Tufts Websites
Privacy Statement
Terms & Conditions of Use
Specific Disclosures
Global Privacy Statements
Global Privacy Statement for Personal Data
How to Make a Subject Access Request
Privacy Statement for Prospective Students and Applicants
Privacy Statement for Students
Privacy Statement for Students in Tufts-Sponsored Study Abroad Programs
Privacy Statement for Job Applicants, Faculty, Staff, Consultants and Other Persons Providing Services
Privacy Statement for Alumni, Donors and Other Tufts Supporters
Privacy Statement for Research Participants
Privacy Statement for Online Education and Non-Degree Educational Program Participants
Privacy Statement under China's Personal Information Privacy Law (PIPL)
Tufts Websites
Privacy Statement
This Privacy Statement discloses the privacy practices for tufts.edu and other Tufts University websites (together, a “Site” or “Sites”) that have pointed you to this page, as well as mobile apps and other digital properties (together, a “Service” or the “Services”). This privacy statement covers all tufts.edu websites, apps and other digital properties unless a particular Service indicates otherwise. Services may have additional privacy policy or policies. Please read these terms with the Terms & Conditions of Use.
The University places a high value on privacy and recognizes its critical importance in an academic setting. The University affirms its obligation to comply with all applicable privacy laws and regulations.
If you leave a Service and visit a website, app or other digital property operated by a third party, Tufts University cannot be held responsible for the protection and privacy of any information that you provide while visiting such third-party services. Accordingly, please exercise caution and review the privacy statement applicable to the website, app or other digital property in question.
To the extent permissible under applicable law, by using and/or participating in these Services, you signify that you have read these terms and agree to be bound by and comply with them. If you do not agree to be bound by these terms, please promptly exit all Services.
An additional Privacy Statement (The Global Privacy Statement for Personal Data) is provided that discloses additional information with respect to personal data protected under laws and regulations that include notice and other requirements that may apply to your personal data (together, the Privacy Laws). Among those Privacy Laws are the General Data Protection Regulation for the European Economic Area (EEA) (regulation (EU) 2016/679 of the European Parliament) (the EEA GDPR) and the United Kingdom General Data Protection Regulation, as tailored by the Data Protection Act 2018 of the UK (the UK GDPR). The Tufts University PIPL Privacy Statement applies to personal information subject to the Personal Information Protection Law (PIPL) of the People’s Republic of China. Various other notices are published in relation to the use of the personal data protected under the Privacy Laws of Prospective Students and Applicants; Students; Students in Tufts-Sponsored Study Abroad Programs; Job Applicants, Faculty, Staff, Consultants and Other Persons Providing Services; Alumni, Donors and Other Tufts Supporters; Research Participants; and Online Education and Non-Degree Educational Program Participants.
Information You May Provide Directly
The following types of information may be stored and processed by Tufts if provided by you through our Services:
- Your contact details including address, email address and phone number
- Biographical information consisting of your name, title, birth date, age, and gender
- Information about your time at Tufts University
- Your professional activities
- Current interests and preferences
- Records of communications sent to you by Tufts University or received from you
- Attendance at Tufts University events
The above categories of information are only collected through the Services if you provide them.
There are a number of circumstances in which you may choose to provide us with your personal information. The following lists the most common ways in which we may collect your personal information:
- When you sign up to receive e-mail newsletters from us
- When you register for an account on a Service (e.g. Taleo or Interfolio for job applicants)
- When you participate in surveys, panels, or research
- When you register for or participate in programs, activities, initiatives, and events
- When you request information or assistance
- In conjunction with processing your application for admission or employment
- When you participate with social media accounts involving Tufts programs
- When you participate in communities, chat rooms, and other interactive services
- In conjunction with any verification of your account information
- In conjunction with investigations into any activity that may violate the law or the Service's terms and conditions
- When you communicate with us through a Service
- When you provide user-generated content on any Service that permits it
- In conjunction with any other activity on a Service where you knowingly volunteer personal information.
When you interact with any Tufts page or account on a social media platform, such as Facebook, Twitter, LinkedIn, YouTube, Vimeo, or Instagram, or when you use your social media account or credentials to log in to a Service, we may also collect the personal information that you make available to us on that page or through that account, including your username, account ID or “handle.”
It is Tufts’ policy to hold all personal information you supply in accordance with applicable data protection and privacy law.
Information Gathered About You or Your Devices
We collect information when you access one of the Services and when you subscribe to our email services.
Device Information
We may collect information about the computer, mobile device or other device you use to access the Services such as IP address, geolocation information, unique device identifiers, browser type, browser language or other information of this nature. We use this information in an aggregate fashion to track access to the Services.
IP Address. Your IP address is automatically assigned to your device by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications and other services. We use IP addresses for several purposes, such as security, calculating usage levels, and diagnosing server problems. We also use your IP address to administer our Services by identifying (1) which parts of a Service are most heavily used, (2) where our users come from (i.e., a referring sign or a search engine, etc.), and (3) which portion of our audience comes from within or outside the Tufts network. We may also derive your approximate location from your IP address. We do not link IP addresses to anything personally identifiable unless we are required to do so under applicable law or court order or authorized to do so under our policies.
Physical Location. We may use your device’s physical location to provide you with personalized location-based services and content. We may also share your device’s physical location with our service providers to enable them to provide you with more personalized content and to study the effectiveness of advertising campaigns. In some instances, you may be permitted to allow or deny such uses and/or sharing of your device’s location, but if you do, we and/or our service providers may not be able to provide you with the applicable personalized services and content.
Use of Cookies
Cookies are small files that are stored on your device and are used to collect and store information. This may include: which pages you see; how long you stay; what you click on our pages; if you visit the website again; and which country and city you are browsing from.
Types of Cookies. A session cookie is temporary, linking the actions of a user during any given browser session. When the browser is closed, the cookie is deleted. A permanent cookie, also known as a persistent cookie, is stored for a specific period of time and activates each time the user visits the website that created the cookie. A third-party cookie is placed by a domain other than that of the website the user is visiting. Further general information about cookies and how they work is available at www.allaboutcookies.org.
Why we use Cookies. We use session, permanent and third-party cookies for security purposes, to display information more effectively, to understand and save your preferences for future visits and to compile aggregate data about site traffic and site interaction, so that we can offer better site experiences and tools in the future. Cookies further allow us to select which of our programs, initiatives, offerings and services are most likely to appeal to you and to display them while you are on the Services.
We may contract with selected third parties to place cookies through the Services to provide us with better insights into the use of the Services or user demographics or to provide relevant advertising to you. These third parties may collect information about a user’s online activities over time and across different websites when they use our Services. These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business.
Some third-party cookies may originate from websites such as Facebook, Twitter, Google+, LinkedIn, Tumblr, YouTube, Instagram, Pinterest or other social media services. Since the cookie policies of these sites change over time, you should determine their policies by visiting the privacy policy pages of these sites directly.
Use of Technology to Track Users of Services
Google Analytics. One or more of our Services may also use a third-party service, Google Analytics, to track website statistics. Google Analytics uses cookies and other technologies to track visitor interactions and collects the IP address of website visitors in order to provide us a sense of where our visitors come from. This service may also collect demographic and information regarding the use of other websites, apps and online resources. Google Analytics collects information anonymously and reports website trends without identifying individual visitors or reporting IP addresses to us.
We use the information collected to understand how our visitors are using the website and make improvements for a better online experience. We do not use Google Analytics to track or collect personal information (name, email address, billing information or other data that can be reasonably linked to such information) and we do not associate personal information with web analytics information.
To see the full Google Analytics privacy policy and learn more about its privacy practices, please see Google Privacy Policy, www.google.com/policies/privacy/partners/, and Google Analytics: Safeguarding Your Data. You can opt out of the services by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.
Pixel Tags. One or more of our Services may use pixel tags (also known as web beacons, tags or clear GIFs) that embed graphic files in our Services. These graphic files contain a unique identifier that enables us to recognize when someone has visited our Services, or, in the case of web beacons, opened an email that we have sent them.
These small data files or graphic files serve a variety of functions. In some instances, they may be necessary to deliver a particular service. Even when they are not essential to the delivery of a service, they may provide information that enables us to improve the performance and functionality of our services and the effectiveness of our marketing campaigns. They may also enable us to customize our services and provide advertising messages that are more relevant to you and your interests.
Adobe Flash Technology. We may use Flash Local Shared Objects (Flash LSOs) and other similar technologies to, among other things, collect and store information about your use of the Services.
Adjusting Cookie Settings
You can change your cookie settings by reviewing your internet browser's cookie options. Most browsers allow you to automatically decline cookies or be given the choice of declining or accepting a particular cookie (or cookies) from a particular website. The links below to popular browsers may help you understand your cookie options better. Typically, such information can be found under the browser's 'Help', 'Preferences' or 'Options' menus. You may also wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html. We do not currently respond to browser do-not-track request signals.
- Cookie settings in Chrome
- Cookie settings in Firefox
- Cookie settings in Internet Explorer
- Cookie settings in Safari – iOS
- Cookie settings in Safari – macOS
Blocking Cookies. Should you choose to decline or block cookies by adjusting your browser settings, including cookies essential to the Services, please note that all or parts of our Services may not be functional or accessible to you. Our Services will issue cookies as soon as you visit the Services, unless your browser cookie settings are adjusted to prevent such an occurrence.
Interest-Based Advertisements. Some of our Services engage in online interest-based advertising to enhance your experience and show you advertisements that might interest you. Like many organizations, we and our advertising partners display tailored interest-based advertising on the Services and on third-party platforms using information you make available to us when you interact with our Services. Interest-based ads, also sometimes referred to as personalized or targeted ads, are displayed to you based on information from activities such as searching on our Services or visiting other websites, apps or online services that contain our content or ads. We do this using a variety of digital marketing networks and ad exchanges, and we use a range of advertising technologies like mobile identifiers, cookies, and pixel tags.
To learn more about interest-based ads or to opt-out of receiving interest based ads, please visit http://optout.aboutads.info, or www.youronlinechoices.eu, or Network Advertising Initiative opt-out page. Google provides information on Blocking Certain Ads and on how to Control the Ads You See. Please note that if you opt out of interest-based advertising, you will still see advertisements – they will just not be tailored to your interests. Also, note that deleting browser cookies can remove the cookie preferences you have made, so you may need to opt-out again in the future.
Email Terms
When you give us your email address, we may use it to respond to inquiries, requests or questions, or to communicate information about the University or its activities. If you do not wish to receive communications from Tufts, please click on the unsubscribe link in the body of the message.
Depending on the context in which you submitted your contact information, your data may be accessible to Tufts and its schools, departments, institutes, centers, and divisions connected to Tufts. It is used and processed for a full range of communications and programs involving academic and administrative departments. These include the following communications and marketing activities (by mail, email, text message and telephone):
- Sending University publications
- Promoting our programs, events and other services
- Notifying you of upcoming events
- Promoting opportunities
Tools may be used to help us improve the effectiveness of our communications with you, including tracking whether the emails we send are opened and which links are clicked within a message. Lastly, we use data to undertake analysis projects to ensure only effective and relevant communications are sent to you.
If you send us email messages, you should be aware that information disclosed in email may not be secure or encrypted and thus may be available to others. We suggest that you exercise caution when deciding to disclose any personal or confidential information in email.
Information We Collect from Others
In addition to the information described under Information Gathered About You or Your Devices above, we may obtain personal information about you from third parties.
Partners and Service Providers
We use partners and service providers, such as application facilitators, payment processors and analytics providers, to perform services on our behalf. Some of these partners have access to personal information about you that we may not otherwise have (for example, if you sign up directly with that provider) and may share some or all of this information with us. We use this information to administer our services and conduct marketing and advertising campaigns, as well as to process transactions that you request.
Single Sign-On
Some of our Services allow you to register and log in to them through a third-party platform. When you choose to login to one of our Services through a third-party platform, you allow us to access and collect any information from your third-party platform account permitted under the permitted under the settings and privacy policy of that platform. We use this information to deliver this functionality and the Services to you.
Supplemental Information
We may receive additional personal information from third-party sources, such as credit reference agencies and public or private databases, or companies or institutions that may sponsor or facilitate your participation in one of our programs, which we may append to existing personal information, such as email address verification. We may use this supplemental information to process transactions that you request and to prevent fraud, deliver relevant offers and advertising to you, and to improve our operations, services and our advertising and marketing campaigns.
How Do We Use Your Information?
We may use your personal information in order to:
- Conduct our operations and administer our educational and other services
- Manage your accounts with us
- Contact you to respond to your requests or inquiries
- Process and complete your transactions including, as applicable, course registration, order confirmation, enrollment in academic groups or other programs, processing payments for online purchases and course registration, and delivering products or services
- Administer fellowships, grants and other programs in support of individual study and research projects
- Provide you with newsletters, articles, service alerts or announcements, event invitations, and other information that we believe may be of interest to you or you have requested
- Provide you with promotional information, offers, and other information that are personally tailored to your interests
- Conduct research, surveys, and similar inquiries to help us understand trends and needs of our users
- Perform marketing, promotions and advertising, either directly or through third-parties, which activities may include interest-based advertising, targeted advertising and online behavioral advertising in order to increase the likelihood that the content would be of interest to you
- Request gifts and donations
- Prevent, investigate, and take action regarding, or provide notice of fraud, unlawful or criminal activity, unauthorized access to or use of personal information, our website or data systems or other misconduct
- Enforce our Privacy Statements and Terms of Use, and other agreements
- Meet the requirements of our accreditors
- Meet our legal obligations
- Send you text messages or push notifications when you sign up for one of our messaging programs, which messages may be sent by automated means
- Respond to subpoenas, court orders, or other legal process
- Protect the health, safety, rights or property of you, us or others, including by providing a safety announcement
Will Tufts Share My Information with Others?
We may share your personal information within our community of schools, centers, and other Tufts units and affiliates. User information may also be shared with third-party partners to the extent necessary for such third parties to provide services to us or to users of our services or provide and improve our Services or other communications to users. Any third parties who receive user information for this purpose are prohibited from using or sharing user information for any purpose other than providing services to Tufts or to users.
We may also provide your information to third parties in circumstances where we believe that doing so is necessary or appropriate to satisfy any applicable law, regulation, legal process or governmental request; to enforce our rights, to detect, prevent or otherwise address fraud, security or technical issues; or to protect the rights, property or safety of us, our users or others. Additional information about how we may share your information is provided below.
COVID-19 Tracing Apps
With respect to any COVID-19 tracing apps, your mobile telephone number, opt-in data and SMS messaging will not be shared with any affiliated or unaffiliated third parties or otherwise sold, transferred, disclosed, or disseminated to any third party, except as necessary to perform services on our behalf in connection with the tracing app, or as required by law. In no event shall affiliated or unaffiliated third parties be permitted to use such information for marketing purposes.
Service Providers
We share your information with third-party service providers who complete transactions or perform services on our behalf or for your benefit, such as:
- Payment and donation processing
- Marketing and analytics
- Processing employment applications
- Processing admissions applications
- Alumni and donor outreach and engagement
- Event registration and coordination
- Course registration, administration and coordination
- Course evaluations and assessments
- Providing course platforms or tools that enable or enhance our academic offerings
- Educational operations and collaborations
- Research insights and analytics
- Performing human resources administration, including for employee benefits
- Customer relationship management (CRM) services, such as for Tufts Support Services and Tufts Technology Services' Support Desk
- System maintenance and security
Partners
We may share your information with other institutions and organizations for the purposes of administering programs and services, such as:
- Cross-registration for courses and programs with other universities
- Study abroad at foreign universities
- Online education offerings through online platforms
- Research arrangements with other universities and partners
- Conference, workshop and similar proceedings
- Events and activities with clubs and special interest groups
Third-Party Mobile App Providers
Our Services on your mobile device may gather and transfer your information, including location information, from and to other applications, functions and tools within your mobile device.
Legal Process, Safety and Terms Enforcement
We may disclose your information to legal or government regulatory authorities as required by applicable law. We may also disclose your information to third parties as required by applicable law in connection with claims, disputes or litigation, when otherwise required by applicable law, or if we determine its disclosure is necessary to protect the health and safety of you or us, or to enforce our legal rights or contractual commitments that you have made.
