Privacy Statement

Notre Dame of Maryland University (“NDMU”, “we”, “our”, “us”) respects the privacy of students, applicants, alumni, employees, donors, visitors, and others who interact with our institution. This Privacy Statement explains how we collect, use, disclose, and protect personal information through our websites, online services, campus operations, academic programs, admissions activities, advancement activities, and other NDMU functions.

This Privacy Statement explains how NDMU collects, uses, discloses, and protects personal information through its websites, online services, academic programs, admissions and enrollment activities, student services, alumni and advancement activities, employment functions, campus operations, events, and other NDMU activities.

This Privacy Statement applies generally to NDMU’s privacy practices. It does not replace other notices, policies, or procedures that may apply to specific records, services, or individuals. For example, student education records may be subject to the Family Educational Rights and Privacy Act (FERPA). Employment records, health or counseling records, financial aid records, payment information, youth-program records, research records, and international privacy rights may also be governed by separate notices, laws, or NDMU procedures.

When a more specific notice or law applies, NDMU will handle personal information according to that notice or law. This Privacy Statement should be read together with any applicable FERPA notice, cookie or tracking notice, employment notice, student records notice, program-specific notice, or jurisdiction-specific privacy notice.

NDMU may collect personal information in different ways depending on your relationship with us and how you interact with us. The information we collect may include:

• Contact and identity information, such as name, mailing address, email address, phone number, date of birth, student ID, account username, password, government-issued identifiers, and similar information.
• Admissions and enrollment information, such as application materials, transcripts, test scores, recommendations, admissions decisions, enrollment status, program interests, prior schools, residency information, and communications with admissions or enrollment staff.
• Academic and student records, such as course registration, grades, advising records, degree progress, attendance records, academic standing, disciplinary records, accommodation records, and other education records.
• Financial and transaction information, such as tuition and fee payments, billing records, financial aid information, scholarship information, refunds, payment card information, donor records, and account history.
• Employment and workforce information, such as job applications, resumes, work history, credentials, payroll information, benefits information, training records, performance-related information, and other employment records.
• Campus, safety, and facilities information, such as campus ID card activity, parking information, residence life information, incident reports, emergency contact information, video or access-control records, and other information related to campus operations and safety.
• Health, accessibility, and support information, such as disability accommodation information, health or counseling-related information, athletic participation information, wellness program information, and other information needed to provide student, employee, or program support.
• Online, device, and tracking information, such as IP address, device identifiers, browser type, operating system, pages visited, links clicked, referring websites, search terms, approximate location, interaction data, cookie identifiers, advertising identifiers, email engagement data, and similar information collected through websites, emails, advertisements, pixels, analytics tools, and other online technologies.
• Communications and engagement information, such as emails, web forms, survey responses, event registrations, call records, help desk requests, chat messages, meeting notes, and other communications with NDMU.
• Alumni, donor, and community information, such as graduation year, degree information, giving history, event participation, volunteer activity, communication preferences, interests, and relationship information.
• Program, event, and youth-program information, such as registration information, participant records, parent or guardian contact information, consent forms, emergency contact information, medical or allergy information, and other information needed to operate NDMU programs or events.

We may also collect other information that you choose to provide us to provide services, operate the institution, comply with law, protect the NDMU community, or manage our academic, administrative, employment, advancement, and business functions.

We may collect personal information from several sources.

• We may collect information directly from you when you apply for admission, request information, enroll, register for classes or programs, use NDMU services, make payments, apply for financial aid, apply for employment, donate, attend events, submit forms, participate in surveys, communicate with us, or otherwise provide information to NDMU.
• We may collect information through NDMU systems and services when you use NDMU websites, portals, learning platforms, email systems, networks, devices, campus systems, ID cards, access-control systems, payment systems, event platforms, and other technology or operational systems.
• We may collect information from other organizations and individuals when they provide information to support NDMU functions. These sources may include schools, colleges, testing organizations, references, employers, scholarship organizations, financial institutions, government agencies, accreditation bodies, athletic organizations, clinical or internship sites, program partners, service providers, and other third parties.
• We may collect information from online and digital sources, including analytics providers, advertising networks, social media platforms, customer relationship management systems, marketing technology providers, email tools, search engines, referral sources, and similar technologies.
• We may also collect information from publicly available sources, such as professional profiles, public directories, publications, websites, public records, and other sources available to the public.

