�������������

������������� of Nursing & Health Sciences

1. Scope and Applicability

This California Privacy Addendum (“California Addendum”) supplements the ������������� of Nursing & Health Sciences Privacy Policy (“Privacy Policy”) and applies solely to California residents as defined under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA/CPRA”).

If there is a conflict between this California Addendum and another section of the Privacy Policy, this California Addendum controls for California residents.

Terms used but not defined in this California Addendum have the meanings given in the CCPA/CPRA.

2. Categories of Personal Information Collected

During the prior twelve (12) months, ������������� of Nursing & Health Sciences (“�������������,” “we,” “us,” or “our”) may have collected the following categories of Personal Information about California residents, depending on their relationship with the University (e.g., applicants, students, alumni, website visitors, employees):

Personal Information Categories

• Identifiers (e.g., name, email address, mailing address, phone number, online identifiers)
• Customer Records Information (as described in Cal. Civ. Code §1798.80(e))
• Protected Classification Characteristics (e.g., gender, age) when lawfully required for admissions, reporting, or compliance
• Commercial Information (e.g., services requested or enrollment history)
• Internet or Other Electronic Network Activity (e.g., website usage, device information)
• Geolocation Data (approximate location derived from IP address)
• Audio, Visual, or Electronic Information (e.g., recorded classes or events, where permitted)
• Education Information (e.g., enrollment status, program information, academic records where not exempt under FERPA)
• Employment‑Related Information (for job applicants and employees)
• Inferences drawn from the information described above

Sensitive Personal Information

Where applicable, ������������� may collect Sensitive Personal Information as defined by the CCPA/CPRA (e.g., government identifiers, health‑related information, biometric data).

3. Sources of Personal Information

We collect Personal Information from:

• You directly (e.g., applications, enrollment forms, communications)
• Our online systems and learning platforms
• Service Providers and contractors supporting admissions, education delivery, compliance, and IT operations
• Publicly available lawful sources, where appropriate

4. Purposes for Collecting and Using Personal Information

������������� collects and uses Personal Information for purposes including:

• Admissions and enrollment administration
• Delivering educational programs and student services
• Academic advising, accreditation, and compliance
• Financial aid processing and billing
• Student support, career services, and alumni engagement
• Website functionality, security, and analytics
• Communications, institutional operations, and legal compliance

5. Disclosure of Personal Information for Business Purposes

In the preceding 12 months, ������������� may have disclosed Personal Information for legitimate business purposes to:

• Service Providers (e.g., IT vendors, learning management platforms, analytics providers)
• Education Partners supporting program delivery and clinical education
• Government or regulatory authorities when required by law

The categories of Personal Information disclosed may include identifiers, education information, internet activity data, and other information reasonably necessary to support educational and operational purposes.

6. Sale or Sharing of Personal Information

������������� does not sell Personal Information in exchange for monetary consideration.

However, under California law, certain activities—such as allowing third‑party analytics or advertising technologies to collect information through our websites—may be considered a “sale” or “sharing” of Personal Information for cross‑context behavioral advertising.

Categories That May Be Sold or Shared

• Identifiers
• Internet or other electronic network activity information
• Geolocation data (approximate)
• Education information
• Inferences drawn from the above

������������� does not knowingly sell or share Personal Information of consumers under the age of sixteen (16).

7. Sensitive Personal Information Use Limitation

������������� uses Sensitive Personal Information only for purposes permitted under the CCPA/CPRA, including activities that are reasonably necessary to:

• Provide educational services
• Ensure campus safety
• Comply with legal and regulatory obligations

We do not use Sensitive Personal Information for profiling, targeted advertising, or purposes beyond those reasonably anticipated by California residents.

8. Data Retention

������������� retains Personal Information only for as long as reasonably necessary to fulfill the purposes described in the Privacy Policy and this California Addendum, including compliance with:

• Accreditation requirements
• Education and student record regulations (including FERPA where applicable)
• Tax, legal, and audit obligations

Retention periods vary by data category and context.

9. California Consumer Privacy Rights

Subject to certain legal exceptions, California residents have the following rights:

Right to Know

You may request information about:

• Categories of Personal Information collected
• Sources of Personal Information
• Purposes for collection, sale, or sharing
• Categories of third parties receiving Personal Information
• Specific pieces of Personal Information collected about you

Right to Delete

You may request deletion of your Personal Information, subject to lawful exceptions.

Right to Correct

You may request correction of inaccurate Personal Information.

Right to Opt‑Out of Sale or Sharing

You may opt out of the sale or sharing of your Personal Information for cross‑context behavioral advertising.

Right to Non‑Discrimination

������������� will not discriminate against you for exercising your privacy rights.

