1. EAB and Our Commitment to Your Privacy

Who Is EAB? EAB Global, Inc. (together with its subsidiaries and its affiliates, including YouVisit, LLC and Cappex.com, LLC, “EAB”, “us,” “we,” and “our”) is a data driven research, technology, and services organization partnering with education leaders, practitioners, and staff to accelerate progress and drive results in the most pressing and complex issues facing colleges, universities, community colleges, independent schools, and graduate programs.

EAB’s Commitment to Privacy. EAB is deeply committed to maintaining the privacy and security of personal information we collect or which is provided to us directly by our clients.

Scope of this Privacy Notice. This Privacy Notice governs our processing of personal information in connection with our Enroll360 Match service (also known as Match powered by Concourse). This Privacy Notice does not relate to anonymized, aggregated, or de-identified data, or any other information that does not allow us to identify you.

Data Controller. EAB Global, Inc. is the data controller in relation to the data processing activities described in this Privacy Notice.

Updates to this Privacy Notice. From time to time, this Privacy Notice may be updated to reflect changes to our products and services, the way we operate, or to meet new legal and regulatory requirements. You will find the latest version of this Privacy Notice here.

2. Personal Information That We Collect

The type of personal information we collect about you depends upon your relationship with us. Please click on the plus symbol to collapse or expand the relevant section below to learn more. The other sections in our Privacy Notice apply to all our activities.

+ Student

If you are a student who would like to sign up and use our services, we will collect certain personal information from you to provide you with the services.

We collect personal information in the following manner:

• Directly from you: When you sign up to use our services, we will ask for the following information: full name, preferred name, email address, residential address, date of birth, telephone number, identification document such as a passport, current or most recent school and date of graduation, grades, test scores and qualifications, gender, opinions and preferences on education (such as classes you like and don’t like), information on your family’s socioeconomic status, whether you are first generation student or have a military background, personal skills, hobbies and interests, and whether you have any disciplinary history. We consider some of this information to be necessary for us to provide you the services, for example your name, and this will be shown to you when providing the information. The remaining information is provided on voluntary basis and therefore it is your choice whether you would like it to form part of your profile. If you decide to use the service’s chat function to speak with your counselor or a university, we will collect any personal information that you chose to provide when using that functionality. In addition, you may choose to upload a video interview with a third party provider and upload such interview as part of your profile. As this will be video recorded, it will include your image and may include further personal information about you depending on the answers you provide to the questions.
• Indirectly from you: We collect information about the pages you visit and how you access and use our services using cookies and third-party analytics tools (e.g., log files, event data, GPS data, clear gifs and scripts). This information includes information about the device(s) you use to access the service including unique device identifiers, IP address, operating system, browser, internet service provider, referring/exit pages, clickstream data and cookies. Depending on your device settings, we may also collect information about your geographical location. Learn more about our use of cookies, plugins, analytics or similar tools in our Cookie Notice.
• Sensitive Information. We may obtain information relating to your race or ethnic origin, gender or gender identity, and details of any criminal convictions you may have, where we are permitted to do so by law or where you give your consent.

+ Counselor, School Manager or Teacher

If you are a counselor, school manager or teacher who would like to sign up and use our services on behalf of the school or organization you represent, we will collect certain personal information from you to provide you with the services.

We collect personal information in the following manner:

• Directly from you: When you sign up to use our services, we will ask for the following information: full name, email address, telephone number, high school or organization, the location of the high school or organization, job title, LinkedIn URL, professional summary, professional affiliations, and counselor type (e.g. high school counselor or independent counselor. If you use the service’s chat function to speak with a student or a university, we will collect any personal information that you chose to provide when using that functionality.
• Indirectly from you: We collect information about the pages you visit and how you access and use our services using cookies and third-party analytics tools (e.g., log files, event data, GPS data, clear gifs and scripts). This information includes information about the device(s) you use to access the service including unique device identifiers, IP address, operating system, browser, internet service provider, referring/exit pages, clickstream data and cookies. Depending on your device settings, we may also collect information about your geographical location. Learn more about our use of cookies, plugins, analytics or similar tools in our Cookie Notice.
• Information Collected from Third Parties: We obtain your full name, email address and high school or organization from third parties.