User Generated Content
Some of our Services may enable users to submit their own content for courses, assignments, contests, blogs, videos, and other functions. Unless otherwise indicated, please remember that any information you submit or post as user-generated content to our Services may become public information. You should exercise caution when deciding to disclose your personal, financial or other information in such submissions or posts. We cannot prevent others from using such information in a manner that may violate this Privacy Statement, the law, or your personal privacy and safety. We are not responsible for the results of such postings.
Links to Third Party Sites and Social Media
The Services may include links to websites, applications and digital services operated by third parties. This Privacy Statement does not apply to, and we are not responsible for the content, privacy policies or data practices of third parties that collect your information. We encourage you to review the privacy policies for those third parties to learn about their information practices.
Services Used by Minors
The Services are not directed to individuals under the age of thirteen (13), and we do not knowingly collect personal information from individuals under 13.
Personal Information of Persons outside the United States
The Services are published in the United States and are subject to the laws of the United States. If you are located in a country outside the United States and voluntarily submit personal information to us, your information will be used as provided in this Privacy Statement and will be transferred to, and/or be stored in, the United States.
The Global Privacy Statement for Personal Data also provides information with respect to personal information that may be subject to Privacy Laws that include notice and other requirements that may apply to your personal data. Among those Privacy Laws are the EEA GDPR and the UK GDPR. Various other notices are published in relation to the use of the personal data protected under the Privacy Laws of Prospective Students and Applicants; Students; Students in Tufts-Sponsored Study Abroad Programs; Job Applicants, Faculty, Staff, Consultants and Other Persons Providing Services; Alumni, Donors and Other Tufts Supporters; Research Participants; and Online Education and Non-Degree Educational Program Participants. Those Privacy Statements include information about the purpose and legal basis under the EEA GDPR, the UK GDPR and other Privacy Laws for the use and other processing of that personal information, including the transfer of information out of the EEA, the UK or other countries, and the rights associated with that personal information under the EEA GDPR, the UK GDPR and other Privacy Laws.
Inquiries and Changes to this Privacy Statement
If you have any questions about this Privacy Statement, please contact dataprivacy@tufts.edu.
Tufts University reserves the right to change, modify, or otherwise amend this Privacy Statement at its sole discretion and at any time as it deems circumstances warrant. Any such changes will be posted on this page. Your continued use of the Services following the posting of changes to this Privacy Statement will mean you accept those changes.
This Privacy Statement was last updated effective on March 1, 2022.
Terms & Conditions of Use
Please read these Terms & Conditions of Use ("Terms of Use" or "Terms") and the Tufts University Privacy Statements carefully before accessing tufts.edu or other Tufts University sites ("Site" or "Sites")or Tufts mobile apps and other digital properties, or participating in any chatroom, newsgroup, bulletin board, mailing list, website, transaction or other online forum available at or in connection with any of the Sites, apps or other properties (together, with a Site or Sites, a “Service” or the “Services”). These Terms cover all Tufts University Services unless a particular Service indicates otherwise. Other Services may also have additional terms and conditions. By using and/or participating in these Services, you signify that you have read these terms and agree to be bound by and comply with them. If you do not agree to be bound by these terms, please promptly exit all Services.
Tufts University reserves the right to modify these Terms at any time and any such changes will be posted on this page.
Content
Consistent with Tufts University policies and regulations, Tufts University upholds the principles of academic freedom and shared governance, freedom of speech, and privacy in the use of electronic resources by our faculty, students and staff.
The Tufts Services contain official pages and other content in support of the core mission of Tufts University or related administrative business. They also contain Web pages and other content generated by groups or individuals whose expressed views do not necessarily represent the views of Tufts University or the Board of Trustees.
You agree that Tufts University has the right and discretion to monitor any activity, services and content associated with its Services. Tufts University may investigate any reported violation of these Terms of Use or complaints relating to the Services, and take any action that we believe is appropriate including, but not limited to, removing materials from the Services and terminating/suspending your access to the Services.
Rules for Online Conduct
You agree to use the Services in accordance with all applicable laws. Because Tufts University is a nonprofit, tax-exempt organization, you agree that you will not use the Services for organized partisan political activities or for the promotion of for profit businesses or products. You further agree that you will not e-mail to or post any of the following content anywhere on the Services, or on any other Tufts computing resources:
- Content that defames or threatens others
- Harassing statements or content that violates federal or state law
- Content that discusses illegal activities with the intent to commit them
- Content that infringes another's intellectual property, including, but not limited to, copyrights, trademarks or trade secrets
- Material that contains obscene (i.e. pornographic) language or images
- Advertising or any form of commercial solicitation
- Content that is otherwise unlawful
- Content or software that attempts to circumvent security protections or contains malicious software
Copyrighted material, including without limitation software, graphics, text, photographs, sound, video and musical recordings, may not be placed on the Services without the express permission of the owner of the copyright in the material, or other legal entitlement to use the material.
Tufts employees using these Services are expected to abide by the Tufts' Business Conduct Policy and other Tufts policies and guidelines applicable to Tufts employees.
Tufts students using these Services are expected to abide by the applicable student handbooks and other Tufts policies and guidelines applicable to Tufts students.
Although Tufts University does not routinely screen or monitor content posted by users to the Services, Tufts University reserves the right to do so and to remove content that violates the above rules of which it becomes aware, but is under no obligation to do so.
Finally, you agree that you will not access or attempt to access any other user's account, or misrepresent or attempt to misrepresent your identity while using the Services.
Permission to Use Materials
In consideration for your agreement to the terms and conditions contained here, Tufts University grants you a personal, non-exclusive, non-transferable license to access and use the Services. User may download material from the Services only for user's own personal, non-commercial use. User may not otherwise copy, reproduce, retransmit, distribute, publish, commercially exploit or otherwise transfer any material. The burden of determining that use of any information, software or any other content on the Service is permissible rests with user.
Limitation of Use
You may use the Services for legal purposes only. Furthermore, you agree that, if a third party claims that any material you have contributed to a Service is unlawful, you will bear the burden of establishing that the material complies with all applicable laws. Although Tufts University does not routinely monitor the content of the Services, Tufts University has the right to remove material from the Services, block access, or take other action with respect to any of the material on the Services in its sole discretion, although Tufts University is under no obligation to do so. You may not use Tufts computing resources or Services to disseminate unsolicited advertising or promotional material of any kind.
Links to Third-Party Website and other Online Services
Tufts' Services may contain links or references to other websites and online services. Tufts University does not have control over third-party websites and online services or their content and does not assume responsibility or liability for any content, opinions, or material available on them. Tufts University does not endorse the content of any third-party website or online service, nor does Tufts University warrant that a third-party site will be free of computer viruses or other harmful code that can impact your computer or other web-access device. If you link to any third-party website or online service through a Tufts' Service, please be aware that you are doing so at your own risk. Tufts University encourages you to review any third-party website or online service's terms of use and privacy policy as those, and not Tufts University's Terms of Use and Privacy Terms, are applicable to your use of their website or online service and any information that it may collect.
Choice of Law
These Terms shall be governed in all respects by the Commonwealth of Massachusetts without giving effect to its conflicts of law provisions. Both parties submit to the personal jurisdiction of and venue in, the state and federal courts sitting in the judicial district that includes Middlesex County, Massachusetts. The parties further agree that any cause of action arising under these Terms shall exclusively be brought in such courts. If any provision of these Terms is held to be invalid or unenforceable, such provision shall be struck and the remaining provisions shall be enforced. Headings are for reference purposes only and in no way define, limit, construe, or describe the scope or extent of such section. Tufts University's failure to act with respect to a breach by you or others does not waive its right to act with respect to subsequent or similar breaches.
Disclaimer of Warranty/Limitation of Liability
THESE SERVICES AND ANY INFORMATION, PRODUCTS OR SERVICES THEREIN ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR USE OF A PARTICULAR PURPOSE, OR NONINFRINGEMENT.
Tufts University does not warrant, and hereby disclaims any warranties, either express or implied, with respect to the accuracy, adequacy or completeness of any Service, information obtained from a Service, or link to a Service. Tufts does not warrant that Services will operate in an uninterrupted or error-free manner or that Services are free of viruses or other harmful components. Use of information obtained from or through these Services is at your own risk.
YOU AGREE THAT TUFTS UNIVERSITY WILL NOT BE LIABLE TO YOU FOR ANY LOSS OR DAMAGES, EITHER ACTUAL OR CONSEQUENTIAL, ARISING OUT OF OR RELATING TO THESE TERMS, OR TO YOUR (OR ANY THIRD PARTY'S) USE OR INABILITY TO USE A SERVICE, OR TO YOUR PLACEMENT OF CONTENT ON A SERVICE, OR TO YOUR RELIANCE UPON INFORMATION OBTAINED FROM OR THROUGH A SERVICE. IN PARTICULAR, TUFTS WILL HAVE NO LIABILTY FOR ANY CONSEQUENTIAL, INDIRECT, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES, WHETHER FORESEEABLE OR UNFORESEEABLE, (INCLUDING, BUT NOT LIMITED TO, CLAIMS FOR DEFAMATION, ERRORS, LOSS OF DATA, OR INTERRUPTION IN AVAILABILITY OF DATA), ARISING OUT OF OR RELATING TO THESE TERMS, YOUR USE OR INABILITY TO USE A SERVICE, OR ANY PURCHASES OR DONATIONS ON THIS OR THROUGH THIS SERVICE, OR YOUR PLACEMENT OF CONTENT ON A SERVICE, OR TO YOUR RELIANCE UPON INFORMATION OBTAINED FROM OR THROUGH A SERVICE, WHETHER BASED IN CONTRACT, TORT, STATUTORY OR OTHER LAW, EXCEPT ONLY IN THE CASE OF DEATH OR PERSONAL INJURY WHERE AND ONLY TO THE EXTENT THAT APPLICABLE LAW REQUIRES SUCH LIABILITY.
Tufts makes no representation regarding your ability to transmit and receive information from or through the Services and you agree and acknowledge that your ability to access the Services may be impaired. Tufts disclaims any and all liability resulting from or related to such events.
Copyright
All content included in or made available through any Tufts's Service, such as text, graphics, logos, button icons, images, audio clips, video and other multimedia, digital downloads, and data compilations is the property of Tufts University or its content suppliers and protected by United States and international copyright laws.
Copyright Complaints
We respect the intellectual property rights of others. If you are an owner of intellectual property and you believe your intellectual property has been improperly posted or distributed via the Services, please notify us by sending an email to DMCA-Agent@tufts.edu or by sending a notice by U.S. Mail to: Office of University Counsel, Tufts University, Ballou Hall, Medford, MA 02155. In your e-mail or letter, you will need to include all of the notice elements listed in the DMCA at 17 U.S.C. § 512(c)(3). Please be aware that the DMCA makes copyright owners liable if they materially misrepresent that a user's content is infringing.
Trademarks
The logo, name and all graphics on the Services of Tufts University or any of its schools, clinics or affiliates, are trademarks of Tufts or its affiliates. Use, reproduction, copying or redistribution of trademarks, without the written permission of Tufts or its affiliates is prohibited. All other trademarks or servicemarks appearing on the Services are the marks of their respective owners.
SMFA and the SCHOOL OF THE MUSEUM OF FINE ARTS are trademarks of the Museum of Fine Arts, Boston, and are used by permission.
Indemnification
You agree to indemnify and hold Tufts harmless from any claims, losses or damages, including legal fees, resulting from your violation of these Terms, your use of a Service or your placement of any content onto a Service, and to fully cooperate in Tufts' defense against any such claims.
Your Account
If you use a Service, you are responsible for maintaining the confidentiality of your account and password, if any, and for restricting access to your computer, and you agree to accept responsibility for all activities that occur under your account or password. Tufts University and its affiliates reserve the right to refuse service, terminate accounts, remove or edit content, or cancel orders in their sole discretion.
Other
The Services may contain errors and omissions relating to any information disclosed therein. We reserve the right to correct or modify any information without prior notice.
Complete Agreement
These Terms must be read in conjunction with Tufts University's Privacy Statements, and the provisions of such Privacy Statements are incorporated herein. To the extent the Privacy Statements conflict with the terms of these Terms of Use, the terms of the Privacy Statements shall control. Please note that these Terms of Use only apply to your use of Tufts University Services.
Effective Date
These Terms are effective as of October 30, 2015, as modified as of July 10, 2020.
Tufts University reserves the right to change, modify, or otherwise these Terms at its sole discretion and at any time as it deems circumstances warrant.
Specific Disclosures
Drift Chatbot
- Your information is being collected by Tufts University. You can contact us at dataprivacy@tufts.edu.
- We are collecting your data in order to assist you in finding out about our programs.
- Our lawful basis for processing your data is that processing is necessary to our legitimate interest in assisting you and answering your questions.
- The chatbot service is provided by Drift, and some of your data will be shared with Drift in order to provide the service. This includes storing a copy of the transcript of your conversation, so we can email you if requested.
- Data entered into the chatbot will be stored in our customer relationship management tool, which allows us to email you requested information and communicate with you about our programs, and share other updates.
- You have the right to request access to and rectification or erasure of personal data or restriction of processing concerning the data subject, or to object to processing. You also have the right to data portability.
- If we collect contact information from you, we will do so only with your consent. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent before its withdrawal.
- You have the right to lodge a complaint with a supervisory authority.
- You are not required to interact with the chatbot or provide personal data. If you do not provide contact information, we will not be able to follow up with any information you request.
Global Privacy Statements
Global Privacy Statement for Personal Data
This statement provides additional information about our use and processing of your personal data. Some jurisdictions have adopted laws and regulations that include notice and other requirements that may apply to your personal data (together, the Privacy Laws). Among those Privacy Laws are the General Data Protection Regulation for the European Economic Area (EEA) (regulation (EU) 2016/679 of the European Parliament) (the EEA GDPR) and the United Kingdom General Data Protection Regulation, as tailored by the Data Protection Act 2018 of the UK (the UK GDPR). The Tufts University PIPL Privacy Statement applies to personal information subject to the Personal Information Protection Law (PIPL) of the People’s Republic of China. Other notices are provided that apply to the personal data of Prospective Students and Applicants; Students; Students in Tufts-Sponsored Study Abroad Programs; Job Applicants, Faculty, Staff, Consultants and Other Persons Providing Services; Alumni, Donors and other Tufts Supporters; Research Participants and for Online Education and Non-Degree Educational Program Participants.
This Notice should be read together with Tufts' Privacy Statement.
1. Why have I been directed to this webpage?
The general information published on this page is intended to supplement specific information that you may have already been given in connection with your engagement with a particular service, facility, event or initiative run by Tufts. You may have been directed here, for example, because you are accessing an optional staff or student service or using a Tufts facility, or because you are using a particular website or online resource, or because you have signed up to attend an event aimed at prospective students or members of the public. The information below is the same for many such situations, and we thought it would be helpful to have it in one place.
2. What is “personal data” and what does “processing” mean?
In this notice and in the other specific notices, we use the broad meaning of personal data used in the EEA GDPR and the UK GDPR, which define “personal data” as any information relating to an identified or identifiable natural person. Other Privacy Laws may include other definitions of personal information or personal data, which may be narrower than this definition or may include very specific types of information.
Many of the Privacy Laws use the word “processing.” “Processing” simply means any way of working with personal data, from collecting it to using it to sharing it to disposing of it.
3. What are the purposes and lawful bases for processing your personal data?
Tufts may collect, use and otherwise process personal data about you for several different purposes and legal bases, including:
- We need it to perform a contract with you, such as to provide you services.
- It satisfies a legitimate interest, such as to promote and provide goods and services to you and to protect our legal rights and interests. When our purpose is based on our legitimate interest, we consider whether that interest is overridden by your data protection interests.
- You give us consent to do so for a specific purpose.
- We need to process your data to comply with a legal obligation.
- We need to process your data in connection with your or another person’s vital interest.
- We need to process your data in connection with the public interest.
- We have another permitted legal basis.
If you have consented to our use of information about you for a specific purpose under the EEA GDPR or the UK GDPR, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. If you have consented to our use of information about you for a specific purpose under another of the Privacy Laws, then that Privacy Law may also allow you to change your mind at any time, but this will not affect any processing that has already taken place.
Unless you are told otherwise, there is no requirement to supply us with any of your personal data. It is Tufts’ policy to not use personal data to carry out any automated decision-making that affects you without an appropriate legal basis as required by the applicable Privacy Law.
