This policy covers the information privacy practices of Saint Xavier University. The purpose of this policy is to let you know the types of personal information we collect, how we use and protect this information, your rights to ensure proper management of this information and how to contact us.
This policy applies to anyone who provides personal information to Saint Xavier University, who authorizes Saint Xavier University to obtain data from third parties or who accesses Saint Xavier University websites.
Saint Xavier University websites are based in the United States and are intended only for the use of those who may legally access and use them under relevant U.S. laws and regulations. You agree to use them in compliance with all applicable laws and regulations. You may not use Saint Xavier University resources for any unlawful purpose or engage in any conduct which restricts their use by other users.
Information Collection, Use and Sharing
Saint Xavier University websites are made available on an as-is, where-is basis for informational and educational purposes, and any and all implied warranties or duties are hereby disclaimed. Links to third-party websites do not imply endorsement by Saint Xavier University, and Saint Xavier University is not responsible for the content or operation of such sites.
Saint Xavier University is the sole owner of information collected on its websites. We have access to and collect only information that you voluntarily provide via the website, email or other direct contact. We do not sell or rent this information to anyone.
Saint Xavier University will use your personal information only to respond to you regarding the reason you contacted us and to provide any related services or fulfill any related requests. We will not share your information with any third party outside our organization, other than as necessary to fulfill your request (e.g., to ship an order, complete an external registration, etc.).
We may use your information for purposes relevant to University operations in pursuit of its academic mission, in order to process student, financial aid or job applications, student or employee registrations, and other services and benefits that we provide to our students, employees and other persons. An email address you provide may be used to send you information or respond to inquiries, requests or questions.
Information Collected and Stored Automatically
If you do nothing during your visit but browse through our website, view pages or download information, we will collect and store certain data regarding your visit automatically using cookies and log files. We use this data to learn about the number of visitors to our site and the types of technology they use to determine how we can improve our site.
Like most standard website servers, we use website statistic packages such as Google Analytics to analyze trends in how our website is accessed and used. Information monitored includes internet protocol (IP) addresses, geographic location of visitors (country, city), browser type, internet service provider (ISP), referring/exit pages, platform type, date/time stamp, time spent on pages, and keywords used to discover our site via search engines. This information is anonymous and cannot be directly linked to individual users. We may use it to identify high-traffic, low-traffic or problem areas of the site, analyze broad demographic trends in our visitors, and make decisions about how to make it easier for people to find and navigate our website.
Web browsers have settings allowing you to reject cookies, selectively accept cookies or delete cookies previously accepted. You may also opt out of the collection and use of this information through tools like the Network Advertising Initiative opt-out page.
Your Access To and Control Over Information
You may opt out of any future communication from Saint Xavier University at any time by contacting us at email@example.com. Please note that emergency communications that pertain to the safety and well-being of the SXU community are excluded from opting out.
You may also contact us at firstname.lastname@example.org to review your personal information that Saint Xavier University has on record, if any; change or correct any of your personal information we have collected; request us to delete any of your personal information we have collected; or express any concern you have about our collection, use or maintenance of your personal information.
Saint Xavier University takes extensive precautions to protect your personal information both online and offline. Whenever Saint Xavier University collects sensitive personal or financial information via its website, that information is encrypted and transmitted to us in a secure way. You can verify that your information is being transmitted securely by looking for a closed lock icon in your web browser or by looking for "https" at the beginning of the web address.
In addition to using encryption to protect sensitive data in transit, we also take
precautions to protect stored information. Only employees who need the information
to perform a specific job (e.g., billing, registration or customer service) are granted
access to personally identifiable information. In addition, the computers and servers
in which we store personally identifiable information are kept in a secure, access-controlled
To avoid having confidential information remain in your browser's "memory" of recently viewed pages, we advise you to clear your browser's cache when you are finished.
Saint Xavier University websites may contain links to external sites maintained by other organizations. Please be aware that Saint Xavier University is not responsible for the content or privacy practices of such other sites. We encourage you to read the privacy statements of any other site that collects personally identifiable information.
Saint Xavier University (the "University") may collect certain biometric data from students. This policy explains what information the University may collect, how this information may be used, how it is stored, safeguarded, retained, and disposed of.