+ Parent or Guardian of Student

If you are a parent or guardian of a student, we will collect certain personal information from you in order to provide it to a university as part of a student’s application.

We collect personal information in the following manner:

• Indirectly from you: When a student is completing their profile with us, we ask them for the following information of a parent or guardian: full name, email and residential address.

+ Representative or Contact

If you are a representative or contact of a business partner, such as a university, or a service provider, we will collect certain personal information from you as part of this relationship.

We collect personal information in the following manner:

• Directly from you: When you engage with us, we may collect the following information: full name, email address, telephone number, organization you represent, the location of the organization you represent, and job title. If you use the service’s chat function to speak with a student or a counselor, we will collect any personal information that you chose to provide when using that functionality.
• Indirectly from you: We collect information about the pages you visit and how you access and use our services using cookies and third-party analytics tools (e.g., log files, event data, GPS data, clear gifs and scripts). This information includes information about the device(s) you use to access the service including unique device identifiers, IP address, operating system, browser, internet service provider, referring/exit pages, clickstream data and cookies. Depending on your device settings, we may also collect information about your geographical location. Learn more about our use of cookies, plugins, analytics or similar tools in our Cookie Notice.

+ Website Visitor

EAB maintains websites that are generally accessible by the public. Our websites provide general information about our company and its products and services. We may do this directly or through third party vendors.

You can generally visit our websites without having to register or otherwise identify yourself. You may need to log in to make use of all the functionalities and be able to communicate with us or other EAB clients.

We collect personal information in the following manner:

• Directly from you: Certain functionality on our website requires you to register for an account (e.g., become an authorized user, or sign up for events). We also collect information you provide by completing forms on our website. If you provide additional content through user forums, chat tools or personal correspondence, for example, we may link this information with your personal information if you are logged in.
• Indirectly from you: We collect information about the pages you visit and how you access and use our services using cookies and third-party analytics tools (e.g., log files, event data, GPS data, clear gifs and scripts). This information includes information about the device(s) you use to access the service including unique device identifiers, IP address, operating system, browser, internet service provider, referring/exit pages, clickstream data and cookies. Depending on your device settings, we may also collect information about your geographical location. Learn more about our use of cookies, plugins, analytics or similar tools in our Cookie Notice.

3. How We Use the Personal Information That We Collect

+ Student

EAB collects, retains, processes, uses, and transfers your personal information for the following purposes:

• Providing our Services: we collect the personal information listed above so we can provide our services to you. This includes being able to set up your account, express your interest in universities and organizations, and submit applications. In doing so, we will share certain personal information with universities and organizations (please see further information below on sharing personal information). We process personal information for these purposes because it is necessary to perform a contract with you or because we have a legitimate interest in providing services that you request.
• Communicate with Organizations: we collect personal information you provide in the context of your use of the service’s chat function in order to facilitate your communications with counselors and universities. We process personal information for these purposes because we have a legitimate interest in providing the functionality to our users.

+ Counselor, School Manager or Teacher

EAB collects, retains, processes, uses, and transfers your personal information for the following purposes:

• Providing our Services: we collect the personal information listed above so we can provide our services to you. This includes being able to set up your account, invite students to use the service, and assist with student applications. We process personal information for these purposes because it is necessary to perform a contract with you or because we have a legitimate interest in providing services that you request.
• Communicate with Organizations: we collect personal information you provide in the context of your use of the service’s chat function in order to facilitate your communications with students and universities. We process personal information for these purposes because we have a legitimate interest in providing the functionality to our users.

+ Parent or Guardian of Student

• University Applications: we collect personal information provided to us by students because it is required to be provided to certain universities as part of the application process. We process personal information for these purposes because we have a legitimate interest in facilitating the university application process, and because the personal information is required by universities to which students apply.

+ Representative or Contact

EAB collects, retains, processes, uses, and transfers your personal information for the following purposes:

• Relationship: we collect the personal information listed above so we can facilitate the relationship we have with you. For example, if you represent a university, we require your personal information to provide you access to the university’s account to view applications from students. We process personal information for these purposes because we have a legitimate interest in managing relationships with universities and other educational institutions.
• Communicate with Students and Counselors: we collect personal information you provide in the context of your use of the service’s chat function in order to facilitate your communications with students and counselors. We process personal information for these purposes because we have a legitimate interest in providing the functionality to our users.