Specific information for Services
Tufts will process your personal data in connection with tufts.edu and other Tufts University websites (together, a “Site” or “Sites”) that have pointed you to this page, as well as mobile apps and other digital properties (together, a “Service” or the “Services”), for a variety of service- and business-related purposes, including for analyzing and improving website performance; email and other communications; processing you have requested; third-party services; and security and legal requirements.
The use of your personal data in the manner described above and elsewhere in the Privacy Statement are necessary for the legitimate interests of the University in operating and improving its Services, analyzing their use, and ensuring their security. The Services collect limited personal data and we use it in ways that are compatible with your individual rights and freedoms. Where you enter your personal data into an online form on or in connection with any of our Services for any specified purpose, you will be told about the use we will make of that information (e.g., to send you newsletters or to enable your attendance at an event).
4. If I am outside of the United States, will my personal data be transferred out of the country where I am located or reside?
Your personal data will be transferred out of the country where you are when it is collected to the USA, which has different privacy laws than those of your country. Your personal data may also be transferred to countries other than the US, which may have different privacy laws than those of your country. Tufts has adopted appropriate measures to protect your personal data. The transfer of your personal data may be necessary for the performance of a contract between you and Tufts, for the implementation of pre-contractual measures, for the conclusion or performance of a contract concluded in your interest, or for important reasons in the public interest. In limited circumstances, the transfer may be necessary for the establishment, exercise or defense of legal claims, to protect your vital interests, or as otherwise permitted by the EEA GDPR, the UK GDPR, or other applicable Privacy Laws.
5. Will Tufts share my personal data with others?
We will use reasonable measures to ensure that your personal data are only transferred to third parties who also maintain at least the standard of protection required under the EEA GDPR, the UK GDPR, or other Privacy Laws, as applicable.
6. How long will my personal data be kept?
Information about how long different types of information are retained by Tufts is published at Records Retention Schedules.
7. What rights do I have with respect to my personal data?
The Privacy Laws of different countries provide specific data protection rights. It is Tufts’ intention to comply with the data protection rights that apply to its processing of personal data under the different Privacy Laws.
Rights Provided by the EEA GDPR and the >UK GDPR
The EEA GDPR and the UK GDPR provide individuals with several specific data protection rights with respect to their personal data. These rights require a particular type of connection to the countries that are part of the EEA or the UK. These rights apply when Tufts processes your personal data:
- As part of Tufts acting in an established way in the EEA or UK, respectively,
- In connection with Tufts offering goods or services to you when you are physically in the EEA or the UK, or
- When the processing is related to any monitoring of your behavior when you are physically in the EEA or UK.
The rights provided by the EEA GDPR and the UK GDPR are generally described below. Further details, including how to submit a request, are published at How to Make a Subject Access Request. These rights are not absolute and each right is subject to limitations.
- The right of access. You have the right to confirmation of the personal data that is processed about you by Tufts and to a copy of the information. Among the limitations for this right is that providing a copy will not adversely affect the rights of others.
- The right to correct. You have a right to have inaccurate personal data rectified, or taking into account the purposes of the processing, completed if it is incomplete.
- The right to erasure (also known as the right to be forgotten). You have a right to have your personal data erased in certain limited circumstances.
- The right to restrict processing and to object to use. You have the right to request the restriction or suppression of your personal data. This right only applies in certain circumstances. If processing is restricted, Tufts would not be permitted to use the data without your consent, unless in connection with a legal claim, the protection of another person, or other exceptions. Tufts would be permitted to continue to store the information.
- The right to data portability. The right to data portability allows you to obtain an electronic copy of your personal data to enable you to reuse that data for your own purposes across different services. This right allows you to move, copy or transfer personal data easily from one IT environment to another. This right only applies to information you have provided to Tufts and depending on the context, applies to some of your information, but not to all of your information.
- The right to object. You have the right to object to the processing of your personal data in certain circumstances, in the absence of a compelling reason for the continued processing.
Rights Provided under other Privacy Laws
As mentioned above, it is Tufts’ intention to comply with the data protection rights that apply to its processing of personal data under the different Privacy Laws. If you wish to exercise a data protection right under one of the Privacy Laws other than the EEA GDPR and the UK GDPR, then you can find additional information at How to make a Subject Access Request.
8. Where can I go if I have questions?
If you have any questions about how your personal data is used, or wish to exercise any of your rights with respect to your personal data, please see How to Make a Subject Access Request or contact Tufts’ Data Privacy Team at dataprivacy@tufts.edu.
If you are not happy with the way your personal data is being handled, or with the response received from us, then the EEA GDPR and the UK GDPR provide you the right to lodge a complaint with the GDPR supervisory authority or commissioner in the country where you habitually reside, where you work, or where you believe an infringement of the GDPR occurred.
You may find similar rights under other Privacy Laws.
9. Changes to this Privacy Statement
Tufts University reserves the right to change, modify, or otherwise amend this notice at its sole discretion and at any time as it deems circumstances warrant. Any such changes will be posted on this page.
This notice was last updated effective on July 9, 2021.
How to Make a Subject Access Request
This document provides information about how to submit a request to exercise rights you have with respect to your personal data under privacy laws and regulations (together, the Privacy Laws).
Rights provided by the EEA GDPR and the UK GDPR
Among the Privacy Laws that provide specific rights with respect to an individual’s personal data are the General Data Protection Regulation for the European Economic Area (EEA) (the EEA GDPR) and the United Kingdom General Data Protection Regulation, as tailored by the Data Protection Act 2018 of the UK (the UK GDPR).
Tufts' Global Privacy Statement for Personal Data describes when the EEA GDPR and the UK GDPR provide rights applying to an individual’s personal data. For example, if you provide personal data to Tufts when you are physically present in the EEA or the UK, or while you participate in an established Tufts program that occurs in the EEA or UK, then you would have the following rights under the EEA GDPR and the UK GDPR:
- The right of access.
- The right to correct.
- The right to erasure (also known as the right to be forgotten).
- The right to restrict processing.
- The right to data portability (to move the data to another party).
- The right to object.
All of these rights are subject to certain exemptions and limitations. More information about these rights may be found in the EEA GDPR, the UK GDPR and in the Global Privacy Statement for Personal Data.
Rights provided under other Privacy Laws
Other Privacy Laws may provide you with certain rights with respect to your personal data. Please be aware that some Privacy Laws do not apply to non-profit institutions. Generally, a Privacy Law will require you to have a specific relationship to the jurisdiction in order to be entitled to exercise a personal data right.
Form for Submitting a Request
Requesting to exercise your rights under the EEA GDPR, the UK GDPR, the PIPL or another Privacy Law is known as making a Subject Access Request (sometimes called an SAR). A Subject Access Request form is made available for your convenience. The form sets out where you should send your request and asks that you provide us with proof of your identity.
Before we can act on your request, we must:
- Confirm your identity
- Be supplied with sufficient information from you in order to locate the information you seek.
On receipt of your completed request, verification of your identity, and sufficient details to enable us to locate the information, we will endeavor to provide you information on our actions promptly. The EEA GDPR and the UK GDPR require that we act on a completed request within one month. That period may be extended by two months where necessary, taking into account the complexity and number of the requests.
If we determine not to fulfill your request, we are required to notify you within one month of our reasons for not doing so.
If a person’s data requests are clearly unfounded or excessive, we may charge a reasonable fee taking into account the administrative costs or decline to act on the requests.
Privacy Statement for Prospective Students and Applicants
Effective starting May 25, 2018, last revised effective on March 1, 2022.
This statement provides information about the use of personal data provided by prospective students and applicants for admission to the schools’ programs and for financial aid for those programs. This statement provides notice under the laws and regulations that include notice and other requirements that may apply to your personal data (together, the Privacy Laws). Among those Privacy Laws are the General Data Protection Regulation for the European Economic Area (EEA) (regulation (EU) 2016/679 of the European Parliament) (the EEA GDPR) and the United Kingdom General Data Protection Regulation, as tailored by the Data Protection Act 2018 of the UK (the UK GDPR). For information about how Tufts University handles personal information subject to the Personal Information Protection Law (PIPL) of the People’s Republic of China, see the Tufts University PIPL Privacy Statement. Tufts is committed to processing your personal data in compliance with the Privacy Laws and has prepared this statement to provide you with information about your rights under the Privacy Laws, including the EEA GDPR and UK GDPR.
This statement should be read together with the Global Privacy Statement for Personal Data, which provides information regarding:
- What is “personal data” and what does “processing” mean?
- If I am outside of the United States, will my personal data be transferred out of the country where I am located or reside?
- What rights do I have with respect to my personal data?
1. Who will process my personal data?
The information provided here applies to the collection, use, sharing, disclosure and other processing of your personal data by Tufts University and its schools as part of the admissions and financial aid process. The schools assessing your application for admission and for financial aid may provide you with additional statements about how they will collect, use, share, disclose and otherwise process your personal data as you progress through the admissions and financial aid process.
2. What personal data will be collected, used or otherwise processed?
For prospective students and applicants to undergraduate and graduate degree and certificate programs of the School of Arts and Sciences, the School of Engineering, and the School of the Museum of Fine Arts at Tufts:
Tufts will use the details provided, including through the College Board, on your Common Application, the Coalition Application, or the Questbridge application (undergraduate programs) or the graduate program application, supplementary application materials, together with the supporting documents requested and additional details provided by the persons submitting letters of recommendation or recorded following an interview, if one is conducted. Tufts will also use personal details you provide on any inquiry form (web-based, hand-written inquiry cards at recruitment events and information sessions), registration forms and inquiry email.
Tufts may also receive information from the US government, including the Department of Education, A Better Chance, The Greenlight Fund, Hobsons, Inc., YouVisit, Parchment, Escrip-SAFE for transcript delivery, other universities and colleges in connection with joint programs, Educational Testing Service (including for the Test of English as a Foreign Language (TOEFL)), the International English Language Testing System (IELTS), the International Baccalaureate (IB) program, the Fulbright Foreign Student Program, the Institute of International Education, America-Mideast Educational and Training Services (AMIDEAST), and other similar organizations.
If applicable, Tufts also processes the information submitted in connection with your financial aid application. For certain degree programs, we will also conduct background screening checks for safeguarding purposes.
Additional information about the collection, use, combining and other processing of your personal data is available by contacting the Admissions and Financial Aid offices of each school.
For more information about the specific types of personal information we collect and why we do so, please see the following Section 4.
For prospective students and applicants to the School of Medicine, the Graduate School of Biomedical Sciences, School of Dental Medicine, Gerald J. and Dorothy R. Friedman School of Nutrition Science and Policy, the Cummings School of Veterinary Medicine and The Fletcher School of Law and Diplomacy:
Tufts will use the details provided, including on your application, submitted to us by you, a third party application service, such as the American Medical College Application Service (AMCAS), the American Dental Education Association Associated American Dental Schools Application Service (ADEA AADSAS), and the Veterinary Medical School Application Service (VMCAS), or otherwise, supplementary application materials, together with the supporting documents requested and additional details provided by the persons submitting letters of recommendation or recorded following an interview, if one is conducted. If applicable, some Tufts schools also process the financial information submitted in connection with your financial aid application. For certain degree programs, the school may also conduct background screening checks for safeguarding purposes and to make sure that its students are available for professional rotations and licensure.
Tufts may also receive information from the US government, including the Department of Education, other universities and colleges in connection with joint programs, Educational Testing Service (including for the Test of English as a Foreign Language (TOEFL)), the College Board, the Association of Professional Schools of International Affairs (APSIA), the International English Language Testing System (IELTS), and other similar organizations.
Additional information about the collection, use, combining and other processing of your personal data is available by contacting the Admissions and Financial Aid offices of each school.
For more information about the specific types of personal information we collect and why we do so, please see the following Section 4.
All Schools – Sensitive Personal Data
In addition to the personal information referred to above, Tufts may process some personal data about you that is classified as sensitive under the Privacy Laws. This includes information classified as “special category” under the EEA GDPR or the UK GDPR, which require additional protections. The information may include information concerning your race, ethnicity, sexual orientation, or health/disability. We use this information for planning and monitoring purposes, and in order to provide care, help or suitable adjustments. For certain programs of study, other sensitive information may be processed, such as information about past criminal convictions and your fitness to practice in certain regulated professions. Access to, and the sharing of, this sensitive or “special category” personal data are managed very carefully.
We consider the processing of this personal data to be necessary for compliance with a legal obligation (e.g. equal opportunities monitoring), or necessary for the professional licensing requirements or the performance of tasks we carry out in the public interest (e.g. teaching and research). If we require your consent for any specific use of your personal data, we will collect it at the appropriate time.
“Tufts does not discriminate in admissions, employment, or in any of its educational programs or activities on the basis of race, color, national or ethnic origin, ancestry, age, religion or religious creed, disability or handicap, sex or gender (including pregnancy, sexual harassment and other sexual misconduct including acts of sexual violence such as rape, sexual assault, stalking, sexual exploitation, sexual exploitation and coercion, relationship/intimate partner violence and domestic violence), gender identity and/or expression (including a transgender identity), sexual orientation, military or veteran status, genetic information or any other characteristic protected under applicable federal, state or local law.” Tufts’ Non-Discrimination Policy.
3. What are the purposes and lawful bases of the processing?
Tufts will use your personal data provided on your admission application, the financial aid application, and the other information referred to above for the purposes of answering questions you may have, identifying you, processing your application, verifying the information provided, assessing your candidacy for admission to the programs to which you applied and deciding whether to offer you admission to those programs, assessing your eligibility for financial aid and determining what financial aid will be offered to you, and communicating to you those outcomes. The following table provides additional information about specific types of personal information we collect and otherwise process, the reasons we do so, and which lawful bases under the EEA GDPR, the UK GDPR and other Privacy Laws are applicable. This table includes types of personal information you may be required to provide, as well as information that may be optional to provide. We require you to provide your personal information (except for questions marked as optional) during the admissions and financial aid processes in order to assess your candidacy properly. The following table also includes information that may be collected from other persons or organizations.
Admissions and financial aid decisions are not automated.
The information provided below includes information that our schools may receive, including in some cases information that may be provided voluntarily that is not required for a complete application. However, the information used by a particular school in its admission and financial aid processes may not include all of the information listed below.
Category of Personal Data (including Optional and Required Personal Data) | Purposes of Collecting and other Processing | Lawful Bases for Collecting and other Processing |
---|---|---|
Contact Information including your name, home or school address, email address, phone numbers, and emergency contact information | To respond to requests for information from you and communicate your application status and decision; to establish a record for your admissions and financial aid application processes; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Identifying Information including date and/or place of birth, Social Security number or other personal governmental identifier, passport number, alien registration number, citizenship or immigration status | To create a unique personally identifying record; to determine if a visa is required for program participation; to evaluate eligibility for financial aid, including prior financial aid for education; to establish a Bursar’s account; for a criminal background check, if enroll; statistical purposes | To process transactions requested by you and meet our contractual obligations |
Demographic Information including race, ethnicity, gender, including gender preference, sexual orientation, age, marital status, health and disability, photo, dietary preferences, and other personal history and information you may volunteer in your application or essay | To evaluate the application process; for planning and monitoring purposes; to provide you with information regarding diversity initiatives and engagement opportunities; in order to provide care, help or suitable adjustments; for required regulatory reporting; to evaluate your eligibility for admission; to evaluate eligibility for merit and endowed scholarships with specific requirements; with respect to marital status, in some cases, to evaluate eligibility for financial aid; event planning, including during orientation; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Education History including your prior schools, transcripts, school activities, scholarly work and disciplinary records | To evaluate your eligibility for admission; to determine what schools you previously attended so that we may verify we have complete information; to evaluate academic credits that may transfer to our school; to evaluate eligibility for merit and endowed scholarships with specific requirements; to respond to records requests; to evaluate and assess the type of violation committed and how it may impact our university community | To process transactions requested by you and meet our contractual obligations |
Testing History including standardized testing and corresponding identity verification documentation | To evaluate your eligibility for admission; to evaluate eligibility for merit and endowed scholarships with specific requirements; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Personal History including interests, extracurricular activities, references and recommendations and other personal information you may choose to volunteer about yourself, your family members, or other persons, including in your application or your essay, and other information we may learn about your or their background | To evaluate your eligibility for admission; to evaluate eligibility for merit and endowed scholarships with specific requirements; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Employment and Professional History and Criminal Record including resume or CV, job title, location, and work experience, professional certifications, and your self-reported and publicly available criminal record | To evaluate your eligibility for admission; to evaluate your ability to comply with professional training and licensure requirements; to evaluate eligibility for merit and endowed scholarships with specific requirements; to respond to records requests; to evaluate and assess the type of violation committed and how it may impact our university community | To process transactions requested by you and meet our contractual obligations |
Personal Financial Information other tax identification number, personal and business tax reports, wages and benefits, scholarships and grants, bank statements and account numbers, socioeconomic status, and family support | To evaluate your eligibility for financial aid and determining what financial aid will be offered to you; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Family Financial Information including family member names, ages, education, occupations, wages, and savings | To evaluate your eligibility for financial aid and determining what financial aid will be offered to you; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Payment Information depending on your means of payment, your payment card number or your bank and bank account number | To receive payment of application fees and refunds, if applicable | To process transactions requested by you and meet our contractual obligations |
Additionally, Tufts may use or disclose the information provided for statutory, public interest and other purposes, including:
- To prevent or detect fraud.
