Privacy Notice
Quick Summary
We collect personal information such as your name, contact details, application data, and website usage information. We use this information to provide services, improve our website, consider applications, and engage in outreach.
We do not sell personal data, but we may share certain information with advertising providers to deliver St. John’s College ads that may be of interest to you. Maryland residents have specific rights under the Maryland Online Data Privacy Act (MODPA), including the right to access, correct, delete, or opt out of targeted advertising.
You can make choices about cookies and advertising at any time through the cookie banner that appears on our website. Selecting “Deny Cookies” in the banner will opt your current website browser and device out of advertising cookies and similar technologies.
For full details, please read the notice below.
St. John’s College Privacy Notice
References to “our,” “us,” “we,” or “St. John’s College” within this Privacy Notice are to the St. John’s College family of companies, including its subsidiaries and affiliates, that provide services or operate in the United States/Maryland. This Privacy Notice addresses the collection and use of personal information by St. John’s College in relation to individuals outside St. John’s College (referred to as “you” or “your” in this Privacy Notice).
This Privacy Notice is in addition to, and does not replace, our Notice of Privacy Practices, which explains how we use and disclose our patients’ protected health information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Should there be a conflict between the terms of this Notice and the Notice of Privacy Practices with respect to PHI, the Notice of Privacy Practices will control.
This Privacy Notice is in addition to, and does not replace, our FERPA Notice which explains our compliance with the Family Educational Rights and Privacy Act of 1974 (“FERPA”) as it relates to educational records (as defined by FERPA). Should there be a conflict between the terms of this Notice and the FERPA Notice with respect to educational records, the FERPA Notice will control.
We may obtain your personal information in a variety of ways, both online and offline. Examples include when you reach out for information about us, when you visit our websites, and when you submit an application.
This Privacy Notice explains the types of personal data we collect, how we use it, who we disclose it to, how we protect it, and your legal rights. Please read the following carefully as it explains our views and practices regarding your personal data and how it is handled. “Personal data” means any information which identifies you, such as your name or phone number. “Personal data” also includes other information like your date of birth, gender, and ethnicity, which, when combined, identifies you. When data is stored in a way that does not identify you personally, it is not considered personal data. Aggregate or deidentified data or various types of publicly available data does not fall into the definition of “personal data.”
Processing of Personal Data
Categories of personal data you provide to us
- Contact information, such as your first and last name, salutation, nicknames, billing and mailing addresses, phone number, email address, and company name.
- Financial information, such as bank accounts and payment information.
- Interaction information based on our provision of prospective student or alumni services to you, including communications by email or other methods, notes of calls or meetings held or planned, or records related to visits to our website.
- Professional or employment-related information, such as your job title, employer information, work history, and education history.
- Demographic information, such as racial or ethnic origin, religious beliefs, health data, or citizenship status.
- Online identifiers, such as your IP address, MAC address, SSIDs, and other device or persistent identifiers, device characteristics (such as browser information), web server logs, and cookies.
- Marketing information, such as your preferences for receiving our marketing communications and details about your engagement with them.
- Audio, electronic, and visual information, such as photographs, video and voice recordings of conversations with you as permitted by law, and security camera recordings of your activity in our office space.
Purpose for collecting and processing personal data
We primarily use your personal data to provide services that you have requested. Most commonly we will use your personal data to:
- Provide information to you
- Perform a contract we have entered into with you
- Fulfill a legal obligation
- Manage, develop, and enhance the website
- Analyze website engagement and traffic
- Consider your application for enrollment
- Engage in marketing activities
- Engage in fundraising efforts and process donations for St. John’s College
Some of the personal information described in the “Categories of Personal Information” section above also constitutes “sensitive data” under the Maryland Online Data Privacy Act of 2024 (“MODPA”). We use and disclose sensitive personal information for our business and compliance functions and for other legally authorized purposes.
Disclosure of Personal Data
We may disclose your personal data to the following categories of third parties:
- Our service providers. We use other companies or contractors (service providers) to assist us with the provision of services. While we may use a service provider to assist in relation to any of the purposes for which we may collect personal information, they generally fit within one or more of the following categories of service providers:
- Infrastructure and technology service providers such as SaaS vendors;
- Marketing, advertising, research, event, and communications providers; or
- Providers of administrative services such as confidential waste disposal, IT support service providers, or document processing services.
- External auditors, accountants, and legal and other professional advisors.
- Government or regulatory authorities as required by law.