Biometric Data Defined
"Biometric data" means personal information stored by the University regarding an individual's physical characteristics that can be used to identify a person, such as fingerprints, voiceprints, facial shape, or scan of hand or face geometry. Biometric data includes "biometric identifiers" and "biometric information" as defined in the Illinois Biometric Information Privacy Act, 740 ILCS § 14/1, et seq.
"Biometric identifier" means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. Biometric identifiers do not include writing samples, written signatures, photographs, human biological samples used for valid scientific testing or screening, demographic data, tattoo descriptions, or physical descriptions such as height, weight, hair color, or eye color. Biometric identifiers do not include information captured from a patient in a health care setting or information collected, used, or stored for health care treatment, payment, or operations under the federal Health Insurance Portability and Accountability Act of 1996.
"Biometric information" means any information, regardless of how it is captured, converted, stored, or shared based on an individual's biometric identifier used to identify an individual. Biometric information does not include information derived from items or procedures excluded under the definition of biometric identifiers.
Purpose for Collection of Biometric Data
The University, its vendors, and/or the licensor of the University's remote testing software may collect, store, and use facial shape or a scan of face geometry data to monitor remote student testing, for student identification, and fraud prevention.
The University, its vendors, and/or the licensor of the University's remote testing software will not sell, lease, trade, or otherwise profit from students' biometric data; provided, however, the University's vendors and the licensor of the University's remote testing software may be paid for products or services used by the University that utilize such biometric data.
To the extent that the University, its vendors, and/or the licensor of the University's remote testing software collect, capture, or otherwise obtain biometric data relating to a student, the University must first:
- Inform the student in writing that the University, its vendors, and/or the licensor of the University's remote testing software are collecting, capturing, or otherwise obtaining the student's biometric data, and that the University is providing such biometric data to its vendors and the licensor of the University's remote testing software;
- Inform the student in writing of the specific purpose and length of time for which the student's biometric data is being collected, stored, and used; and
- Receive a written release signed by the student (or his or her legally authorized representative) authorizing the University, its vendors, and/or the licensor of the University's remote testing software to collect, store, and use the student's biometric data for the specific purposes disclosed by the University, and for the University to provide such biometric data to its vendors and the licensor of the University's remote testing software.
The University stores all biometric data in accordance with applicable standards and laws.
The University will not sell, lease, trade, or otherwise profit from a student's biometric data.
The University will not disclose or disseminate any biometric data to anyone other than its vendors and the licensor of the University's remote testing software providing products and services using biometric data without/unless:
- First obtaining written student consent to such disclosure or dissemination;
- The disclosed data completes a financial transaction requested or authorized by the student;
- Disclosure is required by state or federal law or municipal ordinance; or
- Disclosure is required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction.
The University shall retain student biometric data only until, and shall request that its vendors and the licensor of the University's remote testing software permanently destroy such data when, the first of the following occurs:
- The initial purpose for collecting or obtaining such biometric data has been satisfied, such as the termination of the student's enrollment with the University; or
- Within 3 years of the student's last interaction with the University.
Biometric data will be deleted from the University's remote testing systems promptly after a student's enrollment with the University ceases.
In no situation will biometric data be retained for more than three years after a student's last interaction with the University, unless otherwise required by law.
Biometric data will be stored, transmitted, and protected using a reasonable standard of care for the University's industry, in a manner that is the same as or that exceeds the standards of care used to protect other confidential information held by the University. This includes, among other things, restricting access to biometric data to authorized University employees or vendors who have a business need to access the information, and using reasonable technological means to prevent unauthorized access to the information. Such storage, transmission, and protection from disclosure shall be performed in a manner that is the same as or more protective than the manner in which the University stores, transmits and protects from disclosure other confidential and sensitive information, including personal information that can be used to uniquely identify an individual or an individual's account or property, such as genetic markers, genetic testing information, account numbers, PINs, driver's license numbers and social security numbers.
Policy Distribution and Updates
Saint Xavier University will update this policy if it begins collecting biometric data for any other purposes. Saint Xavier University reserves the right to amend this policy at any time.
University policies are subject to change. We encourage you to check back for updates from time to time. If you have additional questions about this privacy statement, we invite you to contact:
Saint Xavier University
Office of University Relations
3700 W. 103rd Street
Chicago, IL 60655