- To comply with applicable laws and regulations and Tufts’ policies, including but not limited to its non-discrimination policy.
- To help us to make reasonable accommodations for any disability, as requested by you.
- To allow for consideration of any future accommodation requirements.
- To offer and deliver university news, goods, services, and experiences to you.
- To help inform and support university and school planning and decision making.
- To provide information required by governmental and accrediting organizations.
- To conduct research and statistical analysis. No information that could identify you will be published in connection with this type of analysis.
- If you are admitted and enroll, facilitating your education (such as by sharing personal data with registrars and others in order to enable your enrollment and participation in the school to which you have been admitted).
- In addition to the purposes stated above, the University considers the processing of your personal information for the above purposes necessary to comply with a legal obligation (e.g. non-discrimination and professional licensing requirements), to establish, exercise or defend legal claims, and to perform tasks carried out in the public interest (e.g. admissions research).
4. Will Tufts share my personal data with others?
Your application and related materials will be shared with the appropriate faculty and staff at Tufts. Each school has developed its own practices for sharing your personal information based on its consideration of the type and sensitivity of the personal information, the purpose for which the information was provided or otherwise collected, the purpose for sharing the personal information, and the safeguards used to protect the shared information. Accordingly, under certain, considered circumstances, and when relevant, your personal information may also be shared with:
- Parents, Spouses, and Guardians. In some cases, we may share your personal data with a parent, spouse, or guardian if necessary, to properly complete the admissions process or in the event of an emergency.
- Service Providers. We may use third parties to support our operations and provide services to our prospective, admitted or enrolled students. In such cases, we may share your information with these third parties.
- School Counselors and Administrators. We may share your information with your school counselors and administrators.
- University Affiliated Programs. We may share your information with third parties that are affiliated with the University for the purpose of contacting you about goods, services, or experiences that may be of interest to you.
- Research and Studies. We may share your information with third parties that study admissions or other topics related to higher education. We may also share your information with third parties that conduct research or develop products or services designed to improve admissions and other higher education functions.
- Required by Law. We may share your information with third parties to the extent we are required to do so by law, court order, or subpoena. In the case of international applicants, we may share your information with appropriate agencies including the U.S. Citizenship and Immigration Services in order to act as your sponsor for visa purposes.
- Emergency Circumstances. We may share your personal data with a person you have designated as an emergency contact or with other third parties, if, in our sole judgment, such disclosure is necessary to protect your health, safety, or property or the health, safety, or property of any other person.
- Compelling Purpose. We may share your information in other cases when there is a compelling purpose regarding benefit to Tufts or members of our community.
- De-Identified and Aggregate Information. We may use and disclose information about our applicants in de-identified or aggregate form without limitation.
5. How is my personal data used if I am admitted and decide to enroll?
If you are accepted and decide to enroll, we will use your personal data for the purposes described at “How is my personal data used?” in the Privacy Statement for Students, as amended from time to time. Further information about this will be provided in your offer of admission, and if applicable, your financial aid decision.
If you are accepted and decide to enroll, Tufts will also provide data about you to the National Student Clearinghouse and other external agencies and funding bodies, as required.
6. How long will my personal data be kept?
We will store your personal data for as long as necessary to complete the application process. Some schools store applicant information permanently. If you are admitted, your personal information will normally be kept for at least one year or longer after the completion of the application process, depending on the policy of the school to which you applied. If you are admitted and decide to enroll, your personal information will be kept as part of your student record for the duration of your studies (and it may be used as part of our assessment of any future application you make for further studies at Tufts). Details about how long different types of information are retained by Tufts is published at Records Retention Schedule and is available from the school to which you applied. Additional information about how long student information may be retained is available in the Privacy Statement for Students.
7. Where can I go if I have questions?
If you have any questions about how your personal data is used, or wish to exercise any of your rights with respect to your personal data, please consult the Global Privacy Statement for Personal Data and How to make a Subject Access Request or contact Tufts’ Data Privacy Team at dataprivacy@tufts.edu, or your prospective school, as appropriate.
If you are not happy with the way your personal data is being handled, or with the response received from us, then the EEA GDPR and the UK GDPR provide you the right to lodge a complaint with the GDPR supervisory authority or commissioner in the country where you habitually reside, where you work, or where you believe an infringement of the GDPR occurred.
You may have similar rights under other Privacy Laws.
8. Changes to this Privacy Statement
Tufts University reserves the right to change, modify, or otherwise amend this Privacy Statement at its sole discretion and at any time as it deems circumstances warrant. Any such changes will be posted on this page.
This Privacy Statement was last updated effective on March 1, 2022.
Privacy Statement for Students
Effective starting May 25, 2018, last revised effective on March 1, 2022.
The following statement has been prepared to provide notice to students whose personal data is collected, used or otherwise processed by Tufts University, including its schools, while they are students at Tufts. This statement provides notice under the laws and regulations that include notice and other requirements that may apply to your personal data (together, the Privacy Laws). Among those Privacy Laws are the General Data Protection Regulation for the European Economic Area (EEA) (regulation (EU) 2016/679 of the European Parliament) (the EEA GDPR) and the United Kingdom General Data Protection Regulation, as tailored by the Data Protection Act 2018 of the UK (the UK GDPR). For information about how Tufts University handles personal information subject to the Personal Information Protection Law (PIPL) of the People’s Republic of China, see the Tufts University PIPL Privacy Statement. Tufts is committed to processing your personal data in compliance with the Privacy Laws and has prepared this statement to provide you with information about your rights under the Privacy Laws, including the EEA GDPR and UK GDPR.
This statement should be read together with the Global Privacy Statement for Personal Data, which provides information regarding:
- What is “personal data” and what does “processing” mean?
- If I am outside of the United States, will my personal data be transferred out of the country where I am located or reside?
- What rights do I have with respect to my personal data?
In addition to the information provided in this statement, students are encouraged to review the information about the Family Educational Rights and Privacy Act (FERPA) for their school. FERPA permits the disclosure of certain personal information classified by a school as “directory” information. See Tufts’ FERPA Policy. Privacy Blocks are available to students who wish to prevent the University from disclosing their directory information (in student directories and commencement programs, for example) by selecting the appropriate privacy settings through SIS.
1. How does this webpage relate to other information about data protection?
When you applied to become a student, you were told how Tufts would use your personal data to process your application and for related purposes (see Privacy Statement for Prospective Students and Applicants). You were referred to this webpage for a fuller statement of the uses we make of your personal data while you are a student at Tufts.
In addition to the information published here, when you use specific services and facilities offered by Tufts, you may be told about other uses of your personal data. For example, there are separate statements for persons who use or engage with Tufts websites (see Privacy Statement), IT services (see Use of Institutional Systems Policy), the Counseling and Mental Health service (see Confidentiality), the Office of Equal Opportunity (see http://oeo.tufts.edu/), and the libraries (see Tufts University Libraries Privacy Policy).
Additional information for students participating in Tufts-sponsored study abroad programs is available at Privacy Statement for Students in Tufts-Sponsored Study Abroad Programs.
Additional information for students participating in online education and non-degree educational programs is available at Privacy Statement for Online Education and Non-Degree Educational Program Participants.
2. Who will process my personal data?
The information published here applies to the use, sharing and disclosure of your personal data by Tufts University, including its schools, units, centers and other affiliated organizations.
3. What personal data will be collected, used or otherwise processed?
The personal data that Tufts keeps a record of may include the personal data:
- you provided in connection with your admission to Tufts, including financial aid applications, (see Privacy Statement for Prospective Students and Applicants)
- included in records about your studies at Tufts
- included in records about your use of the academic and non-academic facilities and services that we offer.
Among the personal data included may be your name, home and local addresses, student identification number, Social Security number or other governmental identification numbers, date of birth, courses taken, fee payments, financial aid provided, and information about your examinations, assessments and results.
Your personal data is created, stored and transmitted in a variety of paper and electronic formats, including databases at Tufts (such as the main student records database, or the systems used by Tufts libraries). It is Tufts’ policy to limit access to and the use of your personal data to Tufts staff, faculty and authorized affiliates who have a legitimate interest in it for the purpose of carrying out their professional and contractual duties.
In addition to the personal information referred to above, Tufts may process some personal data about you that is classified as sensitive under the Privacy Laws. This includes information classified as “special category” under the EEA GDPR or the UK GDPR, which require additional protections. The information may include information concerning your race, ethnicity, sexual orientation, or health/disability. We use this information for planning and monitoring purposes, and in order to provide care, help or suitable adjustments. For certain programs of study, other sensitive information may be processed, such as information about past criminal convictions and your fitness to practice in certain regulated professions. Access to, and the sharing of, this sensitive or “special category” personal data are managed very carefully.
We consider the processing of this personal data to be necessary for compliance with a legal obligation (e.g. equal opportunities monitoring), or necessary for the professional licensing requirements or the performance of tasks we carry out in the public interest (e.g. teaching and research). If we require your consent for any specific use of your personal data, we will collect it at the appropriate time.
“Tufts does not discriminate in admissions, employment, or in any of its educational programs or activities on the basis of race, color, national or ethnic origin, ancestry, age, religion or religious creed, disability or handicap, sex or gender (including pregnancy, sexual harassment and other sexual misconduct including acts of sexual violence such as rape, sexual assault, stalking, sexual exploitation, sexual exploitation and coercion, relationship/intimate partner violence and domestic violence), gender identity and/or expression (including a transgender identity), sexual orientation, military or veteran status, genetic information or any other characteristic protected under applicable federal, state or local law.” Tufts’ Non-Discrimination Policy.
4. What are the purposes and lawful bases of the processing?
Tufts may process your personal data for a range of contractual, statutory, or legitimate University interests, or for public interest purposes, including the following:
- To deliver and administer your education, record the details of your studies (including any placements with external organizations), and determine or confirm your academic achievements (e.g. results, awards).
- Where relevant, to monitor, evaluate and support your research activity.
- To administer the financial aspects of your relationship with us and any funders.
- To deliver services to you (e.g. IT, athletics, libraries, accommodation, careers, housing).
- To enable your participation at events (e.g. functions, commencement).
- To communicate effectively with you by mail, email and phone, including the distribution of relevant newsletters and circulars.
- To operate security, governance, disciplinary (including plagiarism and academic misconduct), complaint, audit and quality assurance processes and arrangements.
- To support your training, medical, safety, and welfare requirements and your religious, spiritual, ethical, and cultural life.
- To compile statistics and conduct research for internal, statutory, regulatory and accreditation reporting purposes.
- To fulfill and monitor our legal obligations under equal opportunity, immigration and public safety laws and regulations, and for the establishment, exercise or defense of legal claims.
- To enable us to contact others in the event of an emergency.
We consider the processing of your personal data for these purposes to be necessary for the performance of our contractual obligations with you (e.g. to manage your student experience and welfare while studying at a Tufts program), or necessary for compliance with a legal obligation (e.g. equal opportunities monitoring), or necessary for the performance of tasks we carry out in the public interest (e.g. teaching and research), or necessary for the pursuit of the legitimate interests of Tufts as an educational and research institution or of an external organization (e.g. to enable your access to external services). If we require your consent for any specific use of your personal data, we will collect it at the appropriate time. We will not use your personal data to carry out any wholly automated decision-making that affects you.
5. Will Tufts share my personal data with others?
As described above, your personal data may be shared with relevant Tufts staff, faculty and affiliates as required. In addition, it may be shared as permitted or required by law, on a considered and confidential basis, as appropriate, with a range of external organizations, including external examiners and auditors, and external individuals involved in relevant Tufts committees or procedures. We may also share your personal data as relevant with:
- Your Funders and Sponsors. We may share your personal data with organizations that may provide you funding or other financial sponsorship.
- Parents, Spouses, and Guardians. In some cases, we may share your personal data with a parent, spouse, or guardian if necessary, including in the event of an emergency.
- Service Providers. We may use third parties to support our operations and provide services to our students. In such cases, we may share your personal data with such third parties.
- University Affiliated Programs. We may share your personal data with third parties that are affiliated with the University for the purpose of contacting you about goods, services, or experiences that may be of interest to you. These may include the providers of any external/collaborative learning and training placements or fieldwork opportunities.
- Student Organizations. We may share your personal data with student clubs and other organizations in order to facilitate your knowledge of those groups.
- Research and Studies. We may share your personal data with third parties that study topics related to higher education. We may also share your personal data with third parties that conduct research or develop products or services designed to improve higher education functions.
- Higher Education Organizations. We may share your personal data with the National Student Clearinghouse and other relevant higher education organizations.
- Required by Law and/or Governmental Authorities. We may share your personal data with third parties to the extent we are required to do so by law, court order, or subpoena. In the case of international students, we may share your personal data with appropriate agencies including the U.S. Citizenship and Immigration Services in order to act as your sponsor for visa purposes. On occasion and when necessary, we may share your personal data with local governmental authorities, including the police and other law enforcement bodies, and statutory regulatory bodies.
- Emergency Circumstances. We may share your personal data with a person you have designated as an emergency contact or with other third parties, if, in our sole judgment, such disclosure is necessary to protect your health, safety, or property or the health, safety, or property of any other person.
- Compelling Purpose. We may share your personal data in other cases when there is a compelling purpose regarding benefit to the Tufts or members of our community.
- De-Identified and Aggregate Information. We may use and disclose information about our students in de-identified or aggregate form without limitation.
We will normally confirm details of your results and degrees awarded to external enquirers or organizations, and will provide references to third parties. Your name and the type of degree awarded will be published in the relevant graduation program, unless a Privacy Block is in place.
If your personal data includes basic contact details, that information may be included in our online directory, though you can choose to limit what information is visible (https://directory.tufts.edu/edit.cgi). In addition, please see the information provided at the start of this statement with respect to FERPA.
6. How long will my personal data be kept?
We store your personal data for the duration of your studies (and it may be used as part of our assessment of any future application you make for further studies at Tufts). Information about how long different types of information are retained by Tufts is published at Records Retention Schedule.
7. How are my personal data used after I graduate?
Core records for matriculated students are generally retained indefinitely so that the details of your academic achievements can be confirmed and for statistical or historical research. See Records Retention Schedule. Your contact and core personal details are passed to the Office of Alumni Relations while you are still a student so that you can be added to the alumni database. A statement for alumni and donors setting out how their personal data is used by Tufts is published at Privacy Statement for Alumni, Donors and Other Tufts Supporters.
8. Where can I go if I have questions?
If you have any questions about how your personal data is used, or wish to exercise any of your rights with respect to your personal data, please consult the Global Privacy Statement for Personal Data and How to make a Subject Access Request or contact Tufts’ Data Privacy Team at dataprivacy@tufts.edu.
If you are not happy with the way your personal data is being handled, or with the response received from us, then the EEA GDPR and the UK GDPR provide you the right to lodge a complaint with the GDPR supervisory authority or commissioner in the country where you habitually reside, where you work, or where you believe an infringement of the GDPR occurred.
You may have similar rights under other Privacy Laws.
9. Changes to this Privacy Statement
Tufts University reserves the right to change, modify, or otherwise amend this Privacy Statement at its sole discretion and at any time as it deems circumstances warrant. Any such changes will be posted on this page.
This Privacy Statement was last updated effective on March 1, 2022.
Privacy Statement for Students in Tufts-Sponsored Study Abroad Programs
Effective starting May 25, 2018, last revised effective on March 1, 2022.
