Online Privacy Statement

Online Privacy Statement

Effective Date: September 2, 2026

The University of Alabama in Huntsville ("UAH" or "University") is committed to protecting the privacy of information entrusted to it while fulfilling its educational, research, public service, and administrative missions.

This Online Privacy Statement describes how UAH collects, uses, maintains, and discloses information obtained through University-owned websites, web applications, and online services.

By using UAH websites and online services, users acknowledge the practices described in this statement.

Certain University websites, applications, services, and programs may be subject to supplemental privacy notices that provide additional information regarding specific data collection and processing activities.

Information We Collect

Information You Voluntarily Provide

Users may voluntarily provide information to UAH through online forms, applications, registrations, surveys, event sign-ups, donations, support requests, accessibility requests, employment applications, and other online interactions.

Depending upon the service used, information collected may include:

• Name
• Email address
• Telephone number
• Mailing address
• Organizational affiliation
• Educational information
• Information submitted through forms, surveys, and correspondence
• Other information voluntarily provided by the user

The University collects only the information necessary to fulfill the purpose for which it was provided or as otherwise authorized by law.

Information Collected Automatically

When users access University websites, certain information may be collected automatically through server logs, cookies, and similar technologies.

Information collected may include:

• Internet Protocol (IP) address
• Browser type and version
• Device information
• Operating system
• Referring website or source
• Date and time of access
• Pages viewed
• Search terms used within University websites
• Usage patterns and navigation data

This information is used to maintain website security, diagnose technical issues, improve website functionality, analyze usage trends, support University operations, and protect University information resources.

Information Regarding Minors

Certain University programs and activities may be directed toward minors, including children under the age of 13, such as educational outreach programs, camps, youth programs, and other University-sponsored activities.

When personal information is collected from children under the age of 13 through University-operated online services, UAH will seek parental consent or otherwise process such information in accordance with applicable law, including the Children's Online Privacy Protection Act (COPPA).

Analytics, Cookies, and Third-Party Services

UAH may use cookies, web beacons, pixels, embedded content, analytics technologies, and similar tools to operate and improve its websites and online services.

The University may utilize third-party service providers to assist with:

• Website hosting and administration
• Website analytics
• Customer relationship management
• Recruitment and admissions activities
• Advancement and fundraising activities
• Surveys and feedback collection
• Event management
• Communications and marketing
• Video hosting and content delivery
• Accessibility and user experience improvements

These providers may collect or process information on behalf of UAH under contractual arrangements designed to support authorized University purposes.

Users should be aware that third-party providers may maintain their own privacy policies and data practices. UAH encourages users to review the privacy policies of any third-party services with which they interact.

Text Messaging and Electronic Communications

Certain University departments and programs may communicate with students, applicants, employees, alumni, donors, program participants, and other individuals through email, text messaging, mobile applications, and other electronic communication platforms operated by third-party service providers.

Information such as names, contact information, mobile telephone numbers, email addresses, and message content may be processed by authorized service providers for purposes including:

• Admissions and enrollment communications
• Student support services
• Event notifications and reminders
• Alumni and advancement communications
• Emergency notifications
• Administrative and operational communications

Information necessary to facilitate such communications may be shared with third-party providers under contractual requirements designed to protect the information and limit its use to authorized purposes.

Individuals may opt out of non-emergency text communications by following instructions provided in my.UAH under “SMS Notifications”, or in the message received, or by contacting the originating University department. Message and data rates may apply as determined by the individual's mobile carrier.

Payment Transactions

Certain University websites and online services may facilitate payments for tuition, fees, events, programs, donations, merchandise, or other authorized purposes.

Payment transactions may be processed by University systems and authorized third-party payment processors. UAH does not intentionally store payment card information beyond what is necessary to complete authorized transactions and comply with applicable legal, operational, audit, and security requirements.

Payment processing systems may be subject to applicable payment card security standards and contractual security requirements.

Sharing and Disclosure of Information

UAH does not sell personal information collected through its websites or online services.

Information may be shared with authorized University personnel, contractors, service providers, affiliates within The University of Alabama System, governmental agencies, or other entities when necessary to:

• Conduct University business;
• Operate and maintain University systems;
• Deliver requested services;
• Comply with legal obligations;
• Protect the safety, security, and integrity of University operations;
• Respond to emergencies; or
• Enforce applicable laws, regulations, and University policies.

Information may also be disclosed when required by law, regulation, subpoena, court order, audit, investigation, or other lawful governmental request.

Public Records

UAH is a public institution of higher education and an instrumentality of the State of Alabama.

Information submitted to the University through its websites, online forms, electronic communications, or other online services may constitute a public record and may be subject to disclosure pursuant to applicable federal or state law, including the Alabama Open Records Act, unless an applicable exemption, privilege, confidentiality requirement, or other legal protection applies.

Users should not assume that information submitted to the University will remain confidential in all circumstances.

Data Retention

Information collected through University websites and online services is retained in accordance with applicable laws, regulations, University policies, business requirements, litigation hold obligations, and records retention schedules.

Retention periods vary depending upon the nature of the information collected, the purpose for which it was obtained, applicable legal requirements, and operational needs.

Information Security

UAH maintains administrative, technical, and physical safeguards designed to protect information collected through its websites and online services from unauthorized access, disclosure, alteration, destruction, or misuse.

These safeguards are intended to support compliance with applicable legal, regulatory, contractual, and operational information security requirements.

While the University employs reasonable security measures, no method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, UAH cannot guarantee the absolute security of information transmitted through the Internet.

FERPA, HIPAA, GLBA, and Other Privacy Notices

Certain information collected or maintained by the University may be governed by federal or state laws, regulations, or contractual requirements, including but not limited to:

• The Family Educational Rights and Privacy Act (FERPA);
• The Health Insurance Portability and Accountability Act (HIPAA);
• The Gramm-Leach-Bliley Act (GLBA);
• The Children's Online Privacy Protection Act (COPPA);
• Applicable records retention and public records requirements;
• Other applicable privacy, records management, and information security requirements.

Where applicable, those laws, regulations, and related University policies shall govern the collection, use, disclosure, retention, and protection of such information.

Contact Information

Questions regarding this Online Privacy Statement or the University's privacy practices may be directed to:

Changes to This Statement

UAH reserves the right to modify this Online Privacy Statement at any time.

Material changes will be reflected by updating the Effective Date shown above. Continued use of University websites following the posting of changes constitutes acceptance of the revised statement.