Privacy Notice
1. Introduction
Joyce University of Nursing and Health Sciences (“Joyce University,” “we,” “us,” or “our”) is committed to protecting the privacy and security of personal information entrusted to us. As an institution of higher education with educational, clinical, accreditation, and regulatory obligations, we recognize that information privacy is an ongoing responsibility.
This Privacy Policy describes Joyce University’s practices regarding the collection, use, disclosure, retention, and protection of personal information and personal data. It also explains certain privacy rights available to individuals under applicable law.
This Privacy Policy is supplemented by state‑specific privacy addendums for residents of California, Colorado, and Texas. If you are a resident of one of those states, the applicable addendum governs in the event of any conflict with this Privacy Policy.
We may update this Privacy Policy from time to time to reflect changes in law or institutional practices. The effective date above indicates when this Privacy Policy was last revised.
2. Scope and Applicability
This Privacy Policy applies to personal information collected by Joyce University through:
- The Joyce University website at www.joyce.edu
- Joyce University‑owned or operated online platforms, including but not limited to:
- Student portals
- Learning management systems
- Class discussion forums
- Joyce University mobile applications
- Communications and interactions related to admissions, enrollment, academic programs, student services, alumni relations, and institutional operations
These platforms and services are collectively referred to as the “Site.”
This Privacy Policy does not apply to information collected by third‑party websites or services that are not owned or controlled by Joyce University, even if accessed through links on our Site. Such third parties are governed by their own privacy policies.
3. Definitions
For purposes of this Privacy Policy:
- Personal Information / Personal Data means information that identifies, relates to, describes, or could reasonably be linked to an identified or identifiable individual.
- Sensitive Personal Information / Sensitive Data means personal information that is afforded heightened protection under applicable law, including government identifiers, health information, biometric information, precise geolocation data, racial or ethnic origin, and citizenship or immigration status.
- Services means Joyce University’s educational programs, academic and student services, institutional operations, online platforms, and related offerings.
- Sale / Selling means disclosing personal information to a third party for monetary or other valuable consideration, as defined under applicable state privacy laws.
- Sharing means disclosing personal information for cross‑context behavioral advertising or targeted advertising purposes, as defined under applicable state privacy laws.
4. Information We Collect
Sources of Information
Joyce University may collect personal information:
- Directly from you (for example, through applications, enrollment forms, communications, or participation in academic or administrative processes)
- Automatically through your use of the Site (for example, via cookies, device information, or analytics tools)
- From service providers and partners supporting admissions, education delivery, accreditation, compliance, information technology, security, and institutional operations
- From lawful third‑party sources, where permitted by law
Categories of Information Collected
The categories of personal information we may collect include:
- Identifiers such as name, email address, mailing address, and telephone number
- Admissions, enrollment, and education‑related information
- Demographic information where required for reporting, accreditation, or compliance
- Internet or electronic network activity information (such as IP address, device information, browser type, and usage data)
- Communications and correspondence
- Sensitive Personal Information where required for educational, clinical, employment, safety, or regulatory purposes
Certain information, including student education records, is governed by the Family Educational Rights and Privacy Act (FERPA). Certain health‑related information, where applicable, may be governed by the Health Insurance Portability and Accountability Act (HIPAA) or other healthcare privacy laws.
5. How We Use Personal Information
Joyce University uses personal information for purposes including:
- Admissions, enrollment, and academic administration
- Delivery of academic programs and student services
- Financial aid processing, billing, and loan servicing
- Accreditation, licensure, compliance, reporting, and institutional audits
- Campus safety, security, risk management, and fraud prevention
- Website functionality, performance, analytics, and improvement
- Communications related to institutional operations
- Legal and regulatory compliance
We will not share your mobile number, SMS opt-in data, or consent status with third parties for marketing or promotional purposes. We may share your mobile number, SMS opt-in data, or consent status, with vendors and service providers that help us provide our messaging services, including platform providers, phone companies, and other entities that assist in delivering text messages.
Joyce University does not engage in automated profiling that produces legal or similarly significant effects, such as decisions regarding admissions, financial aid eligibility, academic standing, or access to educational services.
6. Cookies, Analytics, and Tracking Technologies
Joyce University uses cookies and similar technologies to operate, maintain, and improve the Site. We may use analytics tools to understand how visitors interact with our websites and online platforms.
Certain analytics or advertising technologies may be considered “sharing” or “targeted advertising” under some state privacy laws. Where required by law, Joyce University recognizes and honors Global Privacy Control (GPC) signals as valid opt‑out requests.
7. Disclosure of Personal Information
Joyce University may disclose personal information:
- To service providers and contractors that perform services on our behalf
- To education partners supporting academic or clinical programs
- To government or regulatory authorities where required by law
- In connection with institutional transactions such as mergers, reorganizations, or asset transfers
- With your consent or at your direction
Joyce University does not sell personal information for monetary consideration. However, limited website analytics or advertising practices may constitute “sharing” under applicable state privacy laws, and eligible individuals may have the right to opt out.
8. Data Retention
Joyce University retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including compliance with:
- Federal and state education laws, including FERPA
- Accreditation, licensure, and reporting requirements
- Financial aid, tax, audit, and legal obligations
Certain records cannot be deleted upon request due to required legal, regulatory, accreditation, or educational retention obligations.
9. Your Privacy Rights
Privacy rights vary depending on your state of residence. Residents of California, Colorado, and Texas are entitled to specific privacy rights under applicable state law, which are described in the relevant State Privacy Addendum. These rights may include the ability to access, correct, delete, obtain a copy of, or opt out of certain processing of personal data.