We may combine information collected from different sources when needed to provide services, communicate with you, manage NDMU operations, improve programs, protect the NDMU community, comply with law, or support legitimate academic, administrative, employment, advancement, and business purposes.

We may use your personal information to operate NDMU’s academic, administrative, student support, employment, advancement, and campus functions when you consent or when we have a legitimate basis for doing so. Depending on your relationship with us, we may use personal information to:

• Support admissions, enrollment, and recruitment, including responding to inquiries, reviewing applications, communicating with prospective students, managing campus visits, evaluating eligibility, and supporting enrollment activities.
• Provide academic programs and student services, including registration, instruction, advising, grading, degree progress, academic support, library services, technology services, housing, dining, accessibility services, athletics, career services, and other student programs.
• Manage financial and transaction activities, including tuition and fee billing, payment processing, financial aid, scholarships, refunds, donations, grants, accounting, and related records.
• Manage employment and workforce functions, including recruiting, hiring, payroll, benefits, training, performance management, compliance, workplace safety, and other employment-related activities.
• Communicate with you, including sending service messages, academic updates, admissions communications, event information, emergency alerts, fundraising communications, alumni updates, surveys, and other NDMU communications.
• Support alumni, donor, and community engagement, including advancement activities, fundraising, events, volunteer opportunities, alumni relations, donor stewardship, and relationship management.
• Operate programs and events, including registration, attendance management, participant support, youth-program administration, parent or guardian communications, consent management, safety planning, and program evaluation.
• Operate and improve websites, systems, and services, including maintaining NDMU technology, troubleshooting issues, improving user experience, measuring website activity, managing online forms, supporting digital communications, and improving NDMU programs and services.
• Conduct analytics, outreach, and marketing, including understanding interest in NDMU programs, measuring the effectiveness of communications, supporting admissions and advancement campaigns, managing digital advertising, and improving outreach efforts.
• Protect safety, security, and integrity, including campus safety, emergency response, fraud prevention, cybersecurity, access control, identity verification, policy enforcement, misconduct review, and protection of NDMU systems, property, rights, and community members.
• Support institutional operations, including planning, reporting, accreditation, institutional research, records management, audits, risk management, compliance, legal obligations, and business administration.
• Comply with law and enforce NDMU’s rights, including responding to legal process, meeting regulatory obligations, enforcing policies and agreements, resolving disputes, and defending legal claims.

We will use personal information for the purposes described in this Privacy Statement, for purposes explained at the time of collection, for purposes authorized by law, or for other compatible NDMU purposes.

We may share personal information when needed to operate the institution, provide services, support students and other members of our community, comply with law, protect safety, and manage our academic, administrative, employment, advancement, and business functions.
We may share personal information with:

• NDMU personnel and affiliates who need the information to perform their duties, provide services, support NDMU operations, or meet legal, academic, employment, or administrative obligations.
• Service providers, contractors, and technology vendors that support our operations, such as cloud hosting providers, learning platforms, student information systems, payment processors, financial aid platforms, customer relationship management systems, email and communications tools, analytics providers, marketing platforms, application systems, background check providers, IT support providers, consultants, auditors, and other vendors.
• Academic, program, and institutional partners, such as other schools, clinical sites, internship sites, study abroad providers, research partners, athletic organizations, scholarship organizations, accreditation bodies, and other organizations involved in NDMU programs or services.
• Advertising, analytics, and social media platforms, such as providers that help us understand website activity, measure communications, support outreach, manage campaigns, or evaluate interest in NDMU programs and services.
• Government agencies, regulators, law enforcement, courts, and other legal authorities when we believe disclosure is required or permitted by law, legal process, regulation, subpoena, court order, government request, accreditation requirement, or similar obligation.
• Parents, guardians, emergency contacts, and/or appropriate officials when disclosure is permitted by law and needed to support student services, respond to an emergency, protect health or safety, manage financial or disciplinary matters, or carry out other legitimate NDMU purposes.
• Financial institutions, payment processors, donors, grantors, and funding sources when needed to process payments, administer financial aid, manage scholarships, support grants, process donations, or maintain related records.
• Other parties with your consent and/or at your direction.

