Privacy Policy of The Enrollment Management Association

The Enrollment Management Association ("EMA", the "Organization", "we", "us" and/or "our") has prepared this Privacy Policy ("Privacy Policy") to explain how we collect, use, protect and disclose information and data that You provide or make available to EMA in the course of evaluating, requesting, using or receiving services offered by the Organization, including but not limited to, school application and enrollment services, financial aid application services, the Secondary School Admission Test ("SSAT"), SSAT registration, scheduling, administration and score reporting for the SSAT (including the SSAT Flex Paper Based Test ("PBT") delivered in-person, the SSAT Computer Based Test ("CBT") delivered in-person at Prometric Test Centers and the Computer Based SSAT at Home, delivered and remotely proctored by PSI Services, LLC ("At Home"), SSAT preparation, SSAT online practice tests, SSAT community forums, administration of the Character Skills Snapshot assessment (the "Snapshot"), Snapshot registration, scheduling, administration and results reporting, the Standard Application Online System ("SAO"), Admission Concierge, Student Prospect List ("SPL"), PROSPECT, Association-operated websites, Internet-based services, virtual and in-person conferences and conference registration platforms, virtual and in-person training and educational seminars, virtual and in-person school fairs and other services offered through Association business partners, member schools and other third parties in collaboration with the Organization (collectively, the "Services").

The Services are intended for use by parents and/or legal guardians of students who may apply for admission to independent secondary schools and/or may register for and take the SSAT or Snapshot, students, EMA members, education professionals, including but not limited to school staff, administrators and directors, school admissions consultants, companies with an interest in EMA products and services and their employees, and SSAT test administrators, proctors and other test center staff, and individuals providing information to EMA about students and/or their parents and/or legal guardians. All websites operated by EMA are referred to herein as the "Site." "You" and "Your" as used in this Privacy Policy refers to any user of the Site or Services, whether You use the Site or Services for Yourself or on behalf of another person. If You are a parent or legal guardian of a student under the age of 18 using the Site or the Services, You are accepting the terms of this Privacy Policy on behalf of Your student, and, to the extent we refer to "You" and "Your" throughout this Privacy Policy, we are referring to both You and Your student.

BY USING THE SERVICES OR THE SITE, YOU CONSENT AND AGREE TO ALL TERMS CONTAINED IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THE TERMS OF THIS PRIVACY POLICY, DO NOT USE THE SERVICES OR THE SITE.

Copyright Notice

All content on the Site and contained or provided with the Services is owned exclusively by the Organization and is protected under United States and international copyright law. You have no permission or license to copy, distribute or publish any content contained on the Site or within the Services without an explicit agreement in writing, signed by an authorized officer of the Organization.

Information We Collect

Personal Information

If You use the Services or create a user account for Yourself or another user on the Site (a "User Account"), we and our authorized and trusted test administration and proctoring vendors acting on our behalf collect information that personally identifies You, such as Your name, email address, username and password, phone number, birthday, and other personally identifiable information and data about You and/or other users whose information You provide to us. In the course of providing certain Services to students and their parents or legal guardians, including the PBT, CBT, and At Home versions of the SSAT, as well as the Snapshot and SAO, we may also collect information that includes Your gender, race, ethnicity, nationality, citizenship, social security number, government identification numbers, religious affiliation, financial information, credit card information, IP address, device identifier, student academic history, student disciplinary history, student educational information, character assessment, athletic history and achievements, extracurricular activities, SSAT test scores and all related testing data that are identified as Your scores and test response data, SSAT practice test scores and all related testing data that are identified as Your scores and data, Snapshot results and all related assessment data that are identified as Your scores and data, student health and disability information, a digital photographic image of Your face, video recordings of You, Your image and Your actions and audio recordings of Your voice taken during SSAT administrations and student biometric data from You. We will also collect, process and use Personal Information about You from other individuals and schools identified by You. To the extent any of the information or data described in this paragraph can identify You as a person, we consider such information and data to be private and confidential Personal Information and/or Personal Data and will not use or disclose it except as described in this Privacy Policy.

