from you Our service providers	Performing services.
Commercial Information	Records of personal property, products or services purchased, obtained, or considered	Directly from you	Performing services.
Biometric Information	Fingerprints Retina scans	Directly from you	Performing services.
Internet Information	Electronic network activity information Browsing history Search history Information regarding interaction with a website, application, or advertisement	Directly from you Our service providers	Performing services.
Audiovisual Information	Electronic information (e.g., meeting recordings) Visual information (e.g., camera footage)	Directly from you Our service providers	Performing services.
Professional or Employment-Information	Professional history Employment history		Performing services.
Education Information	Educational history		Performing services.
Inferences Note:  This includes inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes			Performing services.
SENSITIVE PERSONAL INFORMATION
Sensitive Personal Identifiers	Social security number Driver’s license number State identification card number Passport number		Does not apply
Account Information  Note:  This consists of log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account		Directly from you Our service providers	Performing services.
Sensitive Characteristics	Racial origin Ethnic origin Religious belief	Directly from you Our service providers	Performing services.
Contents of Communications Note:  This consists of the contents of mail, email, and text messages unless the business is the intended recipient of the communication		Directly from you Our service providers	Performing services.
Sensitive Biometric Information	Processing of biometric information for the purpose of uniquely identifying you	Directly from you.	Performing services.
Health Information	Personal Information collected and analyzed concerning your mental or physical health or pregnancy	Directly from you Our service providers	Performing services

* See the section entitled Cookies below.  

We only use Sensitive Personal Information for purposes disclosed herein.  We do not use or disclose Sensitive Personal Information for purposes other than those specified herein.

We also collect aggregated, de-identified or anonymous data that does not identify individual consumers.  We collect this information for various purposes such as statistical or demographic data for legitimate business purposes not prohibited herein or by law.  We commit to maintain and use such data without attempting to re-identify the data.  

We use several types of cookies and other tracking technologies on our website.  

A cookie is a small file of letters and numbers that is stored on your browser or the hard drive of your computer.  Cookies contain information that is transferred to your computer's hard drive. We and our service providers and partners use cookies or similar technologies, such as web beacons and tracking pixels to analyze trends, administer our website, personalize content and ads, track users’ movements around our website to provide you with the most relevant browsing experience, to gather demographic information about our user base as a whole and to provide marketing. You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions on our website or of the service we provide as some of our features or services may not function properly without cookies.  

Our website has the following cookies:

In addition, we use web beacons and pixels, which are images that can be placed in web pages and some forms of email.  These technologies can be used to deliver cookies and to collect information about your use of the site.  Finally, we may also collect information through tracking pixels. A tracking pixel is a transparent graphic image (usually 1 pixel x 1 pixel or Javascript tag) that is placed on a web page and, in combination with a cookie, allows us to collect information regarding the use of the page of the site that contains the tracking pixel.  We may use tracking pixels to trigger ads on participating websites based on activity tracked from the browser on a device used to visit our site.  Other entities may have access to some of this information.  

Emails that we and our service providers send may include similar technologies that provide us with information related to whether you’ve opened an email or clicked on a link contained in an email.  More information on how to unsubscribe from our marketing emails is found below.

If you want to remove existing cookies from your device you can do this using your browser options. If you want to block future cookies being placed on your device you can change your browser settings to do this.  Please bear in mind that deleting and blocking cookies may have an impact on your user experience as parts of the site may no longer work. Unless you have adjusted your browser settings to block cookies, our system may issue cookies as soon as you visit our site or click on a link in a targeted email that we have sent you, even if you have previously deleted our cookies.

By using our website and services you affirmatively agree to the use of cookies disclosed in this Privacy Policy.

We do not share information relating to your text messaging opt-in choices or consents with any third parties.  We do not share or sell data for the purposes of targeted advertising. We disclose and have disclosed in the preceding 12 months Personal Information to our service providers and contractors for the following business purposes.  

The following chart sets forth the categories of Personal Information we have disclosed to our service providers for a business purpose over the past 12 months.

Categories of Personal Information that We Disclose	Business Purposes for the Disclosure of Personal Information
PERSONAL INFORMATION
Identifiers	Functionality & Debugging Services on Our Behalf Research & Development Quality Control & Improvement of Products and Services
Biometric Information	Functionality & Debugging
Internet Information	Functionality & Debugging Services on Our Behalf Research & Development Quality Control & Improvement of Products and Services
Audiovisual Information	Functionality & Debugging Services on Our Behalf Research & Development Quality Control & Improvement of Products and Services

As Necessary:  We may also use and/or disclose Personal Information, as necessary: (a) to comply with any legal process and/or exercise or defend legal claims; (b) to respond to requests from public and government authorities; (c) to enforce our terms and conditions; (d) to protect our operations and protect our rights, privacy, safety or property, and/or that of you or others; and (e) to allow us to pursue available remedies or limit the damages that we may sustain.  We may also use and disclose your Personal Information in connection with or during negotiation of any reorganization, acquisition, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).  You acknowledge that such transfers may occur and that any acquirer of or successor to us may continue to use your Personal Information as set forth in this Privacy Policy.