+ Website Visitor

EAB collects, retains, processes, uses, and transfers your personal information for the following purposes:

• Providing our Services: we collect the personal information listed above so we can provide our website services to you. For example, if you contact us to act us a question, we will use your personal information to respond to you. We process personal information for these purposes because we have a legitimate interest in making our website and services available to website visitors.

+ All

EAB collects, retains, processes, uses, and transfers your personal information for the following purposes:

• Analytics and Marketing: we analyze usage information for marketing purposes and for trends about our visitors’ demographics and use of our website. This analysis is necessary to further our legitimate interest in understanding our users and how they interact with us and our website, improving our website and communicating with you. You can learn more about our use of cookies in our Cookie Notice.
• Product Enhancements and Research: to the extent permitted by applicable law or by agreement, we may also use:
  • your personal information to evaluate and improve our products and services to develop new products and services;
  • your personal information to tailor your experience on our websites; and/or
  • de-identified information for research or business purposes like providing similarly-situated institutions a benchmarking data report on completion rates or class size.
• Client engagement and marketing: EAB may use your information for client engagement and marketing purposes in limited circumstances, including:
  • to manage the client relationship, including for notification of product updates and maintenance, and similar purposes;
  • to promote EAB’s products and services.
  • to share with EAB’s subsidiaries or affiliates. For example, information from a participant in a research webinar may be shared with our advancement affiliate to send services and other promotional communications to you.

We do not disclose personal information about students that we collect through the provision of our educational products and services to third parties for behavioral targeting of advertisements to students.

Our marketing emails will include a link so that you can opt-out of receiving marketing communications from us. You can do this by clicking on the “Unsubscribe” link in the email footer.

4. How We Share the Personal Information That We Collect

If you are a student, we will share the following information with your counselor and relevant universities and organizations:

• When you use the service’s chat functionality, personal information you provide as part of a chat will be shared with the counselor or university you are communicating with.
• When submitting interest to a university or organization, we may share the following personal information to allow the university or organization to review your interest:
  • Gender (for certain schools that wish to consider gender in their offers)
• If, following review of your profile, the university or organization makes you a formal admission offer and you are interested in pursuing such offer, the university requires that we share further personal information with them, including:
  • Contact information
  • Race and ethnicity
  • Address
  • Parent contact information
  • Criminal history
• We will only share your sensitive personal information, and information relating to criminal convictions and offences, with universities and other organizations if you give explicit consent. Please note, however, that it may be necessary to share sensitive personal information with some universities if you wish to accept an offer.

Please note that when we share any personal information with a university or organization, they will be responsible for any further processing of such information.

If you are a student, please also be aware that your counselor, school manager or teacher, as appropriate, will have access to the personal information within your account. This includes all of the personal information listed above in section 2. The purpose of this is to allow the counsellor, school manager or teacher to assist with your profile and to be able to review and verify the information provided.

We may share your personal information with:

• Other EAB entities;
• Universities with which you want to share your personal information; and
• Service providers that perform services on our behalf.

Details of the other entities in the EAB group, including the countries in which they are located, can be found here.

We may share personal information with service providers that perform services on our behalf such as hosting providers and our help support provider. In accordance with applicable law, we have entered into legally binding agreements requiring them to use or disclose personal information only as necessary to perform services on our behalf or comply with applicable legal requirements.

In addition, we may disclose personal information about you (a) if we are required or permitted to do so by law or legal process, for example due to a court order or a request from a law enforcement agency, (b) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, (c) in connection with an investigation of suspected or actual fraudulent or other illegal activity, and (d) in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution, or liquidation).

5. How We Transfer the Personal Information That We Collect

We may transfer the personal information that we collect about you to recipients in countries other than the country in which the personal information originally was collected, as described in section 4 above. Those countries may not have the same data protection laws as the country in which you initially provided the personal information. When we transfer your personal information to recipients in other countries (such as the U.S.), we will protect that personal information as described in this Notice.

