Privacy Notice

Northeastern University is committed to delivering electronic services that recognize and respect customer concerns around privacy and security. This policy describes how we uphold this commitment.

Organizational commitment to privacy and security

Northeastern maintains a multidisciplinary commitment to privacy and security, including roles responsible for risk assessment and management, and security of physical, network, application, authentication and database assets. A security awareness program helps students, faculty and staff understand their roles and responsibilities in protecting confidential and personal information. Systems that solicit or display personally identifiable information are protected by access controls that require a user ID and password be entered before access is granted.

Security of Web-based transactions

Web-based transactions involving personal, confidential or sensitive information are secured between your Web browser and NU-sponsored Web servers by SSL (Secure Sockets Layer protocol) with 128-bit encryption.

Why we collect personal information

We collect personal information in order to deliver services and information personalized to you, your role and your interests at Northeastern.

Personal information we collect

Collection of personal information is normally limited to information required in order to process and acknowledge your donation or payment, obtain matching gifts if available and record your affiliation with the university.

Information collected may include, but is not limited to:

• Your name
• Home street address, city, state, ZIP code and country
• Home phone number
• E-mail address
• Name of employer
• Work street address, city, state, ZIP code and country
• Work phone number
• Work e-mail address
• Job title
• Constituent type (alumnus, parent, friend, faculty, staff)

Other information we collect

Your Web browser automatically sends us the type of computer and operating system you are using. We may also collect and maintain the host name and IP (internet protocol) address used by your computer. In addition, we may collect the dates and times you access our systems, the URLs you request, file names you send or receive, search strings and errors generated. This information may be shared with departments within the university, with individuals and organizations involved in assisting the university in processing your donation and in response to lawful orders from local, state and federal agencies.

Choices available regarding collection of information

You can choose whether or not to provide personal information. Information required to process a donation or payment, or to participate in our online services, is indicated on applicable forms with an asterisk (*).

How your personal information is used within Northeastern

The primary use of your personal information is to enable processing and acknowledgment of your donation or payment. Your personal information may be shared with other departments and business units at the university to ensure that your donation or payment is properly recorded and acknowledged.

How your personal information is used outside Northeastern

(Third-party distribution and disclosure of information)

Personal information we collect is not used for any commercial or philanthropic purpose not directly connected with or approved by the university. Northeastern does not sell personal information. The university complies with lawful orders for production of records pursuant to law enforcement investigations and in supplying information as may be required by local, state and federal agencies.

Cookies

A “cookie” is a small file deposited on your computer by a Web site you visit. When connecting to the Alumni Web site, session cookies are offered to your computer. In order to use the Alumni Directory and its services, your browser must accept these cookies. The cookies are temporary, and do not contain personal information. Once you are finished using the Alumni Directory and you “quit” the Web browser application, the session cookies are deleted.

Your e-mail address

Submission of your e-mail address is not required in order to make a donation or payment, or to participate in our online services. If you do provide your e-mail address, we will use it to acknowledge your donation and communicate with you on topics we feel may fit your interests.

E-mail messages

If you send us e-mail, we may share your e-mail address and message content with others at the university, and with persons and organizations outside the university who may be called on to assist in processing your donation or payment.

Opting out of e-mail messages

If you are currently receiving e-mail from us, you can unsubscribe by following the opt-out instructions detailed in the e-mail message. You may also unsubscribe by updating your personal information and typing “unsubscribe” in the comments box.

Solicitation of information from children

Northeastern does not knowingly solicit personal information from children or send them requests for personal information.

Access to information and files pertaining to you

You have the right to request access to information and files pertaining to you. You may exercise these rights by contacting the office appropriate to your role at the university.

Requesting access to information and files pertaining to you

To request access to information and files pertaining to you, we invite you to contact:

Office of Alumni Relations
Northeastern University
350 Richards Hall
360 Huntington Avenue
Boston, MA 02115
alumni@neu.edu
(617) 373-2656
(617) 373-8522 fax

Procedure for requesting access to information and files pertaining to you

To request access to information and files pertaining to you, a written request is required. In your request, we ask that you share with us the following information:

• your name
• contact information, including your e-mail and postal addresses
• the item(s) of information you wish to access
• the reason for requesting access to the information
• The university will respond to requests no later than 60 days after receipt. If a request is denied, we will send a written explanation explaining the reason for the denial and a notification of your right to file a written statement of disagreement. The university may also provide a right to have the denial reviewed. If the university is unable to act within 60 days, we may extend that time by no more than an additional 30 days. If we need to extend this time, we will notify you of the delay and the date by which we will complete action on your request.

Your right to request information pertaining to you be removed from NU systems and files

You have the right to request information pertaining to you be removed from NU systems and files. There are some instances, however, where the university may deny a request to remove information. For example, the university may decide not to remove the following types of information including, but not limited to:

Information required to be maintained by the university as part of student or employment records, or pursuant to local, state or federal law, statute or other regulation, or in performance of contractual obligations and/or Information compiled in reasonable anticipation of, or for use in a civil, criminal or administrative action or proceeding. Procedure for requesting removal of information pertaining to you

To request removal of information pertaining to you, a written request is required. In your request, we ask that you share with us the following information:

• your name
• contact information, including your e-mail and postal addresses
• the item(s) of information you want removed
• the reason for requesting removal of the information
• The university will respond to requests no later than 60 days after receipt. If a request is denied, we will send a written explanation explaining the reason for the denial, and a notification of your right to file a written statement of disagreement. The university may also provide a right to have the denial reviewed. If the university is unable to act within 60 days, we may extend that time by no more than an additional 30 days. If we need to extend this time, we will notify you of the delay and the date by which we will complete action on your request.

Redress

If you are not satisfied with the outcome of a privacy inquiry, you have the right to seek redress. To exercise this right, please contact in writing:

Office of Information Security
Northeastern University
448 Columbus Place
Boston, MA 02115

Include the following information:

• your name
• a description of the problem or concern
• contact information, including your e-mail and postal addresses
• the names of person(s) you have contacted about the problem
• copies of responses received from them
• The university will respond to requests no later than 60 days after receipt. If a request is denied, we will send a written explanation explaining the reason for the denial, and a notification of your right to file a written statement of disagreement. The university may also provide a right to have the denial reviewed. If the university is unable to act within 60 days, we may extend that time by no more than an additional 30 days. If we need to extend this time, we will notify you of the delay and the date by which we will complete action on your request.

How to contact the organization

If you have a question about this privacy policy, please contact the Office of Alumni Relations. Contact information for this office is shown in the section entitled “Requesting access to information and files pertaining to you.”

Changes to the privacy policy

This privacy policy is subject to change at any time. We encourage customers to regularly review the privacy policy for any changes.