10. Exercising Your California Privacy Rights

Opt‑Out Requests

You may submit a “Do Not Sell or Share My Personal Information” request by emailing privacy@joyce.edu.

������������� also recognizes and honors Global Privacy Control (GPC) signals as opt‑out requests, where applicable.

Submitting Other Requests

You may submit a verifiable consumer request:

• Email: privacy@joyce.edu

11. Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We will require verification of:

• Your identity
• The agent’s identity
• Written authorization (unless the agent holds valid Power of Attorney)

12. Verification Process

To protect your Personal Information, we will verify your identity before responding to certain requests. Information collected during verification is used solely for verification purposes.

13. Responses and Fees

We may deny requests where permitted by law. We may charge a reasonable fee or decline to act on a request if it is excessive, repetitive, or manifestly unfounded, as allowed under the CCPA/CPRA.

Contact Information

For questions about this California Addendum or �������������’s privacy practices, please contact us through the methods described above.

������������� of Nursing & Health Sciences

1. Scope and Applicability

This Colorado Privacy Addendum (“Colorado Addendum”) supplements the ������������� of Nursing & Health Sciences Privacy Policy (“Privacy Policy”) and applies solely to Colorado residents acting in an individual or household context, as defined under the Colorado Privacy Act (“CPA”).

If any provision of this Colorado Addendum conflicts with another section of the Privacy Policy, this Colorado Addendum controls for Colorado residents.

Terms used but not defined in this Colorado Addendum have the meanings given under the CPA.

2. Colorado Consumer Privacy Rights

Subject to applicable exceptions, Colorado residents have the following rights with respect to their Personal Data:

Right to Opt Out

You have the right to opt out of the processing of your Personal Data for purposes of:

• Targeted advertising
• The sale of Personal Data
• Profiling in furtherance of decisions that produce legal or similarly significant effects

Right to Access

You have the right to request confirmation of whether ������������� is processing your Personal Data and to access such Personal Data.

Right to Data Portability

You have the right, up to once per year and free of charge, to receive a copy of the Personal Data you have previously provided to ������������� in a portable, readily usable format, where technically feasible, that allows you to transmit the data to another entity.

Right to Delete

You have the right to request deletion of certain Personal Data that ������������� has collected about you, subject to statutory exceptions (including legal, educational, and regulatory obligations).

Right to Correct

You have the right to request correction of inaccuracies in your Personal Data, taking into account the nature of the data and the purposes of processing.

3. Sensitive Data

Due to the nature of its educational, clinical, and regulatory obligations, ������������� may be required to collect and process Sensitive Data, such as:

• Racial or ethnic origin
• Mental or physical health information
• Citizenship or immigration status
• Biometric information, where applicable

������������� processes Sensitive Data only as permitted by law, including to:

• Comply with federal and state education, healthcare, accreditation, and employment laws
• Provide academic programs, student services, and campus safety
• Meet reporting and regulatory requirements

If ������������� processes Sensitive Data for purposes other than those permitted under the CPA, it will do so only with your affirmative consent or as otherwise authorized by law.

4. Profiling

������������� does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers, including decisions related to:

• Admissions or enrollment
• Financial aid eligibility
• Academic standing or discipline
• Access to educational services or programs

5. Sale of Personal Data and Targeted Advertising

������������� does not sell Personal Data for monetary consideration.

However, ������������� may process certain Personal Data (such as online identifiers or device information) to support limited targeted advertising or analytics activities, for example through website analytics or advertising technologies.

Opt‑Out of Targeted Advertising

Colorado residents have the right to opt out of the processing of Personal Data for targeted advertising purposes.

You may exercise this right by submitting an opt‑out request through our designated request mechanism described below.

������������� also recognizes Global Privacy Control (GPC) browser signals as a valid opt‑out request, where applicable.

6. How to Exercise Your Colorado Privacy Rights

Submitting a Request

You may submit a request to exercise your Colorado privacy rights through one of the following methods:

• Email: privacy@joyce.edu

7. Authentication and Verification

Once we receive your request, ������������� will confirm receipt and take reasonable steps to verify your identity before responding, unless the request is an opt‑out request submitted through an automated process.

We may request additional information if necessary to:

• Verify your identity
• Confirm the authenticity of the request
• Verify the identity of the data subject

Personal Data collected during verification is used solely for verification purposes.

8. Authorized Agents and Minors

You may submit a request through an authorized agent acting on your behalf. ������������� may require:

• Proof of the agent’s authorization
• Verification of your identity directly with �������������

A parent or legal guardian may exercise rights on behalf of their minor child in accordance with applicable law.

9. Appeals Process

If ������������� denies your request, you have the right to appeal the decision within 30 days of receipt of the denial.