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), we will comply with applicable legal requirements providing adequate protection for the transfer of personal information to recipients in countries outside of the EEA and the UK. In all such cases, we will only transfer your personal information if:

• The country to which the personal information will be transferred has been granted a European Commission adequacy decision or has been recognized as adequate under UK law;
• We have put in place appropriate safeguards in respect of the transfer, for example the EU or UK Standard Contractual Clauses; or
• In certain limited circumstances, one or more of the derogations for data transfers provided by applicable law applies.

You may request a copy of the safeguards that we have put in place in respect of transfers of personal information by contacting us as described in the ‘Contact Us’ section below.

6. Children’s Privacy

EAB’s products and services are not intended for children under the age of 13, and we do not knowingly collect any information from children. If we learn that we have collected or received personal information from a child under 13, we will delete that information upon request. Please contact us at privacy@eab.com if you believe we have inadvertently collected personal information from a child under 13.

7. How Long We Retain the Personal Information That We Collect

Your personal information is retained for the duration of your relationship with EAB, plus a reasonable period thereafter as necessary to fulfil the purposes described above. Retention periods may be extended if we are required to preserve your personal information in connection with litigation, investigations and proceedings, or if a longer retention period is required or permitted by applicable law.

8. Your Rights and Choices

Subject to applicable law, you may have the right to request:

• confirmation of whether we process personal information relating to you and, if so, to request a copy of that personal information;
• that we rectify or update your personal information that is inaccurate, incomplete or outdated;
• that we stop processing your personal information in certain circumstances, such as where you object to our processing of your personal information on grounds relating to your particular circumstances;
• that we erase your personal information in certain circumstances, such as where we collected personal information on the basis of your consent and you withdraw that consent;
• that we restrict the use of your personal information in certain circumstances, such as while we consider another request that you have submitted, for example a request that we update your personal information;
• withdrawal of your consent where you have given us consent to process your personal information; and
• that we provide a copy of your personal information to you in a structured, commonly used and machine readable format in certain circumstances.

If you wish to exercise any of the rights described above in relation to your personal information, or if you consider that we have processed your personal information in violation of applicable law, please contact us as detailed in the ‘Contact Us’ section below.

If you consider that we have processed your personal information in violation of applicable law and failed to remedy such violation to your reasonable satisfaction, you may also lodge a complaint with the data protection supervisory authority in your country.

9. Security

In order to protect personal information, EAB has established a data privacy program based on the ‘privacy by design’ framework which proactively embeds privacy protection into the design of EAB.com’s systems, networked infrastructure, business practices, and software applications. We employ a variety of physical, administrative, and technological safeguards designed to protect personal information against loss, misuse, and unauthorized access or disclosure. We have a dedicated information security program and work to continuously enhance our technical and operational security measures.

Specifically, EAB aligns its policies with the NIST Cybersecurity Framework. We maintain a comprehensive list of policies and procedures that are readily accessible by all workforce clients via an internal portal. Information is encrypted at rest on laptops, removable devices, and at the data centers we partner with for our technology products and services. EAB requires the secure transmission of personal information to and from our network; we work with clients to discourage transmission that is otherwise not secure. This is accomplished through a combination of secure technologies like SSH File Transfer Protocol (SFTP) for in-transit encryption of bulk file transfers and SSL/TLS encryption in transit for web traffic.

Datacenter controls include the use of SOC-audited data centers with physical controls including multi-factor authentication for access, 24×7 monitoring, video monitoring, and locked cages. We also have active detection (IDS monitoring, log consolidation, alerting) and prevention (IPS, firewall, security zones) programs to protect personal information, and vetted third party providers for centralized audit logging capabilities.

10. Specific Regional & Country Information

+ California

If you are a California resident, please see the California Privacy Notice here.

+ Colorado

If you are a Colorado consumer, please see the Privacy Notice for Colorado Consumers here.

+ Outside of the United States

EAB.com is operated within the United States. If you are located outside of the United States, any information you provide to us will be transferred to the United States.

11. Contact Us

If you have any questions or concerns about our Privacy Policy or data privacy practices, contact us at privacy@eab.com or write to us at the following address.

EAB Global, Inc.
Attn: General Counsel
2445 M Street, NW
Washington, DC 20037

Last updated on November 15, 2022.