Usage Data, Site Activity and Location Information

We and our authorized and trusted test administration and proctoring vendors acting on our behalf automatically collect information regarding the actions You take on the Site and when You make use of the Services ("Usage Data"). Usage Data helps us understand trends in our users’ needs so that we can better consider new features or otherwise tailor our Services. This Privacy Policy in no way restricts or limits our collection and use of Usage Data, and we may share Usage Data about our users with third parties for various purposes, including to help us better understand our customers’ needs, improve our Services and as part of strategic alliances and/or partnerships with trusted third parties with whom we have agreements for such purposes. When You use the Site or Services, some examples of the Usage Data we may collect include: the type of Web browser You use, Your operating system, Your web requests, Your Internet Service Provider, Your IP address, referring/exit pages and URLs, the pages You view and how You interact with links on the Site and Services, comments and other content You post via the Services, the time and duration of Your visits to the Site or use of the Services and other such information. We may store such Usage Data itself and/or such information may be included in databases owned and maintained by Organization affiliates, agents or service providers. We may also collect data that identifies the device You use to access the Site, Your device’s unique device ID, the IP address of Your device, Your operating system, connection type (e.g. WiFi vs. cellular) and GPS technology (or other similar technology) to determine Your current location when You use a mobile device to access the Site. If You do not want us to have Your location information, You should turn off the location services before accessing the Site from a mobile device. We may use such information and pool it with other information to track, for example, the total number of visitors to our Site or users of our Services, the number of visitors to each page of our Site, etc. We use this information to help us understand how people use the Site and Services, and to enhance the Site and Services.

Cookies and Web Beacons

We and our authorized and trusted test administration and proctoring vendors acting on our behalf use cookies (a small text file placed on Your computer to identify Your computer and browser). We may also use Web beacons (a file placed on a website that monitors usage). We use cookies and Web beacons to improve the experience of the Site and Services, such as pre-populating Your username for easier login, to allow user-specific messaging or to permit user-specific advertising. We do not use cookies or Web beacons to collect Personal Information. Most Web browsers are initially set up to accept cookies. At this time, The Organization does not recognize automated browser signals regarding tracking, including "do-not-track" signals. You can remove persistent cookies and change Your privacy preferences by following directions provided in Your Internet browser’s "help" directory. However, certain features of the Site or Services may not work if You delete or disable cookies. Some of our Service Providers may use their own cookies and Web beacons in connection with the services they perform on our behalf, as further explained below.

Managing Your Information Preferences

If You have a User Account, You can always review, correct, or update Your Personal Information (defined below) by changing the relevant settings in Your User Account. You can opt out of receiving certain emails by changing notification settings on the Site or in our applications, clicking the unsubscribe link provided in an email, or by emailing us at privacy@ssat.org. You may also have the right to opt out of sharing certain Personal Information. If You have questions or concerns regarding this Privacy Policy, please email us at privacy@ssat.org.

How We Use Information and When We May Share and Disclose Information

Generally

We may use Your Personal Information for the purpose for which it was provided, including without limitation for the purposes described further below:

Provision and Monitoring of the Services: We and our authorized and trusted test administration and proctoring vendors acting on our behalf will use Your Personal Information to deliver and to monitor Your use of the Services. We will also give You the opportunity to store, review and edit Personal Information and other information on the Site. We will share Your Personal Information with subsidiaries, affiliates, and EMA Service Providers (as that term is defined below) as necessary to deliver the Services. If You are under the age of 18, we will share Your Personal Information with Your Parents or Legal Guardians, including all of Your Parents and Legal Guardians who created or were granted access to Your account and all of Your Parents or Legal Guardians who can provide EMA with valid and authentic documentation that demonstrates that they have a right to receive and review Your Personal Information and educational information, even if they did not create Your account or receive access to it by invitation from You or another Parent or Legal Guardian who created the account. If You are under the age of 18 and a Parent or Legal Guardian who did not create Your account or does not have access to Your account requests Your Personal Information, and can provide us with valid and authentic documentation that demonstrates that they are Your Parent or Legal Guardian and that they have a legal right to receive and review Your Personal Information and educational information, after we review such documentation and determine that it is valid and authentic, we will provide Your Personal Information, including SSAT scores and all other Personal Information in our possession, to such Parent or Legal Guardian. We will also share Your Personal Information with schools, school staff and administrators, consultants, education professionals, colleges and universities, EMA’s trusted education partners and other individuals designated by You and in accordance with Your preferences as communicated to us through Your User Account settings. If You are a school, school staff member or administrator, education professional, or individual providing information to EMA about a student or a student’s family or legal guardian as part of the school admissions process and/or application services, we will use and share the information provided by You as authorized by the student and/or parent or legal guardian.
Student Prospect List and PROSPECT: If You elect to participate in the Student Prospect List and PROSPECT, we will share Your address and contact email, as well as Your student’s "Basic Profile information" and boarding/day/online school preference with EMA’s member schools, trusted education partners, and participating colleges and universities that enter into agreements with EMA to receive, use and protect Your information. The elements of Your student’s Basic Profile information that You are agreeing to share are identified below. EMA may also provide its member schools, trusted education partners, and participating colleges and universities with publicly available demographic data based on Your home address. By electing to participate in the Student Prospect List and PROSPECT, which is free to You and Your student, You and Your student will receive offers, marketing and promotional materials and other information from EMA’s member schools, trusted education partners, and participating colleges and universities, which may be in the form of email or postal mail, tailored to Your student’s grade, interests and activities, gender, address and boarding/day/online preferences. For example, EMA’s member schools and participating colleges and universities may send You and Your student information about school fairs, events, open houses, application processes, and scholarship opportunities, and EMA’s education partners may send You information about products and services that may be useful in preparing to apply to or enroll in independent private schools or colleges or universities. You can opt-out from the Student Prospect List and PROSPECT on Your account settings page. Please note that you are not permitted to opt-out of non-promotional messages that are required for EMA to deliver services to you or non-promotional messages regarding your account, such as account verification, changes or updates to features of the EMA’s services, research inquiries, surveys related to EMA services you have received, or technical or security notices.

EMA maintains and periodically updates a list of all member schools that can subscribe to receive your Basic Profile data at https://search.ssat.org/member-search. EMA maintains and periodically updates a list of the participating colleges and universities that can subscribe to receive your Basic Profile data on its website at https://ssat.org/PROSPECT. EMA maintains and periodically updates a list of participating trusted education providers that can subscribe to receive your Basic Profile data at https://www.ssat.org/connect-with-education-partners/list. When you opt-in, you are providing your consent to all of EMA’s member schools, participating colleges and universities and trusted education partners to access and use your Basic Profile information and communicate with you as provided in this Privacy Policy. To the extent that You or Your student/s previously provided the information to EMA, at this time, the Basic Profile includes:

Student Name and Parent Name
Home Address and Parent Email Alias*
Student Email Alias* (if provided, EMA will only share with participating colleges and universities)
SSAT score percentile ranges for each test section
Student’s Interests and Activities, Current Grade, Student Age, Gender, Date of Birth, Current School Type, First Language, Ethnicity, Race, Sex at Birth, Year Applying For, Interest in School types, and Religious Affiliations

EMA sometimes modifies the data elements included in Your Basic Profile.

Admission Concierge: If You elect to participate in Admission Concierge, EMA will use Your name, email address and application year to send you emails as part of EMA’s free Admission Concierge service. Admission Concierge emails will include content about application deadlines, admission requirements, financial aid, interviews, school visits, admission tests, essays, recommendations and other topics that may be of interest to students applying to private independent schools. EMA will not share Your name, email address and application year with any third party as part of the Admission Concierge service unless you authorize EMA to do that.
EMA Conferences and Professional Development Events: If You register for and/or participate in any EMA Conference or Professional Development Event, whether in-person or virtually (collectively, "Events"), EMA will collect personal information from and about You and use it to provide You with information and services associated with the Events, and share Your personal information with members, sponsors, partners and third-party service providers, as applicable. We process Your personal information to fulfill Your request to participate in Events and receive Services from EMA. As an attendee, You will be identified in the attendee list and, when made available by EMA for any Event, You will have access to third-party applications and/or platforms that may include messaging features (for example, but not limited to "Attendify"). These third party applications features are designed to help You find and connect with Your peers before, during and after the Event. Other attendees can view the profile information You supply within third party applications, but will not have access to Your personal email address, or any other contact information about You, unless You choose to explicitly provide it to them in Your online profile, posts, messages, meeting invitations, or another vehicle of Your choice. Event Sponsors, if applicable, will have access to your personal email address and related contact information that You provide to EMA at the time of registration for the Event. EMA will collect certain information about You and use it to provide You with information and services associated with the Event including but not limited to (as applicable):

