Document
Owner
Office of the Privacy Officer
Effective Date
October 18, 2026
Last Reviewed
October 18, 2026
Next Review
October 2027
1. Scope
This Privacy Policy describes how Neponset University collects, uses, protects, and shares personal information of prospective learners, learners, alumni, instructors, and visitors to Neponset’s websites and services. It is designed to comply with the Family Educational Rights and Privacy Act (FERPA), the Massachusetts Standards for the Protection of Personal Information (201 CMR 17.00), and other applicable laws.
2. Information We Collect
Identifying information (name, address, email, phone, date of birth) provided in admissions and enrollment forms.
Academic records (courses, grades, certificates, transcripts).
Financial information (administrative fee payments, fee waiver applications) limited to what is necessary.
Demographic information voluntarily disclosed (race, ethnicity, gender identity, veteran status), used only in aggregate for institutional reporting.
Technical data (IP address, browser, device, learning management system activity) collected automatically when using Neponset systems.
3. How We Use Information
To deliver instruction and academic services.
To maintain academic records and issue credentials.
To communicate about courses, events, and institutional matters.
To improve teaching, learning, and institutional effectiveness.
To comply with legal, regulatory, and accreditation obligations.
4. FERPA Rights (Once Degree-Granting)
Once Neponset receives Massachusetts degree-granting authority and participates in U.S. Department of Education programs, learners will have rights under FERPA to: inspect and review their education records; request correction of records they believe are inaccurate; consent to most disclosures of personally identifiable information; and file complaints with the U.S. Department of Education. Until that point, Neponset voluntarily applies FERPA-equivalent protections.
5. Information Sharing
Neponset does not sell personal information. We share information only in these limited circumstances: with service providers under contractual confidentiality (e.g., learning management system, email host, payment processor); with accreditors, regulators, and auditors as required; in response to lawful subpoenas or court orders; with the learner’s explicit written consent; and in aggregate or de-identified form for research and reporting.
6. Directory Information
Neponset may release the following directory information without consent unless the learner formally opts out: name, certificates earned and dates, dates of enrollment, and (where applicable) honors. Learners may opt out by submitting a written request to the Registrar.
7. Data Security
Neponset maintains administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encrypted transmission of sensitive data, role-based access controls, multi-factor authentication for staff, and a written information security program required under Massachusetts law (201 CMR 17.00).
8. Retention
Academic records are retained permanently. Other personal information is retained only as long as necessary for legitimate institutional purposes, in accordance with the Document Retention & Destruction Policy.
9. Contact
Questions about this policy or requests regarding personal information should be directed to the Privacy Officer at hello@neponset.co.