Privacy Statement
University of California Office of the President Online Privacy Statement
Effective Date: January 9, 2025
The Regents of the University of California ("UC", "we" or "us") value your privacy.
This Privacy Statement ("Statement") governs this website, www.ucop.edu, and any other websites that link to this Statement ("Sites"), and the related content, platforms, services, products and other functionalities we offer through those Sites (the "Services").
This Statement explains how we collect, use, disclose and process Personal Information (defined in Personal Information we collect) in connection with the Sites and Services.
If you have any questions or concerns about your privacy on the ucop.edu website or wish to exercise your rights under applicable law, you can contact us at privacy@ucop.edu.
This Statement does not address UC campus or medical center activities.
This Statement also does not address our processing of Personal Information (defined in Personal Information we collect) that is part of a student applicant's or student's educational record ("Student Data"), which is done in accordance with the Family Educational Rights and Privacy Act ("FERPA") and other laws, and is covered by a separate privacy statement.
Table of Contents
- Personal Information we collect
- How we collect your Personal Information
- How we use your Personal Information
- Personal Information we share
- Retention of Personal Information
- How we protect your Personal Information
- Your options and control of your Personal Information
- Links and Third-Party Sites or Services
- Children's Personal Information
- Updates to our Privacy Statement
- International transfer of Personal Information
- How to contact us
- Statement for EEA, UK and Switzerland Residents
- Cookie Statement
Personal Information we collect
Some of the information we collect can directly or indirectly identify you. This is called your "Personal Information." We only collect Personal Information from you that is relevant and necessary for us to provide services to you and the public or required to meet our obligations under law. The Personal Information we collect may include:
Information you provide directly to us may include:
- Contact Information (such as first and last name, mailing address, email address, telephone number);
- Inquiry and communications information;
- UC social media communications;
- Demographic or geographic information (such as gender, date of birth, age, zip code);
- Employment-related information (such as professional or academic affiliation, educational and work history, and information obtained during interviews); and
- Other information you choose to provide to us that will be used in accordance with this Statement.
Information collected automatically:
- Log data about your interaction with our Sites and online content (such as internet protocol (IP) address, operating system, device type and version, browser type and version, browser id, pages visited, frequency of access, time spent on each page, internet address of the site that directed you to our Site and referring website details). To learn more about how we use cookie data please review the Cookie Statement.
- Analytics data to understand how individuals use our Sites and online content.
- Information about your general location, which may be determined through your IP address.
- Information about the device you use to access the website, such as unique device settings, operating system, browser, and crash data.
We and our third-party providers may use (i) cookies related technologies to automatically collect this personal information. For more information about these practices and your choices regarding cookies, please see the Cookie Statement section.
Information collected from third parties:
We may also receive information about you from third parties, which we often combine with personal information we collect either automatically or directly from you. Our third parties may include our business partners, our affiliates, our community partners, our service providers, publicly available sources, including social networks in which you participate. We only collect information from third parties that is relevant and necessary for us to provide services to you and the public or required to meet our obligations under law.
How we collect your Personal Information
We collect Personal Information in a variety of ways. For example, you may provide us your Personal Information when you contact us or send us messages, conduct a search on our Site, subscribe to our mailing lists, newsletters, or other forms of marketing communications, or use some other feature of our Services.
We may link or combine usage or device information from you on our Sites and mobile apps with information we receive from third parties, as well as information we collect automatically through tracking technologies described in the Cookie Statement section. This allows us to provide you with a personalized experience regardless of how you interact with us.
To learn more about how a particular UC unit or organization collects your Personal Information, refer to the UC website associated with that service or use the How to contact us section.
How we use your Personal Information
Depending upon your relationship with UC, UC may use your Personal Information, where necessary:
- To fulfill or meet the reason the information was provided;
- To respond to your requests;
- To complete transactions;
- To provide our services to you;
- To promote our Services;
- To invite you to provide your views on our Services, participate in research or attend events;
- To perform analytics and understand your preferences;
- To provide access where required to our Sites and facilities;
- To enforce our agreements, resolve disputes, to carry out our obligations and enforce our rights (and those of others);
- Where required by law;
- For our own administrative and quality assurance purposes; and
- For any other purposes you consent to.