Email
First Name
Last Name
"I identify my gender as"
Organization Name
Job Title
Country / Region
Address
City
State / Province
Postcode / Zip Code
Mobile (Country Code / Number)

Your data is used for the administration and management of the Event (which may occur through external providers), including the following:

Validation of Your being entitled to participate in the Event;
Communication with You regarding the Event; and
Sharing Your data with selected Event Partners.

All third parties that provide applications, platforms and support to EMA in connection with Events are required to respect the security of Your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use Your personal data for their own purposes and only permit them to process Your personal data for specified purposes and in accordance with our instructions. If third-party services providers request Your personal information directly from You, it is your decision whether to share it but EMA will have no responsibility for the use of Your personal information where you have authorized a third party to access, use or process it.

EMA may also take still photographs and video and audio recordings of You while You participate in Events, and may broadcast and/or stream Events live for virtual components of the Events. EMA may also make recordings of the audio and video elements of Events and replay and rebroadcast those recordings, which may include Your image and voice. By participating in Events, You are consenting to video recordings, audio recordings, and photos of You to be used during and after the Events. This includes the release, publication, exhibition, or reproduction of such assets for promotional purposes, social media posts, website resource, PR, podcasts, On Demand, Webinars, EMA and Event partner or sponsor communications or any other purpose.

Surveys, Contests and Other Special Offers: From time to time, we may offer our users the opportunity to participate in surveys, contests and other special offers. If You elect to participate in these services, You will need to provide certain Personal Information and we will use it as necessary to deliver the relevant services. We and/or our trusted partners and/or vendors may also email for the purpose of inquiring whether You want to participate in surveys, contests and other special offers.
Questions and Requests: If You contact us by e-mail or otherwise, we will use the Personal Information You provide to attempt to answer Your question, respond to Your request and/or resolve Your problem. If You do not have a User Account, we do not regard any information submitted by You as a question or request as private or confidential and will use and share such information in its sole discretion, as necessary for EMA’s business purposes.
Contacting You About Other Products, Services and Events: The Organization and, if You opt-in, third parties, including but not limited to member schools and consultants, may use Your Personal Information to contact You in the future to tell You about products, services and events that may be of interest to You.
Research and Data Analysis: In an ongoing effort to better understand and serve the users of the Site and the Services, the Organization may, in support of its legitimate interests, conduct research on its customers’ and users’ demographics, test performance, interests, interactions with the Site, the Services and other data based on Usage Data and other information provided to us on the Site and in connection with the Services. This data may be compiled and analyzed on an aggregate basis, and the Organization may share this data with researchers, member schools, consultants, education professionals, business partners, publications, and other third parties in the sole discretion of EMA for its business purposes and/or research purposes. Deidentified data may include, but are not limited to, summaries of customers’ and users’ demographics, application and enrollment rates, and average GPAs, SSAT scores and score ranges, Snapshot results all of which data are not capable of being used to identify You personally. This information and any product of the information will not identify You or other users by name, social security number, government identification number, image, biometrics or any other unique identifier that could link the information or data to You.
Service Improvement: We may use Your Personal Information, aggregated Personal Information and other data and information collected through the Site and Services to help us improve the content and functionality of the Site, to better understand our users and to improve the Services.
Order Fulfillment: We may use Your Personal Information that You provide to fulfill any orders You may place for Services offered by the Organization.

Information You Make Available to Others

By using the Site or Services, including submission of public queries, or making public comments in parts of the Site or the Services where that is possible, You may make certain components of Your Personal Information available to others, such as Your name or username, and You may voluntarily enter text and make available comments and other content that includes additional Personal Information. Such Personal Information may be accessed by users who use the Site or the Services in parts of the Site or the Services where that is possible and it may be accessed by commercial search engines such as Google, Yahoo!, and Bing to the extent that such engines are permitted to access the Site or Services. You may also provide and upload and direct or request third parties to provide and upload Personal Information that You expressly direct us to share with designated third parties in order to participate in Services offered by us. If You direct us to share Your Personal Information with designated third parties in connection with our delivery of the Services, we will do so in accordance with Your consent and direction in the scope of our delivery of the Services.