We will retain each category of your Personal Information identified above for an amount of time that is reasonably necessary for us to use the information for the purposes disclosed herein and for any other permitted purposes, including retention of Personal Information pursuant to any applicable contract, law or regulation.  To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.

We implement technical, organizational, administrative and physical measures to help ensure a level of security appropriate to the risk to the Personal Information we collect, use, process and disclose. These measures are aimed at ensuring the on-going integrity and confidentiality of Personal Information.  We evaluate these measures on a regular basis to help ensure the security of the processing.  Please be aware that, despite our ongoing efforts, no security measures are perfect or impenetrable.

You may unsubscribe from our marketing communications by clicking the “unsubscribe” link found in our commercial emails we send, or by sending us a request to webmaster@collegiate-va.org.  If you opt-out of receiving marketing email communications, we may still send you email messages related to specific transactions with us.  Unsubscribing yourself from our marketing communications will not affect our service to you.

Our website may include content that is governed by the Video Privacy Protection Act (“VPPA”).  Some of the cookies and other tracking technologies that we have disclosed above may provide to others access to your personal information (or personally identifiable information as that term is used under the VPPA).  To the extent that the VPPA applies to our website, or any content on our website, by using our website you explicitly consent to our practices, including those that relate to video contents or otherwise governed by the VPPA.

Your Rights If You Are a U.S. Resident

Depending on your state of residency, you may have certain rights related to your Personal Information.  Nevada residents should refer to the “Nevada Privacy Notice” below.  

You may submit a request by emailing us at webmaster@collegiate-va.org.  Please note that not all of these rights may be applicable to you, these rights are subject to certain exceptions and certain of these rights are subject to verification mechanisms.

Furthermore, if we have actual knowledge that you are 13 years of age and not older than 18 years of age, we will not without your consent process your Personal Information for the purposes of targeted advertising, profile you in furtherance of decisions that produce legal effects or effects of similar significance, or sell your Personal Information.

You may submit a request via email to webmaster@collegiate-va.org. When you make a request to know, delete and/or correct, to help protect your privacy and maintain security, we will take steps to verify your identity.  Our verification procedure may differ depending on whether you have an account with us or not and the request you are making.  The following generally describes the verification processes we use:  

If there is no reasonable method by which we can verify your identity, we will state so in response, including an explanation of why we have no reasonable method to verify your identity.

We may also require a declaration, signed under penalty of perjury, that the person requesting the information is the person whose information is the subject of the request or that person’s authorized representative.  

If you use an authorized agent to submit a request to know, delete or correct, we may require the authorized agent to provide proof that you gave the agent signed permission to submit the request. We may also require you to do either of the following: (a) verify your own identity directly with us; or (b) directly confirm with us that you provided the authorized agent permission to submit the request.  

There may be situations where we cannot grant your request.  For example, if you ask us to delete Personal Information that we are obligated to keep to comply with applicable law we may not be able to fulfill some or all of your request. We may also decline to grant your request where our use of your Personal Information serves a legitimate purpose such as for security purposes.  Your request may also be denied if it compromises the privacy of others, is overly repetitive or extremely burdensome to fulfill.  

We will respond to valid requests to know, requests to delete and / or delete no later than 45 calendar days.  If we cannot verify your request within 45 days, we may deny your request.  If necessary, we may take up to an additional 45 days to respond to your request but in such an event will provide you a notice and an explanation of the reason that we will take more than 45 days to respond to your request.   

Valid requests under “Right of Access” and “Right to Data Portability” will be transmitted securely. If we cannot fulfill your request, we will notify you of that decision and the reasons why within 45 days. At that point if you believe our decision was in error, you may have the right to submit an appeal using the method(s) above.  If the result is the same, you can also seek assistance and/or redress from your state attorney general.

Nevada law provides that Nevada residents may opt-out of the “sale” of “covered information” to third parties, including but not limited to name, address, social security number, and online service activity.  Our uses of your Personal Information are not sales under Nevada law, so no opt-out right applies.

If you have any questions or concerns about our privacy policies and practices, please feel free to contact us by emailing us at webmaster@collegiate-va.org or by mail at 103 North Mooreland Rd. Richmond, VA 23229. 

All copyrights in the content and materials on this site are owned by The Collegiate School unless otherwise indicated.