We will indicate to you if the provision of certain Personal Information is mandatory. To learn more about how a particular UC Service uses your Personal Information, refer to the UC website associated with that Service or use the How to contact us section.
Personal Information we share
Depending upon your participation in a UC Site or Service, UC may share your Personal Information internally within UC's departments and academic campuses and other UC locations. UC may also share your Personal Information with third parties. Those third parties may include:
- Service Providers: We engage other third-party service providers that perform business or operational services for us or on our behalf. The information we share with our service providers may include contact information, demographic information, transaction information, and information about your communications and related activities.
- Collaborators and Community Partners: We coordinate and share Personal Information with UC partners and collaborators to support UC's public service, education and research missions.
- Public, Regulatory and Governmental Authorities: We may share Personal Information with governmental authorities that regulate or have jurisdiction over UC.
- Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement:
- in connection with the establishment, exercise or defense of legal claims;
- to comply with laws or to respond to lawful requests and legal process;
- to protect our rights and property and the rights and property of others, including to enforce our agreements and policies;
- to detect, suppress or prevent fraud;
- to protect the health and safety of us and others; or
- as otherwise required by applicable law.
- With Your Consent: We may disclose personal information about an individual to certain other third parties or publicly with their consent or direction. For example, with an individual's consent or direction we may post their testimonial on our Sites or service-related publications.
Any information acquired by UC through the Sites is subject to the limitations set forth in the Information Practices Act and any other applicable laws. The Office of the President will not distribute or share Electronically Collected Personal Information (as defined in subdivision (d) of California Government Code Section 11015.5) about users to any third-party without the permission of the user, except in the circumstances set forth in this Statement. The Office of the President will not distribute or sell any Electronically Collected Personal Information to any third-party without your permission. Such Electronically Collected Personal Information is exempt from requests made pursuant to the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1). To learn more about how a particular UC unit or organization collects your Personal Information, refer to the UC website associated with that service or use the How to contact us section.
Retention of Personal Information
We keep your Personal Information as long as needed or legally permitted for the purposes for which it was obtained, unless otherwise provided in agreements between you and the Office of the President or as required by law.
How we protect your Personal Information
UC takes appropriate and reasonable physical, administrative and technical safeguards to preserve the integrity and security of your personal information against loss, unauthorized access, and illegal use or disclosure. Such personal information is stored by the University in secure locations. University employees are trained on procedures for the management of Personal Information, including limitations on the release of information. Access to personal information is limited to those members of the University's staff whose work requires such access. The Office of the President's information management practices conform to the requirements of the Information Practices Act of 1977 (Civil Code Section 1798, et seq.), the Public Records Act (California Government Code Section 6250, et seq.), California Government Code Section 11015.5 and other applicable laws pertaining to information privacy.
Your options and control of your Personal Information
You may control your information in the following ways:
- Email Communications Preferences. By providing us your email address, you consent to our use of your email address to send you Site and service-related statements. You can stop receiving promotional email communications from us by clicking on the "unsubscribe" link provided in such communications. You may not opt-out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Services, technical and security notices).
- Modifying or Deleting Your Information. If you have any questions about reviewing, modifying, deleting, or exercising your option of having your Personal Information deleted without reuse or distribution (pursuant to California Government Code section 11015.5), you can contact us directly by sending a written request to the postal or email address set out in the How to contact us section. We may take a reasonable period to respond. We may not be able to modify or delete your information in all circumstances.
Links and Third-Party Sites or Services
Our Services may include links to third-party websites, plug-ins and applications. Except where we post, link to, or expressly adopt or refer to this Privacy Statement, this Privacy Statement does not apply to, and we are not responsible for, any Personal Information practices of third-party websites and online services or the practices of other third parties. To learn about the Personal Information practices of third parties, please visit their respective privacy statements.
Children's Personal Information
Except for students enrolled in UC programs, our Services are not directed to, and we do not intend to, or knowingly, collect or solicit Personal Information from children under the age of 13. If an individual is under the age of 13, they should not use our Services or otherwise provide us with any Personal Information either directly or by other means. If a child under the age of 13 has provided Personal Information to us, we encourage the child's parent or guardian to contact us to request that we remove the Personal Information from our systems. If we learn that any Personal Information, we collect has been provided by a child under the age of 13, we will promptly delete that Personal Information.
