Notice of Collection
Introduction
Alliant University wants you to know about the personal information we collect and the purposes for which we will use that information. This notice is given pursuant to the California Consumer Privacy Rights Act (CPRA) and applies solely to individuals who are California residents.
Definitions
Let us begin by defining some terms that you will see in this notice.
- “We”, “our”, and “us” refers to Alliant University, its directors, officers, employees, agents, affiliates, subsidiaries, and parent companies where applicable.
- “You” and “your” refer to a natural person who is a California resident.
- “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information includes, but is not limited to, the following if it identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular consumer or household.
- “Categories of Personal Information” are as follows:
- Identifying Information is information such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
- Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information includes, but is not limited to, the following if it identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular consumer or household.
- Characteristic Information is information of protected classifications under California or federal law.
- Commercial Information is information including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
- Biometric Information is information that includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.
- Internet Activity Information is information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement.
- Geolocation Information is information or data related to a geographical location, such as a device or Internet Protocol (IP) location.
- Audio Visual Information is Audio, electronic, visual, thermal, olfactory, or similar information.
- Employment Information is professional or employment-related information, such as employment history or status.
- Education Information is personally identifiable education information that is not publicly available.
- Inference Information is inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
- Sensitive Personal Information– means Personal information that reveals: A consumer’s social security, driver’s license, state identification card, or passport number, a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account. A consumer’s precise geolocation. A consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership. The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication and a consumer’s genetic data. All other terms defined in the CPRA, or its implementing regulations have the same meanings when used in this notice.
Collection of Personal Information
We collect personal information about consumers for the following operational and business purposes:
- Operational – In order to provide services for us, our students, employees, and other parties, including (but not limited to) maintaining and servicing accounts, providing customer service, processing and considering applications for enrollment, verifying student information, processing payments, engaging in advertising or marketing, performing analytics, or similar services. Alliant University collects information during the admissions and employment application processes.
- Quality Assurance – Activities to achieve, verify, or maintain the quality or safety of products, services, or equipment, and to improve such products, services, or equipment provided to our students.
- Security – Activities to protect against malicious, deceptive, fraudulent, or illegal activity, detect security incidents, or hold the perpetrators of that activity responsible.
- Debugging – Debugging to identify and repair errors that impair existing or intended functionality.
- Compliance – Activities to achieve, verify, or maintain compliance with our policies and procedures or applicable legal/regulatory and accreditation standards.
- Audit – Applicable compliance audits.
Personal information does not include:
- Publicly available information from government records.
- Deidentified or aggregated consumer information.
- Information excluded from the CPRA’s scope, like:
- Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.
Storage of Information
Alliant University may retain your personal information for as long as it is necessary or relevant for the practices described in our Privacy Policy, including, but not limited to, legal obligations, resolving disputes, and enforcing our agreements, and for backup, archival, and other internal operational purposes.
Below is a list of categories of personal information we collect about consumers:
| Category | Examples | Collected Yes/No |
|---|---|---|
| A. Identifiers. | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers. | YES |
| B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. | YES |
| C. Protected classification characteristics under California or federal law. | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | YES |
| D. Commercial information. | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | NO |
| E. Biometric information. | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | NO |
| F. Internet or other similar network activity. | Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. | YES |
| G. Geolocation data. | Physical location or movements. | NO |
| H. Sensory data. | Audio, electronic, visual, thermal, olfactory, or similar information. | YES |
| I. Professional or employment-related information. | Current or past job history or performance evaluations. | YES |
| J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). | Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | YES |
| K. Inferences drawn from other personal information. | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | YES |
| L. Sensitive Personal Information | A consumer’s social security, driver’s license, state identification card, or passport number, a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account. A consumer’s precise geolocation. A consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership. The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication. A consumer’s genetic data. All other terms defined in the CPRA, or its implementing regulations have the same meanings when used in this notice. | NO (Information regarding race and ethnicity maybe collected for reporting purposes) |
Systems used by Alliant for Collection and Retention of Employee Data
| System | Data Collected |
|---|---|
| SalesForce | Website inquiries, applications, communications containing name, physical address, email address, phone number, Social Security number, driver’s license number, passport number, or other similar identifiers. |
| Marketo | Name, physical address, email address, phone number, or other similar identifiers. |
| Canvas | Name, emails address, academic participation history, academic content, feedback, comments and academic grades and other similar education records. |
| Anthology Student | Name, physical address, email address, phone number, Social Security number, driver’s license number, passport number, or other similar identifiers. Educational Records as defined under Family Education Records Privacy Act (FERPA). |
| Outlook | Name, email address, physical address, phone number, education record information, employment information. |
| Qualtrics | Name, physical address, email address, phone number, licensure information, employer and salary information and other survey data. |
| Ultipro-UKG | Name, physical address, email address, phone number, Social Security number, driver’s license number, passport number, or other similar identifiers. Job Titles, attendance records, payroll and tax withholdings and other similar information. |
| Nexonia | Employee name, ID, address and campus location, expense reimbursements. |
| Bill.com | Employee name, ID, address and campus location, email address, social security number, bank account information. |
| Alliant SharePoint | Personnel files, background check results, I-9 containing name, address and social security numbers, I-20s for students, accommodations through Office of Accessibility. |
| Levio | Annual goals, performance evaluations and trainings. |
| Vector Solutions | Employee name, ID, address and campus location, and training history. |
| TransAmerica | Employee name, ID, address and campus location, email address, salary and retirement contributions. |
| Teams/Zoom | Image and likeness, chat communications, meeting attendance records. |
| CCTV/Surveillance System | Image and likeness – Access is limited to authorized personnel and used for security monitoring and law enforcement investigations. |
Access, Data Portability, and Deletion Rights
You have the right, at any time, to direct Alliant to limit its use of the sensitive personal information it collects, to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer.
You have the right to “request to correct” inaccurate personal information that Alliant is or maybe maintaining about you.
You have the right to opt-out of the sell or sharing of personal information.
You have the right to request that Alliant delete any of your personal information that we collected from you and retained, subject to certain exceptions and legal requirements. You have the right to request that Alliant instructs service providers to do the same.
You also have the right to be free from discrimination or retaliation for exercising any of your rights.
Exercising Access, Data Portability, and Deletion Rights
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:
- Calling us at 1-858-635-4734
- Emailing us at Compliance@Alliant.edu
- Writing or visiting us at:
Alliant University
Office of Compliance
10455 Pomerado Road
San Diego, CA 92131 - Visiting our website at the link:
Additional Information
For more information about the personal information, we collect and how we use it, or for additional information about rights that California residents have under the CPRA, please see our Privacy Policy at https://www.alliant.edu/privacy-policy.
If you have any questions or concerns regarding this notice or our privacy policy, you may contact us by calling 1-858-635-4734, emailing us at Compliance@Alliant.edu, call or by writing us at:
Alliant University
Attn: Office of Compliance
10455 Pomerado Road
San Diego, CA 92131
To exercise your rights under the CPRA, please visit the links below.