We may also share personal information when needed to:

• Protect the rights, safety, property, or security of NDMU, our community members, or others
• Investigate or respond to suspected misconduct, fraud, security incidents, or policy violations
• Enforce agreements and NDMU policies
• Complete transactions
• Support audits or compliance reviews; or
• Defend legal claims.

We do not sell personal information for money. Some advertising, analytics, social media, or tracking technologies may be considered a “sale,” “sharing,” “targeted advertising,” or similar activity under certain privacy laws. Where required, we will provide additional notice and a way to manage applicable choices.

Some student records may be protected by the Family Educational Rights and Privacy Act, known as FERPA. This law gives eligible students certain rights to inspect, review, and request amendment of their education records. FERPA also limits when we may disclose personally identifiable information from education records without consent.

This Privacy Statement does not replace our FERPA Annual Notice or any FERPA-related procedures. When FERPA applies, we handle student education records according to FERPA and our related student records practices.

We encourage you to review our FERPA Annual Notice for more information about education records, directory information, student rights, school official access, and the process for exercising FERPA rights.

Our websites and online services may use cookies, pixels, analytics tools, and similar technologies. These tools help us operate websites, understand site usage, improve services, measure communications, support admissions and advancement activities, and provide relevant content.

You may be able to control cookies through your browser settings. Some website features may not work properly if you disable cookies.

We do not sell personal information for money. If NDMU uses advertising or analytics technologies that qualify as targeted advertising, sale, or sharing under applicable law, NDMU will provide required notices and opt-out mechanisms.

We may use automated tools or artificial intelligence to support administrative, academic, security, technology, or service functions. These tools may help with tasks such as communications, workflow routing, fraud detection, accessibility support, analytics, cybersecurity, document processing, or service improvement.

We do not intend to use automated tools to make final decisions about education enrollment, employment, financial aid, discipline, or similarly significant matters without appropriate human review, unless permitted by applicable law and NDMU policy.

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and destruction. These safeguards may include access controls, authentication, encryption, monitoring, employee training, vendor controls, and incident response procedures.

No system is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed without authorization.

We keep personal information for as long as needed to fulfill the purposes described in this Statement, comply with legal and accreditation requirements, maintain records, resolve disputes, enforce agreements, support NDMU operations, and meet our legitimate business needs.

Retention periods vary by record type, legal requirement, and NDMU function.

Depending on the type of information, your relationship with us, and applicable law, you may have the right to request access to personal information, correction of inaccurate information, deletion of certain information, information about third-party disclosures, or opt out of certain uses or disclosures.

Some records may not be subject to all rights. For example, FERPA governs many student education records, employment laws govern many workforce records, and other laws may require NDMU to retain or disclose certain information.

We may need to verify your identity before responding to a request. We may deny or limit a request when permitted or required by law, when we cannot verify the request, when we have a legitimate basis to retain the information, or when fulfilling the request would interfere with legal, academic, security, or operational obligations.

To exercise your privacy choices and rights, use the information in the How to Contact Us or Submit a Privacy Request section below.

Our websites and services serve multiple constituencies, including prospective students, students, alumni, employees, adults, and, in some cases, programs designed for minors, including camps, youth programs, dual-enrollment activities, outreach programs, or family events. When we collect information about minors, we handle it according to applicable law and this Privacy Statement. Parents or guardians may contact us with questions about information collected in connection with youth programs.

Our websites may link to third-party websites or services that NDMU does not control. This Statement does not apply to those third-party websites or services. Review the privacy notices of those third parties before providing information to them.

You may contact us or submit a privacy request using the methods below:

Email: privacyteam |at| ndm |dot| edu (privacyteam@ndm.edu)
Mail:
Notre Dame of Maryland University
Attn: Privacy – Rice Hall
4701 North Charles Street
Baltimore, Maryland 21210

Please describe your request clearly. We may ask you to provide information that helps us verify your identity and locate your records. We will use that information only to process and respond to your request, unless the law allows another use.

We last revised this Privacy Statement on 9 July 2026. We may update this Privacy Statement from time to time to reflect changes in our business, legal requirements, or privacy practices. When we make updates, we will revise the date above. If we make material changes, we will provide additional notice where required by law.