Service Providers

From time to time, we may establish a business relationship with other businesses that we believe to be trustworthy and have privacy practices consistent with ours ("Service Providers"). For example, we may contract with Service Providers to provide certain services, such as hosting and maintenance, accounting, legal, data analytics and data storage and management, and marketing and promotions. We only provide our Service Providers with the information necessary for them to perform these services on our behalf. Each Service Provider must agree to use reasonable security procedures and practices, appropriate to the nature of the information involved, in order to protect Your Personal Information from unauthorized access, use or disclosure. Service Providers are prohibited from using Personal Information other than as specified by the Organization, and are obligated to maintain the confidentiality of Your Personal Information.

Other Transfers

We may share Personal Information and Usage Data with businesses controlling, controlled by, or under common control with the Organization. We may share Personal Information and Usage Data with trusted third parties with whom we have agreements for such purposes that include strict data protection measures and explicit limitations on how the third parties can use or share such data. We will not ask for Your permission to share Usage Data and You may not opt out of Usage Data sharing. However, if we intend to share Your Personal Information with a third party not otherwise authorized to receive it, we will give You the option not to share it. If the Organization is merged, acquired, or sold, or in the event of a transfer of some or all of our assets or equity, we may disclose or transfer Personal Information and Usage Data in connection with such transaction.

Children's Privacy

It is important to EMA to protect the privacy of Young children who may use the Site. EMA is not governed by the U.S. Children’s Online Privacy Protection Act ("COPPA") because it is a nonprofit organization. Nevertheless, EMA’s practices regarding the collection of Personal Information directly from children under the age of 13 are informed and guided by COPPA. This section of our Privacy Policy outlines those practices.

EMA does not knowingly solicit or collect the Personal Information of children under the age of 13 on the Site or through the Services, except when children under 13 are registered by a Parent or Legal Guardian (a "Parent") to take the SSAT at Home. Children under the age of 13 are not permitted to register directly for accounts on the Site or register to take the SSAT at Home. If You are under the age of 13, please do not attempt to register for an account on the Site or register to take the SSAT at Home. If You are under the age of 13 and interested in taking the SSAT and/or applying to an independent secondary school, please have Your parent or legal guardian visit www.ssat.org and/or contact EMA on Your behalf.

If You are a parent or legal guardian of a child under the age of 13, You may provide consent for Your child to register for access to the Site by first registering Yourself for an account. Once registered, You can create a restricted account for Your child, monitor the data in Your child’s account, or revoke a child’s permission to use EMA’s online services by deleting the account. EMA will verify Your creation of an account for Your child via email to You.

You may register Your child to take the SSAT at Home through Your own account, and EMA will verify Your registration via email and confirm Your agreement to EMA directly collecting Personal Information from Your child for the purpose of administering the SSAT at Home. EMA and our authorized and trusted test administration vendors, partners, test administrators and proctors acting on our behalf will collect Personal Information and Usage Data from Your child during the administration of the SSAT at Home as described in greater detail below in our Privacy Policy, including but not limited to Your child’s name, race, gender, date of birth, IP address, device identifier, still digital photographs of Your child’s image, live video and audio feeds of Your child’s image and voice, all of which will be recorded, processed and retained by EMA, its authorized and trusted test administration vendors, partners, test administrators and proctors acting on behalf of EMA as part of Your child’s SSAT administration records. It is necessary for EMA and our authorized and trusted test administration vendors, partners, test administrators and proctors acting on our behalf to collect these data from Your child in order to authenticate Your child as the registered test taker, to ensure the security and integrity of the test administration process and the validity of Your child’s score on the SSAT at Home. If You want Your child to take the SSAT at Home, You must agree to allow EMA to collect and process Your Child’s Personal Information directly from Your child during the administration of the test.