The following statement has been prepared to provide notice to students whose personal data is collected, used or otherwise processed by Tufts University, including its schools, for students applying to Tufts-sponsored study abroad programs in the European Economic Area (the EEA), the UK, or other countries, and for students while they are studying in those programs. This statement provides notice under the laws and regulations that include notice and other requirements that may apply to your personal data (together, the Privacy Laws). Among those Privacy Laws are the General Data Protection Regulation for the European Economic Area (EEA) (regulation (EU) 2016/679 of the European Parliament) (the EEA GDPR) and the United Kingdom General Data Protection Regulation, as tailored by the Data Protection Act 2018 of the UK (the UK GDPR). For information about how Tufts University handles personal information subject to the Personal Information Protection Law (PIPL) of the People’s Republic of China, see the Tufts University PIPL Privacy Statement. Tufts is committed to processing your personal data in compliance with the Privacy Laws and has prepared this statement to provide you with information about your rights under the Privacy Laws, including the EEA GDPR and UK GDPR.
This statement should be read together with the Global Privacy Statement for Personal Data, the Privacy Statement for Students, and the Privacy Statement for Prospective Students and Applicants found at Privacy. The Global Privacy Statement for Personal Data provides information regarding:
- What is “personal data” and what does “processing” mean?
- If I am outside of the United States, will my personal data be transferred out of the country where I am located or reside?
- What rights do I have with respect to my personal data?
If you are a student in a study abroad program in the EEA, the UK or another country sponsored by another university or college, then you should contact the program’s sponsor for information about their processing of any personal information subject to the EEA GDPR, the UK GDPR or other Privacy Laws.
In addition to the information provided in this statement, students are encouraged to review the information about the Family Educational Rights and Privacy Act (FERPA) for their school. FERPA permits the disclosure of certain personal information classified by a school as “directory” information. See Tufts’ FERPA Policy. Privacy Blocks are available to students who wish to prevent the University from disclosing their directory information (in student directories and commencement programs, for example) by selecting the appropriate privacy settings through SIS.
1. How does this webpage relate to other information about data protection?"
In addition to the information published here, when you use specific services and facilities offered by Tufts, you may be told about other uses of your personal data. For example, there are separate statements for persons who use or engage with Tufts websites (see Privacy Statement), IT services (see Use of Institutional Systems Policy), the Counseling and Mental Health service (see Confidentiality), the Office of Equal Opportunity (see http://oeo.tufts.edu/), and the libraries (see Tufts University Libraries Privacy Policy).
2. Who will process my personal data?
Your personal data relating to your Tufts-sponsored study abroad program will be used, shared and otherwise processed by staff, faculty, and other persons directly associated with the program, as well as other Tufts offices whose services support study abroad programs, including the Office of Global Operations, and the International Center.
The program will also share your personal data with your school, and other Tufts departments as part of your educational record, and for a variety of other academic, educational, administrative, research and statistical purposes.
Additional information is provided about third parties that may receive personal data collected as part of the program, including host families and other universities or colleges that may be affiliated with the Tufts-sponsored program.
3. What personal data will be collected, used or otherwise processed?
The personal data that the study abroad program may keep a record of may include the personal data you provided in connection with your application to the study abroad program, including financial aid applications, if any (see Privacy Statement for Prospective Students and Applicants), included in records about your studies at Tufts, or included in records about your use of the academic and non-academic facilities and services in connection with the program.
Among the personal data included may be your name, home and local addresses, cell phone number, student identification number, Social Security number, passport number or other governmental identification numbers, visa information, date of birth, courses taken, fee payments, financial aid provided, information about your examinations, assessments and results, emergency and family contact information, travel itineraries, language competencies, health and wellness information, dietary requirements and preferences, hobbies, and photos.
Your personal data is created, stored and transmitted in a variety of paper and electronic formats, including databases at Tufts (such as the main student records database). It is Tufts’ policy to limit access to and the use of your personal data to Tufts staff, faculty and authorized affiliates who have a legitimate interest in it for the purpose of carrying out their professional and contractual duties.
In addition to the personal information referred to above, Tufts may process some personal data about you that is classified as sensitive under the Privacy Laws. This includes information classified as “special category” under the EEA GDPR or the UK GDPR, which require additional protections. The information may include information concerning your race, ethnicity, sexual orientation, or health/disability. We use this information for planning and monitoring purposes, and in order to provide care, help or suitable adjustments. For certain programs of study, other sensitive information may be processed, such as information about past criminal convictions and your fitness to practice in certain regulated professions. Access to, and the sharing of, this sensitive or “special category” personal data are managed very carefully.
We consider the processing of this personal data to be necessary for compliance with a legal obligation (e.g. equal opportunities monitoring), or the performance of tasks we carry out in the public interest (e.g. teaching and research). If we require your consent for any specific use of your personal data, we will collect it at the appropriate time.
“Tufts does not discriminate in admissions, employment, or in any of its educational programs or activities on the basis of race, color, national or ethnic origin, ancestry, age, religion or religious creed, disability or handicap, sex or gender (including pregnancy, sexual harassment and other sexual misconduct including acts of sexual violence such as rape, sexual assault, stalking, sexual exploitation, sexual exploitation and coercion, relationship/intimate partner violence and domestic violence), gender identity and/or expression (including a transgender identity), sexual orientation, military or veteran status, genetic information or any other characteristic protected under applicable federal, state or local law.” Tufts’ Non-Discrimination Policy.
4. What are the purposes and lawful bases of the processing?
Tufts may process your personal data for a range of contractual, statutory, or legitimate University interests, or for public interest purposes, including the following:
- To deliver and administer your education as part of the program, record the details of your studies (including any placements with external organizations), and determine/confirm your academic achievements (e.g. results, awards).
- To administer the financial aspects of your relationship with us and any funders.
- To deliver services to you (e.g. IT, accommodation, careers, housing, field trips).
- To enable your participation at events.
- To communicate effectively with you by mail, email and phone, including the distribution of relevant program information and updates, newsletters and brochures.
- To operate security, governance, disciplinary (including plagiarism and academic misconduct), complaint, audit and quality assurance processes and arrangements.
- To support your training, medical, safety, welfare requirements and your religious, spiritual, ethical, and cultural life.
- To compile statistics and conduct research for internal, statutory, regulatory and accreditation reporting purposes.
- To fulfill and monitor our legal obligations under equal opportunity, immigration and public safety laws and regulations, and for the establishment, exercise or defense of legal claims.
- To enable us to contact others in the event of an emergency.
We consider the processing of your personal data for these purposes to be necessary for the performance of our contractual obligations with you (e.g. to manage your student experience and welfare while studying at a Tufts-sponsored program in the EEA, UK or other country), or necessary for compliance with a legal obligation (e.g. equal opportunities monitoring), or necessary for the performance of tasks we carry out in the public interest (e.g. teaching and research), or necessary for the pursuit of the legitimate interests of Tufts as an educational and research institution or an external organization (e.g. to enable your access to external services). If we require your consent for any specific use of your personal data, we will collect it at the appropriate time. We will not use your personal data to carry out any wholly automated decision-making that affects you.
5. Will Tufts share my personal data with others?
As described above, your personal data may be shared with relevant Tufts staff, faculty and affiliates as required. In addition, it may be shared as permitted or required by law, on a considered and confidential basis, as appropriate, with a range of external organizations, including external examiners and auditors, and external individuals involved in relevant Tufts committees or procedures.
We may also share your personal data as relevant with:
- Affiliated Universities and Colleges. If the Tufts-sponsored program is affiliated with another university or college, we will share personal data with the staff and faculty of that university or college as part of providing courses and other educational offerings and experiences to you.
- Host Families. If you will be residing with a host family, some of your personal data will be shared with them, including your name, contact information, and other information that will be helpful for the family to provide you with a positive experience in their home.
- Your Funders and Sponsors. We may share your personal data with organizations that may provide you funding or other financial sponsorship.
- Parents, Spouses, and Guardians. In some cases, we may share your personal data with a parent, spouse, or guardian if necessary, including in the event of an emergency.
- Service Providers. We may use third parties to support our operations and provide services to our students. In such cases, we may share your personal data with such third parties.
- University Affiliated Programs. We may share your personal data with third parties that are affiliated with the University for the purpose of contacting you about goods, services, or experiences that may be of interest to you. These may include the providers of any external/collaborative learning and training placements or fieldwork opportunities.
- Student Organizations. We may share your personal data with student clubs and other organizations in order to facilitate your knowledge of those groups.
- Research and Studies. We may share your personal data with third parties that study topics related to higher education. We may also share your personal data with third parties that conduct research or develop products or services designed to improve higher education functions.
- Higher Education Organizations. We may share your personal data with the National Student Clearinghouse and other relevant higher education organizations.
- Required by Law and/or Governmental Authorities. We may share your personal data with third parties to the extent we are required to do so by law, court order, or subpoena. In the case of international students, we may share your personal data with appropriate agencies including the U.S. Citizenship and Immigration Services in order to act as your sponsor for visa purposes. On occasion and when necessary, we may share your personal data with local governmental authorities, including the police and other law enforcement bodies, and statutory regulatory bodies.
- Emergency Circumstances. We may share your personal data with a person you have designated as an emergency contact or with other third parties, if, in our sole judgment, such disclosure is necessary to protect your health, safety, or property or the health, safety, or property of any other person.
We will normally confirm details of your results and degrees awarded to external enquirers or organizations, and will provide references to third parties.
6. How are my personal data used after I graduate?
Core records for students are generally retained indefinitely for statistical or historical research and so that the details of your academic achievements can be confirmed. See Records Retention Schedule.
7. How long will my EEA Personal Data be kept?
We store your personal data for the duration of your studies (and it may be used as part of our assessment of any future application you make for further studies at Tufts). Generally, student records for matriculated students are retained permanently. Information about how long different types of information are retained by Tufts is published at Records Retention Schedule.
8. Where can I go if I have questions?
If you have any questions about how your personal data is used, or wish to exercise any of your rights with respect to your personal data, please consult the Global Privacy Statement for Personal Data and How to make a Subject Access Request or contact Tufts’ Data Privacy Team at dataprivacy@tufts.edu, or the director for your program, as appropriate.
If you are not happy with the way your personal data is being handled, or with the response received from us, then the EEA GDPR and the UK GDPR provide you the right to lodge a complaint with the GDPR supervisory authority or commissioner in the country where you habitually reside, where you work, or where you believe an infringement of the GDPR occurred.
You may have similar rights under other Privacy Laws.
9. Changes to this Privacy Statement
Tufts University reserves the right to change, modify, or otherwise amend this Privacy Statement at its sole discretion and at any time as it deems circumstances warrant. Any such changes will be posted on this page.
This Privacy Statement was last updated effective on March 1, 2022.
Privacy Statement for Job Applicants, Faculty, Staff, Consultants and Other Persons Providing Services
Effective starting May 25, 2018, last revised effective on March 1, 2022.
The following statement has been prepared to provide notice to job applicants, faculty, staff, consultants and other persons providing services whose personal data is collected, used or otherwise processed by Tufts University. This statement provides notice under the laws and regulations that include notice and other requirements that may apply to your personal data (together, the Privacy Laws). Among those Privacy Laws are the General Data Protection Regulation for the European Economic Area (EEA) (regulation (EU) 2016/679 of the European Parliament) (the EEA GDPR) and the United Kingdom General Data Protection Regulation, as tailored by the Data Protection Act 2018 of the UK (the UK GDPR). For information about how Tufts University handles personal information subject to the Personal Information Protection Law (PIPL) of the People’s Republic of China, see the Tufts University PIPL Privacy Statement.Tufts is committed to processing your personal data in compliance with the Privacy Laws and has prepared this statement to provide you with information about your rights under the Privacy Laws, including the EEA GDPR and the UK GDPR.
This statement should be read together with the Global Privacy Statement for Personal Data, which provides information regarding:
- What is “personal data” and what does “processing” mean?
- If I am outside of the United States, will my personal data be transferred out of the country where I am located or reside?
- What rights do I have with respect to my personal data?
Does this Privacy Statement apply to me as a job applicant, an employee or as a person otherwise providing services to Tufts?
Whether the Privacy Law of a country outside the US will apply to you will depend on the terms of that country’s Privacy Law. In many, but not all, cases, a Privacy Law will apply if you are a resident of that country or if you will be or are providing services for Tufts in connection with an established program in that country.
When you are a job applicant, an employee or other person providing services to Tufts, the EEA GDPR will apply to you in that role only if you will be providing or are providing services in the context of Tufts’ established study abroad programs in the EEA, and the UK GDPR will apply to you only if you will be providing or are providing services in the context of Tufts’ established study abroad programs in the UK. This includes if you will be providing or are providing services outside of the EEA or UK, as well as inside the EEA and the UK, respectively, so long as your services will be or are in connection with one of Tufts’ established EEA or UK study abroad programs, respectively.
It may be the case that the Privacy Laws, including the EEA GDPR or the UK GDPR, apply to your personal data processed by Tufts in other circumstances if you have other relationships and transactions with Tufts. Please see the other Privacy Statements.
Sections
This statement should be read together with the Global Privacy Statement for Personal Data. Specific sections are as follows:
- For Job Applicants
- Background Check Data for Job Applicants
- For Faculty, Staff, Consultants, and other Persons providing Services
- General Information, including your data rights and where you can get answers to your questions
This statement discloses the privacy practices for the personal data of faculty, staff, consultants, and people who apply for jobs or positions with us when a Privacy Law applies. Please read these terms together with the privacy statements at Privacy and the Statement on Personnel Records.
I. Job Applicants
1. Personal data
This section provides information about the use of job applicants’ personal data by Tufts University, its schools, units, centers and other affiliated organizations for applicants for faculty (employee and non-employee), staff, consultant and other positions.
2. Who will process my personal data?
The information published here applies to the use, sharing, disclosure and other processing of your personal data by Tufts University, its schools, units, centers and other affiliated organizations, which work together closely and share your personal data for a variety of administrative and statistical purposes in accordance with agreed protocols.
3. How does my Taleo account work?
If you are applying for a position through the Taleo online portal, information about how your account works is published separately. Please see the Taleo FAQ for more information. Your information remains in the Taleo database indefinitely.
4. How does my Interfolio account work?
If you are applying for a faculty position through the Interfolio online portal, information about how your account works is published separately. Please see Job Applicant's Guide to Interfolio for more information.
5. What personal data will be processed?
Tufts will use the details you provide on your application form, together with the supporting documents requested and additional details provided by any persons submitting letters of recommendation, and information recorded following any interview process.
If you are required to undergo certain background checks or procedures as part of the job application and offer process (e.g. criminal convictions checks or visa application procedures), we will use this information as described at Background Checks Data.
6. What are the purposes and lawful bases of the processing?
Tufts will process the personal data provided on your application and the other information referred to above for the purposes of identifying you, processing your application, verifying the information provided and assessing your suitability for the role, deciding whether to offer you a job or position, and communicating that outcome.
We may also use or disclose the information provided for the following statutory or public interest purposes:
- To prevent or detect fraud.
- To comply with applicable laws and regulations and Tufts' policies, including its non-discrimination policy.
- To help us to make reasonable adjustments for any disability, as requested by you.
- To allow us to consider any future accommodation requirements.
- To help inform and support University and school planning and decision making.
- To provide information required by governmental and accrediting organizations.
- For research and statistical purposes.
We consider the processing of your personal data for the above purposes to be necessary for us to take steps with a view to considering your employment application, as well as necessary (i) for the purpose of Tufts’ legitimate interests since employing and retaining qualified persons is necessary to conducting our operations as a university; (ii) in order to take steps at your request when considering entering into a contract; (iii) for compliance with a legal obligation (e.g. non-discrimination); (iv) for the performance of tasks we carry out in the public interest (e.g. reporting or research); and (v) for other permitted purposes under the applicable Privacy Law. We require you to provide us with the information we ask for during the application process in order to assess your application properly except where its supply is marked as optional. Applications decisions are not automated.
In some cases, Tufts may process some personal data about you that is classified as “special category” or sensitive personal data, which requires additional protections. Under the EEA GDPR and the UK GDPR, and possibly other Privacy Laws, this includes information concerning your race or ethnicity, health or disability that we use for providing employment benefits, planning and monitoring purposes, or in order to provide care, help or suitable adjustments. For certain positions, other sensitive information may be processed, such as information about past criminal convictions and your fitness to practice in certain regulated professions. Access to, and the sharing of, this sensitive or “special category” personal data are managed very carefully. In addition to the purposes provided above, we consider processing of this sensitive information necessary (i) to carry out obligations and exercise special rights in the field of employment, social security and social protection law; (ii) to protect your vital interest or the vital interest of another person, if you are physically or legally incapable of giving consent; (iii) for the establishment, exercise or defense of legal claims; (iv) for the assessment of your working capacity; or (v) for other permitted purposes under the applicable Privacy Law.