Updates to our Privacy Statement
We may update this Privacy Statement from time to time. Please review this page periodically to remain informed. Our privacy practices are current as of the Last Updated date identified at the beginning of this Statement. If we make material changes to this Privacy Statement, we will notify individuals by prominent posting on our Sites. All changes shall be effective from the date identified at the top of the page. Your continued use of the Sites after any changes in this Statement will constitute your acceptance of such change.
International transfer of Personal Information
To fulfill the intended processing purposes for the UC Services you use, Personal Information of users outside of the United States, may be transferred to the United States, where data protection laws may differ from those of your home country. Depending upon your participation in or utilization of UC Services, your Personal Information may also be transferred to other countries outside of the United States. Refer to the UC website associated that UC Service or use the How to contact us section for more information. UC will undertake appropriate measures to ensure adequate protection of your Personal Information in accordance with applicable data protection laws.
How to contact us
If you have any questions or requests in connection with this Privacy Statement or other privacy-related matters, please contact us by using the email address, postal address or telephone number:
Chief Privacy Officer
privacy@ucop.edu
1111 Franklin Street
Oakland, CA 94607
(510) 987-0511
Statement for European Economic Area ("EEA"), United Kingdom ("UK") and Switzerland Residents
Controller: The Regents of the University of California, a corporation established under the laws of the Constitution of the State of California, and duly incorporated and organized under the laws of United States of America, having its registered address at 1111 Franklin Street, Oakland, CA 94607, is the "controller" responsible for the processing of personal data in connection with our Service. This means that we determine and are responsible for how your personal data is used.
Legal Bases for Processing
UC is the controller of the Personal Information we hold about you in connection with your use of our Services. Depending upon your relationship with UC, UC may use your Personal Information where necessary to perform its obligations under a contract with you, or where necessary to fulfil a request you have made to use or participate in a UC Service; where required by law, and/or where necessary for the legitimate interests of UC, provided that there is no overriding impact on your interests or rights. In some cases, we may ask you to grant us separate consent to use your Personal Information.
Marketing and Advertising
From time to time, we may contact you with information about our services, including sending you marketing messages and asking for your feedback on our services. Most marketing messages we send will be by email. For some marketing messages, we may use Personal Information we collect about you, excluding your searches, to help us determine the most relevant marketing information to share with you.
We will only send you such marketing messages if you have given us your consent to do so. You can withdraw your consent any time by clicking on the unsubscribe link at the bottom of our marketing emails.
Security and Storage
We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, change or damage. We will never send you unsolicited emails or contact you by phone requesting your account ID, password, credit or debit card information or national identification numbers. International Transfers of your Personal Information
The personal data we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third-party service providers have operations. If you are located in the EEA, United Kingdom or Switzerland your personal data may be processed outside of those regions, including in the United States.
In the event of such a transfer, we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards that require the recipient to treat the personal data in a manner that is essentially equivalent to that guaranteed in the country you are in. If you are located in the EEA, United Kingdom or Switzerland, these safeguards include entering into agreements that incorporate the standard contractual clauses adopted by the European Commission and approved by the UK Information Commissioner.
If you wish to inquire further about the safeguards used, please contact us using the details set out in this Privacy Statement.
Profiling and Automated Decision-making
We may analyse personal data we have collected about you to create a profile of your interests and preferences so that we can contact you with information that is relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively. We may also use personal data about you to detect and reduce fraud and credit risk.
We may use your personal data for automated individual decision-making, in which case we will inform you of such processing activities and any potential impact of such processing activities.
Your Rights
If you are located in the EEA or the UK, you have a right to:
- Access your Personal Information;
- Rectify or correct inaccurate or incomplete Personal Information concerning you;
- Move your Personal Information to another controller or processor;
- Have your Personal Information erased in certain circumstances;
- Restrict the processing of your Personal Information in certain circumstances;
- Object to the processing of Personal Information in certain circumstances;
- Withdraw your consent to the processing of your Personal Information, should UC ask for your consent for the processing of your Personal Information; and
Know whether your Personal Information is being used for automated decision-making, including profiling. In those cases, UC will give you meaningful information about the logic involved, the significance and the envisaged consequences of such processing for your data, and the right to request human intervention;
You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal data, and we will assess and inform you if that is the case. You can object to marketing activities for any reason. Due to the confidential nature of data processing, we may ask you to confirm your identity when exercising the above rights.