If You later decide to revoke Your consent to EMA collecting Personal Information from Your child (under the age of 13) in the future, You may notify EMA via email at privacy@ssat.org that You have revoked Your consent and EMA will honor Your revocation of consent going forward, but EMA and our authorized and trusted test administration vendors, partners, test administrators and proctors acting on our behalf will retain all Personal Information previously collected from Your Child during any prior administration of the SSAT at Home for which You registered Your child. Once You have notified EMA that You have revoked Your consent to EMA collecting Personal Information directly from Your child (under the age of 13), EMA will no longer allow You to register or schedule Your Child for the SSAT at Home.

EMA’s trusted test administration vendors, partners, test administrators and proctors acting on its behalf to collect Personal Information from children (under the age of 13) during the administration of the SSAT at Home include Learnosity Inc. and PSI Services, LLC.

If we become aware that we have inadvertently received Personal Information directly from a child under the age of 13 without the consent of a Parent, we will delete such information from our records. Please notify us immediately via email at privacy@ssat.org if You believe that we have inadvertently received Personal Information directly from a child under the age of 13, so that we can delete the information.

Compliance with Legal Process, Cooperation with Law Enforcement, EMA Investigations and Protection of User Safety

The Organization will cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We may disclose Personal Information and any other content and information about You to government or law enforcement officials or private parties if, in our discretion, we believe it is necessary or appropriate in order to respond to or comply with legal requests (including court orders and subpoenas), to protect the safety, property or rights of the Organization or of any third party, to prevent or stop any illegal, unethical, or legally actionable activity, or to comply with the law. We will use and disclose Personal Information as necessary to investigate, prevent, report and respond to suspected illegal activity related to the Site or the Services, including but not limited to suspected fraud, theft, cheating, hacking, potential violations of EMA’s intellectual property rights and/or SSAT testing policies and procedures. Finally, EMA may disclose Personal Information if, in the course of providing the Services, it receives information or reasonably suspects or has a concern, in its sole discretion, that any user’s personal physical safety is threatened or that any user under the age of 18 is or may in the near future be a victim of physical or sexual abuse.

Exclusions

This Privacy Policy shall not apply to any unsolicited information You provide to the Organization through the Site or Services, by e-mail or through any other means. This includes, but is not limited to, any ideas for new products or modifications to existing products, comments about the Organization and/or its employees or contractors, the Site, the Services and other unsolicited submissions (collectively, "Unsolicited Information"). All Unsolicited Information shall be deemed to be non-confidential and the Organization shall be free, and You hereby grant the Organization the right, to reproduce, use, disclose, and distribute such Unsolicited Information to others without limitation or attribution.

Security

The Organization employs commercially reasonable physical, electronic, and procedural safeguards to protect the confidentiality and security of Personal Information and other information and data transmitted to us. However, no data transmission over the Internet or other network can be guaranteed to be 100% secure. You acknowledge and accept the data security risks of using the Site and Services.

Third Parties/Links

Our Site and Services may contain links or integrate with other websites and online services, or allow others to send You such links. The Organization is not responsible or liable for any damage or loss related to Your use of any third party website or online service. When You access third party websites and online services through the Site or Services, this Privacy Policy does not apply to Your use of those third party websites and online services. You should always read the terms and conditions and privacy policy of a third party website or online service before using it, whether directly or in connection with Your use of the Site or Services. Third parties may collect, but we do not authorize them to collect, personally identifiable information about Your online activities over time and across different websites when You use the Sites or Services.

California Privacy Rights

When California customers provide personal information to a business, they have the right to request certain disclosures if that business shares personal information with third parties for the third parties' direct marketing purposes. Once per calendar year the customer may request that the business provide a list of companies with which it shares personal information for those companies' direct marketing purposes, and a list of the categories of personal information that the business shares. The Organization generally does not share personal information with third parties for the third parties' direct marketing purposes without Your explicit consent and direction. However, if You receive a solicitation from a third party that You believe obtained Your information from EMA without Your consent, You may request information about our compliance with this law by contacting us at:

Thomas Gera

The Enrollment Management Association

862 Route 518

Skillman, NJ 08558

tgera@enrollment.org

Any such inquiry must include "California Privacy Rights Request" in the first line of the description and include Your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through this email address or mail address.