7. Will Tufts share my personal data with others?
As well as circulating your application and related materials to the appropriate hiring staff, reviewers, and interviewers at Tufts, we will share your personal data for the above purposes as relevant and necessary with:
- Recommendations. In checking your references, we may share your information with persons submitting letters of recommendation. For most staff applications, Tufts contracts with a third-party service that solicits information from references on an anonymous basis.
- Service Providers. We may use third parties to support our operations and provide services to our applicants. In such cases, we may share your information with such third parties.
- Required by Law. We may share your information with third parties to the extent we are required to do so by law, court order, or subpoena. In the case of international applicants, we may share your information with appropriate agencies including the U.S. Citizenship and Immigration Services for visa and right to work check purposes.
- Emergency Circumstances. We may share your personal data with a person you have designated as an emergency contact or with other third parties, if, in our sole judgment, such disclosure is necessary to protect your health, safety, or property or the health, safety, or property of any other person.
- Compelling Purpose. We may share your information in other cases when there is a compelling purpose regarding benefit to Tufts or members of our community.
- De-Identified and Aggregate Information. We may use and disclose information about our applicants in de-identified or aggregate form without limitation.
8. How is my personal data used if I become a member of faculty, staff, a consultant or otherwise selected for a position at Tufts?
If you receive an offer of employment or to otherwise provide services and you accept it, we will use your personal data for the purposes described at Faculty, Staff, Consultants and Other Persons Providing Services, as amended from time to time.
9. How long will my personal data be kept?
We store your personal data for as long as necessary to complete the application process. Your personal data may also be used as part of our assessment of any future application you make for further employment or engagement at Tufts. If you are offered a position and accept that position, your information will normally be kept as part of your personnel record for the duration of your employment plus six years or permanently for faculty. After you leave, certain records pertaining to your employment or engagement are retained indefinitely so that the details of your employment or engagement can be confirmed, and for statistical or historical research. If you are not offered a position, your information will normally be kept for six years after the completion of the application process. Currently, Taleo retains information submitted to it indefinitely. Other information about how long different types of information is retained by Tufts is published at Records Retention Schedule.
In addition, if you apply for a faculty appointment, the school may also retain records including your personal data in accordance with the policy adopted by the school(s) and administered by each faculty affairs office.
II. Background Check Data for Job Applicants
This section describes how your personal data is used and stored if you are required to undergo certain background checks or procedures as part of the application and offer process. It supplements the general information about how we use your personal data as an applicant for a position (see Job Applicants). The checks and procedures covered by this section include basic background checks, including verification of education and prior employment, CORI reports, security clearance checks, any application for immigration purposes including where visa sponsorship is required, and similar processes that will only affect some applicants, whether because of the type of position you are applying for or because of your individual status. The sensitive information that may be processed may include information about past criminal convictions, including sex offender convictions, motor vehicle records, and your fitness to practice in certain regulated professions. If any of these checks affect you, we will make this clear to you at the relevant point in the application process.
In all cases, we will only use any information gathered as part of any relevant check or procedure for that specific purpose, and it is our policy to handle, store, retain and destroy relevant materials in accordance with applicable laws and regulations and standards of practice. This means that access to any relevant materials (including any forms completed by Tufts) is strictly controlled. We retain the results of the relevant checks. We will only share any relevant information with external parties insofar as we are required to do so or doing so is necessary (this may include partner organizations or employers and third party vendors who provide associated services).
III. Faculty, Staff, Consultants and Other Persons Providing Services
1. How we use your personal data
This section provides information about the use of personal data while you are a member of faculty, staff, consultant, or other person providing services at Tufts University. Tufts University respects the privacy of its employees and other persons providing services and strives to keep its personnel files confidential. The Human Resources Department maintains a personnel file for each employee. See Statement on Personnel Records.
As a member of faculty, staff, consultant or other person providing services at Tufts, you also have certain legal responsibilities to protect the personal data of other people (e.g. other employees, students, research participants) by handling it appropriately; relevant policies and guidance on the University’s policy on handling personal data are available at Privacy.
2. How does this Privacy Statement relate to other information about data protection?
When you were a job applicant, you were told how Tufts would use your personal data during the recruitment process and for related purposes. (see Job Applicants above). You were referred to this Privacy Statement for a fuller statement of the uses we would make of your personal data if you became a member of faculty, staff, consultant, or the recipient of another appointment providing services at Tufts University. In addition to the information published here, when you use specific services and facilities offered by Tufts, you will be told about other uses of your personal data. For example, there are separate statements for persons who use or engage with Tufts websites (see Privacy Statement), IT services (see Use of Institutional Systems Policy), the Office of Equal Opportunity (see https://oeo.tufts.edu/) and the libraries (see Tufts University Libraries Privacy Policy).
3. Who will process my personal data?
The information published here applies to the use, sharing and disclosure of your personal data by Tufts University, its schools, units, centers and other affiliated organizations, which work together closely and share your personal data for a variety of administrative and statistical purposes in accordance with agreed protocols.
4. What personal data will be processed?
Tufts will keep a record of the details you provided on your application form, any supporting documents requested and additional details provided by any person submitting a letter of recommendation and/or recorded following any interview process. We will maintain various administrative, including financial, records, about your employment or engagement at Tufts, including performance reviews and actions, and about your use of the academic and non-academic facilities and services that we offer, including email and other information technology services. Where relevant, we may supplement these records with personal data from the public domain (e.g. your publications) or other sources.
Your personal data is created, stored and transmitted securely in a variety of paper and electronic formats, including some databases at Tufts (such as the systems used by Human Resources and Tufts Support Services). It is Tufts’ policy to limit access to your personal data to staff and others who have a legitimate interest in it for the purpose of carrying out their duties.
In addition to this, Tufts may process some personal data about you that is classified as “special category” or sensitive personal data, which requires additional protections. Under the EEA GDPR and the UK GDPR, and possibly other Privacy Laws, this includes information concerning your race or ethnicity, health or disability that we use for providing employment benefits, planning and monitoring purposes, or in order to provide care, help or suitable adjustments. For certain positions, other sensitive information may be processed, such as information about past criminal convictions and your fitness to practice in certain regulated professions. Access to, and the sharing of, this sensitive or “special category” personal data are managed very carefully. In addition to the purposes provided above, we consider processing of this sensitive information necessary (i) to carry out obligations and exercise special rights in the field of employment, social security and social protection law; (ii) to protect your vital interest or the vital interest of another person, if you are physically or legally incapable of giving consent; (iii) for the establishment, exercise or defense of legal claims; (iv) for the assessment of your working capacity; or (v) for other permitted purposes under the applicable Privacy Law.
“Tufts does not discriminate in admissions, employment, or in any of its educational programs or activities on the basis of race, color, national or ethnic origin, ancestry, age, religion or religious creed, disability or handicap, sex or gender (including pregnancy, sexual harassment and other sexual misconduct including acts of sexual violence such as rape, sexual assault, stalking, sexual exploitation, sexual exploitation and coercion, relationship/intimate partner violence and domestic violence), gender identity and/or expression (including a transgender identity), sexual orientation, military or veteran status, genetic information or any other characteristic protected under applicable federal, state or local law.” Tufts’ Non-Discrimination Policy.
5. What are the purposes and lawful bases of the processing?
Tufts will process your personal data for a range of contractual, statutory or public interest purposes, including the following:
- To assess your suitability for a particular role or task.
- To support you in implementing any health-related accommodations to allow you to carry out a particular role or task.
- To administer remuneration, payroll, benefit, and other standard employment functions.
- To administer HR-related processes, including those relating to performance/absence management, disciplinary issues and complaints/grievances.
- To operate security, governance, audit and quality assurance arrangements.
- To deliver facilities (e.g. IT, libraries), services and staff benefits to you, and where appropriate to monitor your use of those facilities in accordance with Tufts policies (e.g. on the acceptable use of IT).
- To communicate effectively with you by mail, email and phone, including the distribution of relevant newsletters and announcements.
- To support your training, health, safety, and welfare requirements.
- To compile statistics and conduct surveys and research for internal, statutory and regulatory reporting purposes.
- To fulfill and monitor our responsibilities under equality, immigration and public safety laws and regulations, and for the establishment, exercise or defense of legal claims.
- To enable us to contact others in the event of an emergency (we will assume that you have obtained the consent of the individuals before you supply their contact details to us).
We consider the processing of your personal data for these purposes to be necessary (i) for the purpose of Tufts’ legitimate interests since employing and retaining qualified persons is necessary to conducting our operations as a university; (ii) if a contractual relationship exists, in order to meet our contractual obligations with you, or contractual obligations with others that are in your interest; (iii) for compliance with a legal obligation (e.g. non-discrimination); (iv) for the performance of tasks we carry out in the public interest (e.g. reporting or research); or (v) to protect your vital interest or the vital interest of another person, if you are physically or legally incapable of giving consent. We require you to provide us with any information we reasonably ask for to enable us to administer your relationship with Tufts. It is Tufts’ policy not to use your personal data for any wholly automated decision-making that affects you, other than in connection with enrollment in some of our benefit plans when you first become a benefit eligible employee. Benefit information is provided to you at the time you become eligible and periodically thereafter.
As discussed above, in some cases, Tufts may process some personal data about you that is classified as “special category” personal data, which requires additional protections. This includes information concerning your race or ethnicity, health or disability that we use for providing employment benefits, planning and monitoring purposes, or in order to provide care, help or suitable adjustments. For certain positions, other sensitive information may be processed, such as information about past criminal convictions and your fitness to practice in certain regulated professions. In addition to the purposes provided above, we consider processing of this sensitive information necessary (i) to carry out obligations and exercise special rights in the field of employment, social security and social protection law; (ii) to protect your vital interest or the vital interest of another person, if you are physically or legally incapable of giving consent; (iii) for the establishment, exercise or defense of legal claims; or (iv) for the assessment of your working capacity.
6. Will Tufts share my personal data with others?
Your personal data is shared as permitted or required by law, on a considered and confidential basis, with a range of external organizations, including the following:
- The external providers of any employee benefits or retirement programs.
- The external providers of other services or benefits to our employees, consultants and service providers.
- Relevant government departments, executive agencies or non-departmental public bodies, and other institutes of higher education.
- Any relevant professional or statutory regulatory bodies.
- Prospective and actual research funders or sponsors.
- Any relevant simultaneous employers.
- As required by applicable law, the relevant trade unions.
- On occasion and where necessary, the police and other law enforcement agencies.
- On occasion and where necessary, auditors.
- Companies or organizations providing specific services to, or on behalf of, Tufts, including, without limitation, payroll processors.
Our policy is to provide limited information about you to external enquirers or organizations to verify employment dates and job title, and, if the person requesting the information already has the information, to confirm salary.
We will include your basic contact details in our online directory (https://directory.tufts.edu). If your personal data includes basic contact details, that information may be included in our online directory, though you can choose to limit what information is visible ( https://directory.tufts.edu/edit.cgi). Some departments may expect faculty and staff to maintain a publicly available personal profile or webpage. Some information about Tufts officers, faculty and other staff (e.g. appointments or committee memberships) is published in Tufts Now, Tufts Announcements, Tufts magazines, brochures, and newsletters, press releases, social media accounts, and other Tufts communications.
Other than as set out above, we will not normally publish or disclose any personal data about you to other external enquirers or organizations unless you have requested it or consented to it, or unless it is in your vital interests to do so (e.g. in an emergency situation).
7. How long will my personal data be kept?
Your personal data will normally be kept as part of your personnel record for the duration of your employment or other engagement plus six years for staff and permanently for faculty. Your personal data may also be used as part of our assessment of any future application you make for further employment or engagement at Tufts. After you leave, certain records pertaining to your employment or engagement may be retained indefinitely so that the details of your employment or engagement can be confirmed and for statistical or historical research. Information about how long different types of information is retained by Tufts is published at Records Retention Schedule.
In addition, if you receive a faculty appointment, the school may also retain records including your personal data in accordance with the policy adopted by your school and administered by its faculty affairs office.
IV. General Information
1. How can I access my personnel file?
In addition to your rights to access your personal data, as described above, you may also request a copy of your personnel file. See Statement on Personnel Records.
2. Where can I go if I have questions?
If you have any questions about how your personal data is used, or wish to exercise any of your rights under a Privacy Law, please consult the Global Privacy Statement for Personal Data and How to make a Subject Access Request. If you need further assistance, please contact Tufts' Data Privacy Team at dataprivacy@tufts.edu.
If you are not happy with the way your personal data is being handled, or with the response received from us, then the EEA GDPR and the UK GDPR provide you the right to lodge a complaint with the GDPR supervisory authority or commissioner in the country where you habitually reside, where you work, or where you believe an infringement of the GDPR occurred.
You may have similar rights under other Privacy Laws.
3. Changes to this Privacy Statement
Tufts University reserves the right to change, modify, or otherwise amend this Privacy Statement at its sole discretion and at any time as it deems circumstances warrant. Any such changes will be posted on this page.
This Privacy Statement was last updated effective on March 1, 2022.
Privacy Statement for Alumni, Donors and Other Tufts Supporters
Effective starting May 25, 2018, last revised effective on March 1, 2022.
The following Statement has been prepared to provide notice to alumni and donors whose personal data is collected, used or otherwise processed by Tufts University, including its schools, in connection with being an alumnus, donor, or other supporter. This statement provides notice under the laws and regulations that include notice and other requirements that may apply to your personal data (together, the Privacy Laws). Among those Privacy Laws are the General Data Protection Regulation for the European Economic Area (EEA) (regulation (EU) 2016/679 of the European Parliament) (EEA GDPR) and the United Kingdom General Data Protection Regulation, as tailored by the Data Protection Act 2018 of the UK (the UK GDPR). For information about how Tufts University handles personal information subject to the Personal Information Protection Law (PIPL) of the People’s Republic of China, see the Tufts University PIPL Privacy Statement. Tufts is committed to processing your personal data in compliance with the Privacy Laws and has prepared this statement to provide you with information about your rights under the Privacy Laws, including the EEA GDPR and the UK GDPR.
This statement should also be read together with the Global Privacy Statement for Personal Data, which provides information regarding:
- What is “personal data” and what does “processing” mean?
- If I am outside of the United States, will my personal data be transferred out of the country where I am located or reside?
- What rights do I have with respect to my personal data?
This Statement discloses the privacy practices for the personal data of Tufts alumni and donors. Please read these terms together with the Privacy Statements found at Privacy and the Privacy Policy for Alumni Data.
The Tufts University Alumni Association and the Tufts University Advancement Division respect your right to privacy and will only use your information for university-related purposes. It is Tufts’ policy to use legally required and industry standard methods to secure such data.
This Statement explains how Tufts handles and uses the personal data we collect about our alumni and our past, current and future supporters, whether donors, volunteers or participants in membership groups that we run. “Tufts” in this context means the central university, our individual schools, departments and research institutes, and the libraries and other cultural and recreational facilities that we operate. Developing a better understanding of our alumni, donors and other supporters allows us to keep in touch with you, in order to keep you apprised of our activities and developments, to provide services to you, and to identify ways in which you can support us, through donations or other forms of financial and non-financial support.
1. Personal data held by Tufts
We may hold information relating to you from a number of sources. A significant proportion of the personal data we hold on alumni, donors and supporters is provided to us directly (for example, an alumnus may give us information by filling in forms on the Tufts website, or by corresponding with us by telephone, email or otherwise). If you are a student or studied at Tufts, some of your personal information is transferred from your student record to Tufts University Advancement databases.
The information we hold about you may or may not be personal data within the scope of the EEA GDPR, the UK GDPR or other Privacy Laws. Among the information records may contain are:
- details of your education (e.g. your school(s), areas of study, dates of study)
- unique personal identifiers and biographical information (e.g. student number, date of birth)
- your contact details (and we update these whenever you let us know that they have changed)
- details of your interactions with Tufts, including:
- your membership of clubs, societies, and alumni groups
- your attendance at Tufts events
- other contact with us or our partners
- your relationships with other Tufts alumni, donors or supporters
- details about your family (e.g. your marital status, the name of your partner or spouse)
- personal data provided by you for a specific purpose (e.g. disability and dietary preferences for event management purposes)
- your communication preferences, to help us provide tailored and relevant communications.