Data Retention
We keep the categories of personal data described above for as long as necessary or permitted for the purposes described in this Privacy Notice or otherwise authorized by law. This generally means holding the information for as long as necessary to fulfill the purposes for which it was obtained, to manage our operations or your relationship with us, to protect or defend legal claims, or as we are otherwise required or permitted to keep your personal information by applicable laws or regulations.
Safeguarding Your Personal Data
We take the security and protection of your personal data very seriously. To protect your personal information, we maintain physical, electronic, and procedural safeguards in keeping with industry standards and practices, and we review and adjust these safeguards regularly in response to advances in technology. To learn more about our privacy features and appropriate use policy, please visit: sjc.edu/it-services/appropriate-use-policy.
Additional Information for Maryland Residents
This section supplements the information contained in the other sections of this Privacy Notice and applies solely to individuals who reside in Maryland and for whom we have personal information that is subject to the MODPA. This Privacy Notice, including this additional information, is provided to comply with the MODPA and any terms defined in the MODPA have the same meaning when used in this section.
The MODPA provides specific rights to Maryland residents relating to their personal data. This section does not apply to all personal data we may collect about you. For example, it does not cover information which is already subject to HIPAA regulation.
Your Rights
You have the following rights regarding your personal data (subject to certain exemptions):
- Right to Confirm Processing of Personal Data: You have the right to confirm if we are processing your personal data.
- Right of Access: You have the right to access your personal data.
- Right to Correct Inaccuracies: You have the right to correct inaccuracies in your personal data.
- Right to Obtain Copy of Personal Data: If the processing of your personal data is done by automatic means, you have the right to obtain a copy.
- Right to Delete: You have the right to request that we delete your personal data.
- Right to Obtain List of Categories of Third Parties to Whom Data is Disclosed: You have the right to obtain a list of the categories of third parties to which we have disclosed your personal data.
- Right to Opt Out of Certain Processing: You have the right to opt out of processing of personal data for purposes of:
– targeted advertising - Right to Withdraw Consent: Where you have given consent to the processing of your data, you have the right to withdraw your consent.
We have the right to decline to act on requests that are manifestly unfounded, excessive, technically unfeasible, or repetitive.
If you wish to exercise any of these rights or to contact us with any questions about your personal data, please contact:
How an agent can make a request on your behalf:
- You may designate an authorized agent to exercise your “Right to Opt-Out of Certain Processing.”
- A parent or legal guardian of a child can exercise any of the rights listed above.
- A guardian or conservator may exercise any of the rights listed above on behalf of a consumer.
How we handle requests we receive: We may need additional information in order to verify your identity before we are able to carry out your request. We will endeavor to respond to your request within 45 days but may extend our completion time period by an additional 45 days if it is reasonably necessary. Should we need to extend our response time, we will inform you of the reason.
How to appeal our decision: If we decline to act regarding your request, we will inform you of the justification no later than 45 days after receiving the request. We will provide information on how to appeal our decision.
Sale of Personal Data / Targeted Advertising
We do not sell personal data to third parties or process personal data for targeted advertising or for the purposes of profiling consumers in furtherance of decisions that produce legal or similarly significant effects. Although we do not sell personal data in exchange for money, we do process data for “targeted advertising” as defined under the MODPA.
We and our digital advertising providers collect certain information from your devices when you visit our websites, through cookies and other technologies, and when you use our mobile applications. This includes the following categories of personal information: Contact Information, Interaction Information, and Online Identifiers. We share these categories of personal information with our digital advertising providers to deliver St. John’s College ads that may be of interest to you. We do not have actual knowledge that we sell or share the personal information of Maryland residents under 13 years of age.
Opt-Out of Targeted Advertising
If you (or your authorized agent) wish to opt out of processing your personal data for targeted advertising, you may do so at any time by adjusting your preferences in our cookie consent banner (the slide-out that appears at the bottom of our website). Selecting “Decline” in the banner will opt your current website browser and device out of advertising cookies and similar technologies.
We honor opt-out preference signals when you navigate to our digital properties as a valid request to opt out of processing your personal data for targeted advertising. To learn more about opt-out preference signals, please visit globalprivacycontrol.org.
Contact Us
Questions about this Privacy Notice or your personal data can be directed to:
Elmer Yglesias, Chief Data Officer
St. John’s College
60 College Avenue
Annapolis, MD 21401
Date and Changes to This Privacy Notice
This Privacy Notice is the most recent version, and the date it was last updated is located below. We reserve the right to change our Privacy Notice from time to time, and you are advised to visit our website regularly to check for any amendments. If we make a change that we are required by law to inform you of in other ways (such as by email), we will do so.
Last updated: October 2, 2025