Although EMA is aware of the California Consumer Privacy Act ("CCPA"), the law does not apply to EMA because it is a nonprofit organization.

Note to International Users

The Site and Services are hosted in the United States. If You are accessing the Sites or Services from the European Union, other countries in Europe, Asia, or any other region with laws or regulations governing personal data collection, use, and disclosure that differ from U.S. laws, please be advised that through Your continued use of the Site or the Services, which are governed by U.S. law and this Privacy Policy, You are transferring Your Personal Information to the U.S., and You consent to that transfer. Your Personal Information may also be accessible to law enforcement and national security authorities in the United States, without notice to You and without the knowledge or consent of EMA. The laws in the U.S. may not be as protective of Your privacy as those in Your location. By using our Sites or Services, You agree that the applicable laws in the U.S. will govern the collection, use, transfer, and disclosure of Your information, except as noted below for residents of the European Union and the United Kingdom. If You do not agree to these terms, do not use the Site or Services.

European Union General Data Protection Rights

EMA complies with the European Union General Data Protection Regulation (GDPR) to the extent it is applicable when it collects, processes, shares and uses the Personal Data of subjects of the European Union, the United Kingdom and Switzerland. Information about GDPR can be found here. GDPR outlines subject access rights of individuals in relation to their personal data. If You are a resident of the European Union or the United Kingdom and would like to exercise any of Your rights under GDPR, Your rights and the actions You can take are summarized below.

Right to Access: You can access most of the data we have about You through Your account at ssat.org. You can also request a complete report on what Personal Data we have about You.

Right to Rectification: We strive to keep records and all data accurate. If You would like to modify an inaccurate record of Your personal data, in most cases You can edit the data Yourself through Your account. However, if You are unable to make a correction Yourself, You can request that we make the correction for You.

Right to Data Portability: You can request a copy of some components of Your Personal Data to be transferred to a new system or platform.

Right to Object: You can object to our processing of Your Personal Data in certain limited circumstances that are not related to or necessary for our provision of the Services.

Right to Restrict Use: You can request that we restrict the processing of Your Personal Data in certain limited circumstances that are not related to or necessary for our provision of the Services.

Right to Erasure: You can request that we delete Your Personal Data in certain extremely limited circumstances that are not related to or necessary for our provision of the Services. For the benefit of clarity, we will not erase any Personal Data related to an administration of the SSAT.

All GDPR subject access rights requests must be sent via email to privacy@paeaonline.org and must include the specific details for Your request and the basis for making the request. We will respond to all valid subject access rights requests within 30 calendar days of receiving the request; however, it may take longer to fulfill Your request. We will also require that You provide certain Personal Data to enable us to ensure that You are the person You say You are and that You are entitled to exercise the subject access rights, either for Yourself or for Your student. If You are unsatisfied with how we handle Your request, You can find the contact information for Your local data protection authority in the European Union, the United Kingdom and Switzerland here.

Privacy Policy Changes

From time to time, we may change this Privacy Policy. If we change this Privacy Policy, we will give You notice by posting the revised Privacy Policy on the Site. Those changes will go into effect on the effective date shown in the revised Privacy Policy. By continuing to use the Site or Services, You consent to the revised Privacy Policy. Reviewing this page periodically or before You provide us with additional personally identifiable information is recommended.

Websites Operated by the Organization

Websites operated by the Organization presently include the following domains:

ssat.org
enrollment.org

In addition to the above-identified domains, the Organization may acquire and operate additional websites under domains not identified above. This Privacy Policy governs all such additional websites from the moment that they are acquired or operated by the Organization. The Organization may also transfer any of the above domains to a third party, without notice to You, in which case the privacy policy of the transferred websites will be governed by new terms established by the acquiring party. Please check this Privacy Policy for periodic updates to the list of websites operated by the Organization, as well as other changes.

PLEASE PRINT A COPY OF THIS PRIVACY POLICY FOR YOUR RECORDS AND PLEASE CHECK THE SITE FREQUENTLY FOR ANY CHANGES TO THIS PRIVACY POLICY.

IF YOU HAVE ANY QUESTIONS OR COMMENTS ABOUT THE PRIVACY POLICY, PLEASE CONTACT US AT tgera@enrollment.org