We also record, where applicable, based on information that you provide to us and, in some cases, publicly available information and information from our partners:
- financial information relating to you and your family, including:
- your history of donations made to Tufts
- your ability and willingness to make donations, including our assessment of your income and whether particular donations or funding appeals may be of interest to you
- your philanthropy and other giving, including donations to other organizations and other support that you provide (e.g. details of volunteering roles)
- your career highlights and other life achievements
- information about your areas of interest and extra-curricular activities
We augment the data we hold from Tufts with data from our collaborators and publicly available data. We use targeted internet searches and may search the following (either directly or using search engines), where relevant in order to obtain and maintain the accuracy of the data listed above:
- Public sources for companies (in order to find personal data of those companies’ employees, etc.), including company websites
- Public sources for charities (in order to find personal data of those charities’ employees, trustees, etc., and to find information about donations and support)
- Public sources for individuals
- Press sources
In addition to this, Tufts may process some personal data about you that is classified as “special category” or sensitive personal data, which requires additional protections. Under the EEA GDPR and the UK GDPR, and possibly other Privacy Laws, this includes information concerning your race, ethnicity, sexual orientation, political opinions, religious beliefs or health/disability that we use for planning purposes, or in order to provide help or suitable assistance. Access to, and the sharing of, this sensitive or “special category” personal data are managed very carefully.
2. How your personal data is used by Tufts
We may use automated or manual analyses to link personal data together to help us identify your potential for supporting Tufts, to provide you with an improved experience, to send you communications which are relevant and timely, to identify volunteering opportunities or opportunities for providing support which may be of interest to you, and to avoid approaching you with opportunities which are not of interest. All of this enables us to raise more funds, sooner, and more cost-effectively, in support of Tufts’ strategic research and teaching objectives. We always seek to ensure that any opportunities we present are aligned with your interests, based on the research we conduct.
Your personal data is used by us for a number of interdependent purposes in support of alumni relations, communications and fundraising. These include:
- sending you publications, alumni magazines, and news and updates about Tufts
- conducting surveys, including research on when and whether particular donations or funding appeals may be of interest to you
- providing services, including access to Tufts facilities and alumni and donor email accounts
- providing an alumni directory within the password-protected Tufts University Online community
- sending you information about giving opportunities, tailored proposals, appeals and requests for donations
- sending you details of volunteering opportunities
- inviting you to alumni, donor, and other Tufts events
- the promotion of other opportunities and services available to you (e.g. offers and opportunities available through Tufts’ network of alumni, donor and supporter groups)
- wealth analysis and research in order to improve our understanding of our alumni, donors and supporters, inform our fundraising strategy and target our communications more effectively
- internal record keeping, including the management of any feedback or complaints
- administrative purposes (e.g. in order to process a donation you have made or to administer an event you have registered for or attended)
The Tufts University Alumni Association and the Tufts University Advancement Division has also occasionally approved sharing alumni, donor and supporter data with companies and institutions that desire to offer services and benefits to Tufts alumni, donors and supporters at a discounted rate. Any third parties who receive alumni, donor and supporter data for this purpose are prohibited from using or sharing the data for any purpose other than providing services to Tufts or to its alumni, donors and supporters.
Communications to you may be sent by mail, telephone or electronic means, depending on the contact details we hold and the preferences expressed by you about the types of communications you wish to receive. Alumni may at any time opt-out of receiving all emails from the alumni association, or just emails from companies and institutions offering services and benefits to alumni, by clicking on the “update your email subscription preferences” link in emails and following the specified instructions, or by calling 1-800-THE- ALUM (1-800-843-2586) or 617-627-3532, by faxing a request to 617-627-3938, or by mailing a request to Tufts University Alumni Association, 80 George St., Ste. 100-3, Medford, MA 02155.
3. The purposes and lawful bases for processing your personal data
The purposes and lawful bases for processing your personal data include being necessary for the pursuit of our legitimate interests, the carrying out of a task in the public interest, and in some instances, the performance of a contract. We always endeavor to handle your personal data securely and minimize its use.
4. How we protect your personal data
It is Tufts’ policy to have appropriate data sharing agreements in place before sharing your personal data.
We do not sell your personal data to third parties under any circumstances, or permit third parties to sell the personal data we have shared with them. In addition, it is Tufts policy to prohibit any third party (except those selected by the Tufts University Alumni Association and University Advancement) from using alumni, donor or supporter data for any commercial or business marketing.
5. How long will my personal data be kept?
We will retain your personal data indefinitely in support of your lifelong relationship with Tufts or until you request us to do otherwise. Further information about Tufts’ record retention practices can be found at our Records Retention Schedule.
6. Where can I go if I have questions?
If you have any questions about how your personal data is used, or wish to exercise any of your rights under a Privacy Law, please consult the Global Privacy Statement for Personal Data and How to make a Subject Access Request. If you need further assistance, please contact Tufts' Data Privacy Team at dataprivacy@tufts.edu.
If you are not happy with the way your personal data is being handled, or with the response received from us, then the EEA GDPR and the UK GDPR provide you the right to lodge a complaint with the GDPR supervisory authority or commissioner in the country where you habitually reside, where you work, or where you believe an infringement of the GDPR occurred.
You may have similar rights under other Privacy Laws.
7. Changes to this Privacy Statement
Tufts University reserves the right to change, modify, or otherwise amend this Privacy Statement at its sole discretion and at any time as it deems circumstances warrant. Any such changes will be posted on this page.
This Privacy Statement was last updated effective on March 1, 2022.
Privacy Statement for Research Participants
Effective starting May 25, 2018, last revised effective on March 1, 2022.
This statement provides information about the use of personal data provided by or relating to research participants for research conducted by Tufts University, including its schools and centers. This statement provides notice under the laws and regulations that include notice and other requirements that may apply to your personal data (together, the Privacy Laws). Among those Privacy Laws are the General Data Protection Regulation for the European Economic Area (EEA) (regulation (EU) 2016/679 of the European Parliament) (the EEA GDPR) and the United Kingdom General Data Protection Regulation, as tailored by the Data Protection Act 2018 of the UK (the UK GDPR). For information about how Tufts University handles personal information subject to the Personal Information Protection Law (PIPL) of the People’s Republic of China, see the Tufts University PIPL Privacy Statement. Tufts is committed to processing your personal data in compliance with the Privacy Laws and has prepared this statement to provide you with information about your rights under the Privacy Laws, including the EEA GDPR and UK GDPR.
This statement should be read together with the Global Privacy Statement for Personal Data, which provides information regarding:
- What is “personal data” and what does “processing” mean?
- If I am outside of the United States, will my personal data be transferred out of the country where I am located or reside?
- What rights do I have with respect to my personal data?
1. How does this webpage relate to other information about data protection?
The general information published on this page is intended to supplement the specific information that you have already been given (for example on a participant information sheet or a consent form) in connection with your participation in a research study or project run by academic researchers affiliated with Tufts University. The information below applies to all studies and projects that are conducted by Tufts researchers. In the unlikely event that there is any contradiction between this general information and the specific information that you have already been given, the specific information takes precedence.
In addition to the information published here, when you use specific services and facilities offered by Tufts, you may be told about other uses of your personal data. For example, there are separate statements for persons who use or engage with Tufts websites (see Privacy Statement) and IT services (see Use of Institutional Systems Policy).
2. What personal data will be processed, who will process that personal data, and with whom will that personal data be shared?
You have already been told about the types of personal information we will collect, use and process in connection with the specific research study or project you are participating in and, where applicable, its sources, any data sharing or international transfer arrangements, and any automated decision-making that affects you.
3. What are the purposes and lawful bases of the processing of personal data?
In general terms, we use your personal data (including, where appropriate, personal data that is sensitive) to carry out academic and/or translational research in the public interest.
4. How long will my personal data be kept?
You have already been told about the long-term use (and, where applicable, re-use) and retention of your personal data in connection with the specific research study or project you are participating in. General information about how long different types of information are retained by Tufts is published at Records Retention Schedule.
5. Where can I go if I have questions?
If you have any questions about the particular research study you are participating in, please use any contact details you have already been supplied with.
If you have any other questions about how your personal data is used, or wish to exercise any of your rights with respect to your personal data, please consult the Global Privacy Statement for Personal Data and How to make a Subject Access Request or contact Tufts’ Data Privacy Team at dataprivacy@tufts.edu.
If you are not happy with the way your personal data is being handled, or with the response received from us, then the EEA GDPR and the UK GDPR provide you the right to lodge a complaint with the GDPR supervisory authority or commissioner in the country where you habitually reside, where you work, or where you believe an infringement of the GDPR occurred.
You may have similar rights under other Privacy Laws.
6. Changes to this Privacy Statement
Tufts University reserves the right to change, modify, or otherwise amend this Privacy Statement at its sole discretion and at any time as it deems circumstances warrant. Any such changes will be posted on this page.
This Privacy Statement was last updated effective on March 1, 2022.
Privacy Statement for Online Education and Non-Degree Educational Program Participants
Effective starting March 13, 2020, last revised effective on March 1, 2022.
This statement provides information about the use of personal data provided by or about prospective and enrolled students and learners in online courses and/or non-degree educational programs at Tufts University, including all of its schools and affiliated centers.
The students and other learners may include high-school students, working professionals, alumni, community members, lifelong learners, Tufts students, and Tufts faculty and staff.
Our courses and programs may be offered by Tufts faculty and staff and/or in collaboration with other universities or other organizations that support online, travel and other learning experiences.
Tufts’ online courses include degree programs offered completely online, degree programs offered in a hybrid form of online courses together with on campus or other in person sessions, courses for credit in degree programs provided primarily on campus, many courses offered in our educational programs that do not award a degree, and courses that may be taken without being part of a program.
Tufts’ schools offer many programs that provide engaging educational experiences without requiring the participants to commit to seeking a degree. Our non-degree educational programs include online, on campus and/or other in person sessions. They may be focused over a few days or weeks, winter term, summer term, during the academic year, a full year or longer. Among our non-degree programs are:
- Programs granting a certificate upon completion
- Continuing education courses, workshops, and conferences for professionals and students of all ages
- Executive education programs
- Pre-college programs and courses for high school students
- Educational programs, lessons, or camps for middle school, elementary, and pre-k students
- Courses offered to learners who are not receiving academic credit toward a degree, that may also be offered for credit to students enrolled in degree programs
- Special, focused programs offered to learners, but that do not grant credit toward a Tufts academic degree
- Programs offered off campus that include travel to places around the world
This statement provides notice under the laws and regulations that include notice and other requirements that may apply to your personal data (together, the Privacy Laws). Among those Privacy Laws are the General Data Protection Regulation (GDPR) for the European Economic Area (EEA) (regulation (EU) 2016/679 of the European Parliament) (the EEA GDPR) and the United Kingdom General Data Protection Regulation, as tailored by the Data Protection Act 2018 of the UK (the UK GDPR). For information about how Tufts University handles personal information subject to the Personal Information Protection Law (PIPL) of the People’s Republic of China, see the Tufts University PIPL Privacy Statement. Tufts is committed to processing your personal data in compliance with the Privacy Laws and has prepared this statement to provide you with information about your rights under the Privacy Laws, including the EEA GDPR and UK GDPR.
This statement should be read together with the Global Privacy Statement for Personal Data. Additional Privacy Statements are also provided for other programs at Tufts, including for students applying to our degree programs and enrolling in those programs. See our Privacy Statements.
This statement should be read together with the Global Privacy Statement for Personal Data, which provides information regarding:
- What is “personal data” and what does “processing” mean?
- If I am outside of the United States, will my personal data be transferred out of the country where I am located or reside?
- What rights do I have with respect to my personal data?
Tufts-Sponsored Study Abroad Programs. Students applying for or enrolling in Tufts’ Study Abroad Programs should review the Privacy Statement for Students in Tufts-Sponsored Study Abroad Programs.
Offerings with Other Parties or Institutions. Students enrolling in the online programs offered in collaboration with another entity or institutions should also review such parties’ privacy policies for those programs, available under the websites of such parties (the “Collaboration Parties”).
Additional Information for Programs with sessions outside the US. Under the Privacy Laws, in some cases personal data may be in scope of the regulation regardless of where you are located when you provide us the information. For example, this is the case for the EEA GDPR and the UK GDPR if personal data is provided in the context of the activities of an establishment in the EEA or the UK, respectively. Tufts offers many programs from time to time that may include sessions in other countries, including in the EEA or the UK, but generally we do not consider those programs part of an establishment in those countries. However, for our established Tufts-sponsored Study Abroad programs in the EEA and the UK, we include in personal data all personal information Tufts collects or otherwise processes in the context of those programs. More information is provided in Privacy Statement for Students in Tufts-Sponsored Study Abroad Programs.
FERPA. In addition to the information provided in this statement, students are encouraged to review the information about the Family Educational Rights and Privacy Act (FERPA) for the school sponsoring their course or program. FERPA permits the disclosure of certain personal information classified by a school as “directory” information. See Tufts’ FERPA Policy. Privacy Blocks are available to students who wish to prevent the University from disclosing their directory information (in student directories and commencement programs, for example) by selecting the appropriate privacy settings through SIS.
1. Who will process my personal data?
The information provided here applies to the collection, use, sharing, disclosure and other processing of your personal data by Tufts University and its schools in connection with our online courses and non-degree educational programs. The departments and offices providing these courses and other programs may also provide you with additional statements about how they will collect, use, share, disclose and otherwise process your personal data.
In addition to the information published here, when you use specific services and facilities offered by Tufts, you may be told about other uses of your personal data. For example, there are separate statements for persons who use or engage with Tufts websites (see Privacy Statement), IT services (see Use of Institutional Systems Policy), the Counseling and Mental Health service (see Confidentiality), the Office of Equal Opportunity (see http://oeo.tufts.edu/), and the libraries (see Tufts University Libraries Privacy Policy).
2. What personal data will be collected, used or otherwise processed?
Tufts collects your personal information when you inquire about and apply for our online education courses and non-degree educational programs. Further personal information collection also occurs when you enroll in an offering, when you start participating in the offering and throughout your online and other education interactions.
Your personal data is created, stored and transmitted in a variety of paper and electronic formats, including databases at Tufts (such as the main student records database, or the systems used by Tufts libraries). It is Tufts’ policy to limit access to and the use of your personal data to Tufts staff, faculty and authorized affiliates, Collaborating Parties and third party vendors who have a legitimate interest in it for the purpose of carrying out their professional and contractual duties.
Admissions and financial aid decisions, if any, are not automated.
Online or Hybrid Courses and Programs
The following personal information is collected or received by Tufts, or collected on our behalf, for the primary purpose of providing online or hybrid education courses or programs; if applicable, evaluating qualification for education certificates and credit; and for communication with you following your participation in the course or program. The information collected and used for a particular online or hybrid course or program may not include all of the information listed below.