You may submit an appeal by:

• Responding directly to the communication denying your request, or
• Emailing: privacy@joyce.edu (or the University’s designated privacy contact)

������������� will respond to your appeal within the timeframe required by the CPA.

10. Non‑Discrimination and Fees

������������� will not discriminate against you for exercising your rights under the CPA.

If you submit a request more than once within a 12‑month period, ������������� may charge a reasonable fee or decline to act on the request, as permitted by the CPA.

11. Contact Information If you have questions about this Colorado Addendum or �������������’s privacy practices, please contact us using the methods above.

������������� of Nursing & Health Sciences

1. Scope and Applicability

This Texas Privacy Addendum (“Texas Addendum”) supplements the ������������� of Nursing & Health Sciences Privacy Policy (“Privacy Policy”) and applies solely to Texas residents acting in an individual or household context, as defined under the Texas Data Privacy and Security Act (“TDPSA”).

In the event of a conflict between this Texas Addendum and any other section of the Privacy Policy, this Texas Addendum controls for Texas residents.

Terms used but not defined in this Texas Addendum have the meanings given in the TDPSA.

2. Texas Consumer Privacy Rights

Subject to applicable exceptions under the TDPSA, Texas residents have the following rights with respect to their Personal Data:

Right to Access

You have the right to request confirmation of whether ������������� is processing your Personal Data and to access that Personal Data.

Right to Data Portability

You have the right, up to twice annually and free of charge, to receive a copy of the Personal Data you have provided to ������������� in a portable, readily usable format, where technically feasible, that allows you to transmit the data to another controller without hindrance.

Right to Delete

You have the right to request deletion of certain Personal Data that ������������� has collected about you, subject to lawful exceptions (including legal, educational, accreditation, and regulatory obligations).

Right to Correct

You have the right to request correction of inaccurate Personal Data, taking into account the nature of the data and the purposes for which it is processed.

Right to Opt Out

You have the right to opt out of the processing of your Personal Data for purposes of:

• Targeted advertising
• The sale of Personal Data
• Profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you

3. Profiling

������������� does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects, including decisions related to:

• Admissions or enrollment
• Financial aid eligibility
• Academic standing, progression, or discipline
• Access to educational programs or student services

4. Sensitive Data

Due to the nature of its educational, clinical, employment, and regulatory obligations, ������������� may collect and process Sensitive Data, including:

• Racial or ethnic origin
• Mental or physical health information
• Citizenship or immigration status
• Biometric information, where applicable
• Precise geolocation data, where voluntarily provided

������������� processes Sensitive Data only as permitted by law, including to:

• Comply with federal and state education, healthcare, accreditation, employment, and licensure requirements
• Provide academic programs, student accommodations, and support services
• Ensure campus safety and institutional security

If ������������� processes Sensitive Data for purposes not otherwise permitted by the TDPSA, it will do so only with your consent.

Withdrawal of Consent

Where consent is required (for example, if precise geolocation data is voluntarily provided through a mobile application), you may withdraw your consent at any time through:

• The applicable application settings, or
• Your device or browser privacy controls

5. Sale of Personal Data and Targeted Advertising

������������� does not sell Personal Data in exchange for monetary consideration.

However, ������������� may process certain Personal Data (such as online identifiers or device information) to support limited targeted advertising, analytics, or website performance activities, consistent with educational and operational needs.

Opt‑Out of Targeted Advertising

Texas residents may opt out of the processing of Personal Data for targeted advertising purposes.

You may exercise this right using the request mechanisms described below. ������������� also recognizes Global Privacy Control (GPC) browser signals as a valid opt‑out request, where applicable and technically feasible.

6. How to Exercise Your Texas Privacy Rights

Submitting a Request

You may submit a verifiable consumer request to exercise your TDPSA rights using one of the following methods:

• Email: privacy@joyce.edu

7. Authentication and Verification

Once ������������� receives your request, we will confirm receipt and take reasonable steps to verify your identity, unless the request is an automated opt‑out request.

We may request additional information to:

• Verify your identity
• Confirm the authenticity of the request
• Verify the identity of the data subject

Personal Data collected for verification purposes is used solely to verify your request.

8. Response Limits and Fees

������������� will provide information in response to consumer requests free of charge up to two times per year.

If a request is manifestly unfounded, excessive, or repetitive, ������������� may:

• Charge a reasonable fee to cover administrative costs, or
• Decline to act on the request, as permitted by the TDPSA

9. Appeals Process

If ������������� denies your request, you have the right to appeal the decision within30 days of receiving the denial.

You may submit an appeal by:

• Responding directly to the communication denying your request, or
• Contacting us at: privacy@joyce.edu

������������� will review and respond to appeals within the timeframe required by the TDPSA.

10. Contact Information

If you have questions about this Texas Addendum or �������������’s privacy practices, please contact us using the methods described above.