If you wish to exercise one of these rights, please email us at: privacy@ucop.edu
You also have the right to lodge a complaint to your local data protection authority. If you are based in the European Union, information about how to contact your local data protection authority is available online. If you are based in the UK or Switzerland, your local data protection authorities are the UK Information Commissioner's Office and the Swiss Federal Data Protection and Information Commissioner.
Cookie Statement
Where permitted by law, non-personally identifiable information and Personal Information may be automatically collected through the standard operation of UC's Internet service or through the use of "cookies" or "internet tags" and other similar techniques. Refer to the appropriate section for more information on how to restrict cookies.
We and our third-party partners and providers may use cookies to automatically collect certain types of usage information when you visit or interact with our email communications and Services. For example, we may collect log data about your device and its software, such as your IP address, operating system, browser type, date/time of your visit and other similar information. Our emails may also contain tracking pixels that identify if and when you have opened an email that we have sent you, how many times you have read it and whether you have clicked on any links in that email. We may also collect analytics data or use third-party analytics tools to help us measure usage and activity trends for our online services and better understand the individuals using our services. We also may collect location data, including general geographic location based on IP address.
UC may use three types of cookies:
- Essential Cookies: These are placed on your computer to let our Site function as intended, by allowing the pages to display correctly. Without these, our Site would be prevented from working and would be unusable.
- Preferences & Functionality Cookies: These cookies allow our Site to remember how it behaves or looks based on your preferences (e.g., your preferred language or the region you are in). These cookies can also assist you in changing text size and font and allow you to personalize the pages based on your preferences. These cookies help enhance your experience and disabling these cookies may make our Site less functional; disabling these cookies, however, should not prevent our Site from working.
- Third-Party Analytics Cookies: The only third-party cookies we use are analytics cookies. The use of analytics cookies allows us to improve the Site and enhance user experience. The analytics cookies set on your browser allow us to recognize and count the number of users to the website, see when users are using the Site, and see how users interact with the Site and its different functions. Analytics cookies show us which of the Site pages are most frequently viewed and help us record any difficulties you have with the Site.
We may include or engage in the following as part of our Services:
- Social Media Widgets: Our Services may include social media features, such as the Facebook "Like" button, Pinterest, Instagram, Twitter or other widgets. These social media companies may recognize you and collect information about your visit to our Services, and they may set a cookie or employ other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies.
- Social Media Platforms: We may display targeted advertising to you through social media platforms, such as Facebook, Twitter, Instagram, LinkedIn and other social media forums. These companies have interest-based advertising programs that allow us to direct advertisements to users who have shown interest in our services while those users are on the social media platform, or to groups of other users who share similar traits, such as likely commercial interests and demographics. We may share a unique identifier, such as a user ID, with these platform providers or they may collect information from our website visitors through a first-party pixel, in order to direct targeted advertising to you or to a custom audience on the social media platform. These advertisements are governed by the privacy policies of those social media companies that provide them. If you do not want to receive targeted ads on your social networks, you may be able to adjust your advertising preferences through your settings on those networks.
We also work with a variety of third-party partners to provide analytics and advertising services. For example, we use Google Analytics to recognize you and link the devices you use when you visit our Services on your browser or mobile device, log in to your account on our Services or otherwise engage with us. We share a unique identifier, like a user ID, with Google to facilitate the service. Google Analytics allows us to better understand how our users interact with our Services and to tailor our advertisements and content to you. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google's website, "How Google uses data when you use our partners' sites or apps."
You can learn about Google Analytics' currently available opt-outs, including the Google Analytics Browser Add-On.
We may also utilize certain forms of display advertising and other advanced features through Google Analytics. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize and display ads based on your past visits to the Services. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, or by visiting NAI's online resources.
How to restrict cookies
If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies; however, doing so may negatively impact your experience using the services, as some features and services may not work properly. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it. Alternatively, you may wish to visit About Cookies, which contains comprehensive information on how to do this on a wide variety of desktop browsers.