For example, we may collect or receive:
Category of Personal Data (including Optional and Required Personal Data) | Purposes of Collecting and other Processing | Lawful Bases for Collecting and other Processing |
---|---|---|
Contact Information including your name, home or school address, email address, phone numbers, and emergency contact information | To respond to requests for information from you and communicate course-related information and requirements, announcements, and additional program offerings; when applicable, to establish a record for your admissions and financial aid application processes and communicate your application and financial aid status and decision; to register you for courses and communicate with you regarding your course enrollment; emergency management; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Identifying Information including race, ethnicity, gender, including gender preference, sexual orientation, age, marital status, health and disability, photo, and other information you may volunteer in your application or essay | To create a unique personally identifying record; to identify minors to apply policies; when applicable, to evaluate eligibility for financial aid, including prior financial aid for education; to establish a Bursar’s account; if enroll, for a criminal background check; statistical purposes | To process transactions requested by you and meet our contractual obligations |
Demographic Information including race, ethnicity, gender, including gender preference, sexual orientation, age, marital status, health and disability, photo, dietary preferences, and other personal history and information you may volunteer in your application or essay | To evaluate the application process; for planning and monitoring purposes; to provide you with information regarding diversity initiatives and engagement opportunities; in order to provide care, help or suitable adjustments; for required regulatory reporting; to evaluate your eligibility for admission; to evaluate eligibility for merit and endowed scholarships with specific requirements; with respect to marital status, in some cases, to evaluate eligibility for financial aid; event planning, including during orientation; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Education History including your prior schools, transcripts, school activities, scholarly work, and disciplinary records | When applicable, to evaluate your eligibility for admission to the course; to provide academic guidance and evaluate your eligibility for a non-credit credential or academic credit; to determine what schools you previously attended so that we may verify we have complete information; to evaluate eligibility for merit and endowed scholarships with specific requirements; to respond to records requests; to evaluate and access the type of violation committed and how it may impact our student community | To process transactions requested by you and meet our contractual obligations |
Testing History including standardized testing and corresponding identity verification documentation | To evaluate your eligibility for admission; to evaluate your eligibility for a non-credit offering or credential or academic credit; to evaluate English language competency; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Personal History including interests, extracurricular activities, community membership, references and recommendations, and other personal information you may choose to volunteer about yourself, your family members, or other persons, including in your application, and other information we may learn about your or their background | To evaluate your eligibility for admission; to evaluate eligibility for merit and endowed scholarships with specific requirements; to apply community discounts; to connect you with other students and alumni with similar interests; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Employment and Professional History and Criminal Record including resume or CV, job title, location, and work experience, professional certifications, and your self-reported and publicly available criminal record | When applicable, to evaluate your eligibility for acceptance for certain online courses; to evaluate eligibility for merit and endowed scholarships with specific requirements; to evaluate and access the type of violation committed and how it may impact our online community; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Personal Financial Information including Social Security number or other tax identification number, personal and business tax reports, wages and benefits, scholarships and grants, bank statements and account numbers, socioeconomic status, and family support | When applicable, to evaluate your eligibility for financial aid and determining what financial aid will be offered to you; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Family Financial Information including family member names, ages, education, occupations, wages, and savings | To evaluate your eligibility for financial aid and determining what financial aid will be offered to you; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Payment Information depending on your means of payment, your payment card number or your bank and bank account number | To receive payment for course fees, other expenses, including library fees, dorm charges and healthcare or insurance fees, and refunds, if applicable | To process transactions requested by you and meet our contractual obligations |
Tax Information including tax identification number | To provide required information to tax authorities; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Learner Interaction Data including profile information, blog posts and community posts | To publish your messages to the online education platform; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Log Files including latitude, longitude, date and time (the precision of this data varies greatly and is determined by factors controlled by your mobile device or mobile service provider) | To offer you certain location- based services, such as delivering advertisements that are relevant to your particular location, and to conduct analytics to improve the offerings | To process transactions requested by you and meet our contractual obligations |
Location Information including latitude, longitude, date and time (the precision of this data varies greatly and is determined by factors controlled by your mobile device or mobile service provider) | To offer you certain location- based services, such as delivering advertisements that are relevant to your particular location, and to conduct analytics to improve the offerings | To process transactions requested by you and meet our contractual obligations |
Disability Information including physical and mental disabilities | To provide you with proper accommodations | Legitimate interests |
Dietary Information including allergies and food preferences | When applicable, to provide proper dietary options | Legitimate interests |
Biometric Data including facial measurements and eye movement | To provide secure, remote online testing platforms for course evaluations | To process transactions requested by you and meet our contractual obligations |
In-Person Non-Degree Educational Programs
The following personal information may be collected or received by Tufts, or on our behalf, for the primary purpose of providing in-person non-degree educational programs; if applicable, evaluating qualification for education certificates and credit; and communication with you following your participation in the program. The information collected and used by a particular program school may not include all of the information listed below. For example, we may collect and receive:
Category of Personal Data (including Optional and Required Personal Data) | Purposes of Collecting and other Processing | Lawful Bases for Collecting and other Processing |
---|---|---|
Contact Information including your name, home or school address, email address, phone numbers, and emergency contact information | To respond to requests for information from you and communicate program-related information and requirements, announcements, and additional program offerings; when applicable, to establish a record for your admissions and financial aid application processes and communicate your application and financial aid status and decision; to register you for the program and communicate with you regarding your enrollment; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Identifying Information including date and/or place of birth, Social Security number or other personal governmental identifier, passport number, alien registration number, citizenship or immigration status | To create a unique personally identifying record; to identify minors to apply policies; to determine if a visa is required for program participation; when applicable; to evaluate eligibility for financial aid, including prior financial aid for education; to establish a Bursar’s account; if enroll, for a criminal background check; statistical purposes | To process transactions requested by you and meet our contractual obligations |
Category of Personal Data (including Optional and Required Personal Data) Purposes of Collecting and other Processing Lawful Bases for Collecting and other Processing Contact Information including your name, home or school address, email address, phone numbers, and emergency contact information To respond to requests for information from you and communicate program-related information and requirements, announcements, and additional program offerings; when applicable, to establish a record for your admissions and financial aid application processes and communicate your application and financial aid status and decision; to register you for the program and communicate with you regarding your enrollment; to respond to records requests To process transactions requested by you and meet our contractual obligations Legitimate interests Your consent, if applicable Identifying Information including date and/or place of birth, Social Security number or other personal governmental identifier, passport number, alien registration number, citizenship or immigration status To create a unique personally identifying record; to identify minors to apply policies; to determine if a visa is required for program participation; when applicable; to evaluate eligibility for financial aid, including prior financial aid for education; to establish a Bursar’s account; if enroll, for a criminal background check; statistical purposes To process transactions requested by you and meet our contractual obligations Legitimate interests For compliance with a legal obligation Your consent, if applicable Demographic Information including race, ethnicity, gender, including gender preference, sexual orientation, age, marital status, health and disability, photo, and other information you may volunteer in your application or essay | To evaluate the application process, for planning and monitoring purposes; to provide you with information regarding diversity initiatives and engagement opportunities; when applicable, to evaluate your eligibility for admission; in order to provide care, help or suitable adjustments; for required regulatory reporting; to evaluate eligibility for merit and endowed scholarships with specific requirements; with respect to marital status, in some cases, to evaluate eligibility for financial aid; to issue an identification card; event planning; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Education History including your prior schools, transcripts, school activities, scholarly work, and disciplinary records | When applicable, to evaluate your eligibility for admission to the program; to provide educational guidance and evaluate your eligibility for a non-credit credential or academic credit; to determine what schools you previously attended so that we may verify we have complete information; to evaluate eligibility for merit and endowed scholarships with specific requirements; to respond to records requests; to evaluate and access the type of violation committed and how it may impact our community | To process transactions requested by you and meet our contractual obligations |
Testing History including standardized testing and corresponding identity verification documentation | To evaluate your eligibility for admission; to evaluate your eligibility for a non-credit offering or credential or academic credit; to evaluate English language competency; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Personal History including interests, extracurricular activities, community membership, references and recommendations, and other personal information you may choose to volunteer about yourself, your family members, or other persons, including in your application, and other information we may learn about your or their background | To evaluate your eligibility for admission; to evaluate eligibility for merit and endowed scholarships with specific requirements; to apply community discounts; to connect you with other students and alumni with similar interests; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Employment and Professional History and Criminal Record including resume or CV, job title, location, and work experience, professional certifications, and your self-reported and publicly available criminal record | When applicable, to evaluate your eligibility for acceptance to the program; to evaluate eligibility for merit and endowed scholarships with specific requirements; to evaluate and access the type of violation committed and how it may impact our community; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Personal Financial Information including Social Security number or other tax identification number, personal and business tax reports, wages and benefits, scholarships and grants, bank statements and account numbers, socioeconomic status, and family support | When applicable, to evaluate your eligibility for financial aid and determining what financial aid will be offered to you; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Family Financial Information including family member names, ages, education, occupations, wages, and savings | To evaluate your eligibility for financial aid and determining what financial aid will be offered to you; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Payment Information depending on your means of payment, your payment card number or your bank and bank account number | To receive payment for course fees, other expenses, including library fees, dorm charges and healthcare or insurance fees, and refunds, if applicable | To process transactions requested by you and meet our contractual obligations |
Tax Information including tax identification number | To provide required information to tax authorities; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Program Assessment Data including assignment responses, test scores, and course and other program interactions | To evaluate your success in the program; to respond to records requests | To process transactions requested by you and meet our contractual obligations |
Location Information including latitude, longitude, date and time (the precision of this data varies greatly and is determined by factors controlled by your mobile device or mobile service provider) | To offer you certain locationbased services, such as delivering advertisements that are relevant to your particular location, and to conduct analytics to improve the offerings | To process transactions requested by you and meet our contractual obligations |
Disability Information including physical and mental disabilities | To provide you with proper accommodations | To process transactions requested by you and meet our contractual obligations |
Dietary Information including allergies and food preferences | When applicable, to provide proper dietary options | To process transactions requested by you and meet our contractual obligations |
Residential Information including personal preferences, security key card activity, facility monitoring and personal monitoring | When applicable, to provide a safe and secure residential experience for all program participants | To process transactions requested by you and meet our contractual obligations |
Processing of Special Category Information
In addition to the information listed in the tables above, Tufts may process some personal data about you that is classified as sensitive under the Privacy Laws. This includes information classified as “special category” under the EEA GDPR or the UK GDPR, which require additional protections. This information may include information concerning your race, ethnicity, sexual orientation, or health or disability. We use this information for planning and monitoring purposes, and in order to provide care, help or suitable adjustments. For certain programs of study, other sensitive information may be processed, such as information about past criminal convictions and your fitness to practice in certain regulated professions. Access to, and the sharing of, this sensitive or “special category” personal data are managed very carefully.
We consider the processing of this personal data to be necessary for compliance with a legal obligation (e.g. equal opportunities monitoring), or necessary for the professional licensing requirements or the performance of tasks we carry out in the public interest (e.g. teaching and research). If we require your consent for any specific use of your personal data, we will collect it at the appropriate time.
“Tufts does not discriminate in admissions, employment, or in any of its educational programs or activities on the basis of race, color, national or ethnic origin, ancestry, age, religion or religious creed, disability or handicap, sex or gender (including pregnancy, sexual harassment and other sexual misconduct including acts of sexual violence such as rape, sexual assault, stalking, sexual exploitation, sexual exploitation and coercion, relationship/intimate partner violence and domestic violence), gender identity and/or expression (including a transgender identity), sexual orientation, military or veteran status, genetic information or any other characteristic protected under applicable federal, state or local law.” Tufts’ Non-Discrimination Policy.
Sources of Information for Online and Hybrid Courses and Programs and Non-Degree Educational Programs
Tufts will use the details provided in your application, if any, together with the supporting documents requested and additional details provided by any persons submitting letters of recommendation or recorded following an interview, if one is conducted.
Tufts will also use personal details you provide on any inquiry form (web-based, hand-written inquiry cards at recruitment events and information sessions), registration forms and inquiry email.
Tufts may also receive information from the US government, including the Department of Education, A Better Chance, The Greenlight Fund, Hobsons, Inc., YouVisit, Parchment, Escrip-SAFE for transcript delivery, other universities and colleges in connection with joint programs, Educational Testing Service (including for the Test of English as a Foreign Language (TOEFL)), the International English Language Testing System (IELTS), the International Baccalaureate (IB) program, the College English Test (CET); the Fulbright Foreign Student Program, the Institute of International Education, America-Mideast Educational and Training Services (AMIDEAST), and other similar organizations.
If applicable, Tufts also processes the information submitted in connection with your financial aid or scholarship application.
Additional Purposes and Lawful Bases for Processing Personal Data
In addition to the purposes and lawful bases included above in this Section 2, Tufts may use or disclose the information provided for statutory, public interest and other purposes, including:
- To prevent or detect fraud.
- To comply with applicable laws and regulations and Tufts’ policies, including but not limited to its non-discrimination policy.
- To help us to make reasonable accommodations for any disability, as requested by you.
- To allow for consideration of any future accommodation requirements.
- To offer and deliver university news, goods, services, and experiences to you.
- To help inform and support university and school planning and decision making.
- To provide information required by governmental and accrediting organizations.
- To conduct research and statistical analysis. No information that could identify you will be published in connection with this type of analysis.
- If you are admitted and enroll, facilitating your education (such as by sharing personal data with registrars and others in order to enable your enrollment and participation in the course or program to which you have been admitted).
In addition to the purposes and lawful bases stated above in this Section 2, the University considers the processing of your personal information necessary to comply with a legal obligation (e.g. non-discrimination and professional licensing requirements), to establish, exercise or defend legal claims, and to perform tasks carried out in the public interest (e.g. admissions and educational services research).
3. Will Tufts share my personal data with others?
Your application and related materials will be shared with the appropriate faculty and staff at Tufts. Each school and program has developed its own practices for sharing your personal information based on its consideration of the type and sensitivity of the personal information, the purpose for which the information was provided or otherwise collected, the purpose for sharing the personal information, and the safeguards used to protect the shared information. Accordingly, under certain, considered circumstances, and when relevant, your personal information may also be shared with:
- Parents, Spouses, and Guardians. In some cases, we may share your personal data with a parent, spouse, or guardian if necessary, to properly complete the admissions process or in the event of an emergency.
- Service Providers. We may use third parties to support our operations and provide services. In such cases, we may share your information with Collaborating Parties and these other third parties.
- School Counselors and Administrators. For students enrolled in another school, we may share your information with your school counselors and administrators.
- University Affiliated Programs. We may share your information with third parties that are affiliated with the University for the purpose of contacting you about goods, services, or experiences that may be of interest to you.
- Research and Studies. We may share your information with third parties that study admissions or other topics related to higher education. We may also share your information with third parties that conduct research or develop products or services designed to improve education and other higher education functions.
- Required by Law. We may share your information with third parties to the extent we are required to do so by law, court order, or subpoena. In the case of international applicants, we may share your information with appropriate agencies including the U.S. Citizenship and Immigration Services in order to act as your sponsor for visa purposes.
- Emergency Circumstances. We may share your personal data with a person you have designated as an emergency contact or with other third parties, if, in our sole judgment, such disclosure is necessary to protect your health, safety, or property or the health, safety, or property of any other person.
- Compelling Purpose. We may share your information in other cases when there is a compelling purpose regarding benefit to Tufts or members of our community.
- De-Identified and Aggregate Information. We may use and disclose information in de-identified or aggregate form without limitation
4. How long will my personal data be kept?
We store your personal data for the duration of your participation in the course or program. Information about how long different types of information are retained by Tufts is published at Records Retention Schedule and is available from the school providing the course or the program in which you enroll or participate.
5. How is my personal data used after the course or program?
Core records for persons participating in the courses and programs are generally retained indefinitely so that the details of your academic achievements can be confirmed and for statistical or historical research. It may be used as part of our assessment of any future application you make for further studies at Tufts. Your contact and core personal details are passed to the Office of Alumni Relations so that you can be added to the alumni database. A statement for alumni and donors setting out how their personal data is used by Tufts is published at Privacy Statement for Alumni, Donors and Other Tufts Supporters
6. Where can I go if I have questions?
If you have any questions about how your personal data is used, or wish to exercise any of your rights with respect to your personal data, please consult the Global Privacy Statement for Personal Data and How to make a Subject Access Request. If you need further assistance, please contact Tufts’ Data Privacy Team at dataprivacy@tufts.edu. or the department or office providing the course or program.
If you are not happy with the way your personal data is being handled, or with the response received from us, then the EEA GDPR and the UK GDPR provide you the right to lodge a complaint with the GDPR supervisory authority or commissioner in the country where you habitually reside, where you work, or where you believe an infringement of the GDPR occurred.
You may have similar rights under other Privacy Laws.
7. Changes to this Privacy Statement
Tufts University reserves the right to change, modify, or otherwise amend this Privacy Statement at its sole discretion and at any time as it deems circumstances warrant. Any such changes will be posted on this page.
This Privacy Statement was last updated effective on March 1, 2022.
Privacy Statement under China's Personal Information Privacy Law (PIPL)
This Privacy Statement applies to the handling of Personal Information by Tufts University, including its centers, institutes, and affiliates, subject to the Personal Information Protection Law (PIPL) of the People’s Republic of China, through its websites, products, and services, including but not limited to academic advising, admissions, educational programs, career centers, research, community service, health centers, medical care, food services, and other services provided by the University.
For a full copy of the Tufts University PIPL Privacy Statement, in both English and in simplified Chinese characters, click here.