You may submit a privacy request by contacting:
Email: privacy@joyce.edu
Joyce University will take reasonable steps to verify your identity before responding to certain requests, as required by law.
10. Children’s Privacy
The Site is not directed to children under the age of 13, and Joyce University does not knowingly collect personal information from children under 13 except as permitted by law.
11. Data Security
Joyce University maintains reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. While we strive to protect personal information, no security measure or transmission method can be guaranteed to be completely secure.
12. Cross‑Border and International Data Transfers
Joyce University is based in the United States and primarily processes personal information within the United States.
Student education records, protected health information, and other regulated data are not transferred internationally except where expressly permitted by law and subject to appropriate contractual, technical, and organizational safeguards, including access controls and security protections.
13. Changes to This Privacy Policy
Joyce University may update this Privacy Policy from time to time. If we make material changes, we will post the updated Privacy Policy on our website and update the effective date.
14. Contact Information
If you have questions or concerns about this Privacy Policy or Joyce University’s privacy practices, please contact:
Email: privacy@joyce.edu
Joyce University of Nursing & Health Sciences
1. Scope and Applicability
This California Privacy Addendum (“California Addendum”) supplements the Joyce University of Nursing & Health Sciences Privacy Policy (“Privacy Policy”) and applies solely to California residents as defined under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA/CPRA”).
If there is a conflict between this California Addendum and another section of the Privacy Policy, this California Addendum controls for California residents.
Terms used but not defined in this California Addendum have the meanings given in the CCPA/CPRA.
2. Categories of Personal Information Collected
During the prior twelve (12) months, Joyce University of Nursing & Health Sciences (“Joyce University,” “we,” “us,” or “our”) may have collected the following categories of Personal Information about California residents, depending on their relationship with the University (e.g., applicants, students, alumni, website visitors, employees):
Personal Information Categories
- Identifiers (e.g., name, email address, mailing address, phone number, online identifiers)
- Customer Records Information (as described in Cal. Civ. Code §1798.80(e))
- Protected Classification Characteristics (e.g., gender, age) when lawfully required for admissions, reporting, or compliance
- Commercial Information (e.g., services requested or enrollment history)
- Internet or Other Electronic Network Activity (e.g., website usage, device information)
- Geolocation Data (approximate location derived from IP address)
- Audio, Visual, or Electronic Information (e.g., recorded classes or events, where permitted)
- Education Information (e.g., enrollment status, program information, academic records where not exempt under FERPA)
- Employment‑Related Information (for job applicants and employees)
- Inferences drawn from the information described above
Sensitive Personal Information
Where applicable, Joyce University may collect Sensitive Personal Information as defined by the CCPA/CPRA (e.g., government identifiers, health‑related information, biometric data).
3. Sources of Personal Information
We collect Personal Information from:
- You directly (e.g., applications, enrollment forms, communications)
- Our online systems and learning platforms
- Service Providers and contractors supporting admissions, education delivery, compliance, and IT operations
- Publicly available lawful sources, where appropriate
4. Purposes for Collecting and Using Personal Information
Joyce University collects and uses Personal Information for purposes including:
- Admissions and enrollment administration
- Delivering educational programs and student services
- Academic advising, accreditation, and compliance
- Financial aid processing and billing
- Student support, career services, and alumni engagement
- Website functionality, security, and analytics
- Communications, institutional operations, and legal compliance
5. Disclosure of Personal Information for Business Purposes
In the preceding 12 months, Joyce University may have disclosed Personal Information for legitimate business purposes to:
- Service Providers (e.g., IT vendors, learning management platforms, analytics providers)
- Education Partners supporting program delivery and clinical education
- Government or regulatory authorities when required by law
The categories of Personal Information disclosed may include identifiers, education information, internet activity data, and other information reasonably necessary to support educational and operational purposes.
6. Sale or Sharing of Personal Information
Joyce University does not sell Personal Information in exchange for monetary consideration.
However, under California law, certain activities—such as allowing third‑party analytics or advertising technologies to collect information through our websites—may be considered a “sale” or “sharing” of Personal Information for cross‑context behavioral advertising.
Categories That May Be Sold or Shared
- Identifiers
- Internet or other electronic network activity information
- Geolocation data (approximate)
- Education information
- Inferences drawn from the above
Joyce University does not knowingly sell or share Personal Information of consumers under the age of sixteen (16).
7. Sensitive Personal Information Use Limitation
Joyce University uses Sensitive Personal Information only for purposes permitted under the CCPA/CPRA, including activities that are reasonably necessary to:
- Provide educational services
- Ensure campus safety
- Comply with legal and regulatory obligations
We do not use Sensitive Personal Information for profiling, targeted advertising, or purposes beyond those reasonably anticipated by California residents.
8. Data Retention
Joyce University retains Personal Information only for as long as reasonably necessary to fulfill the purposes described in the Privacy Policy and this California Addendum, including compliance with:
- Accreditation requirements
- Education and student record regulations (including FERPA where applicable)
- Tax, legal, and audit obligations
Retention periods vary by data category and context.
9. California Consumer Privacy Rights
Subject to certain legal exceptions, California residents have the following rights:
Right to Know
You may request information about:
- Categories of Personal Information collected
- Sources of Personal Information
- Purposes for collection, sale, or sharing
- Categories of third parties receiving Personal Information
- Specific pieces of Personal Information collected about you
Right to Delete
You may request deletion of your Personal Information, subject to lawful exceptions.
Right to Correct
You may request correction of inaccurate Personal Information.
Right to Opt‑Out of Sale or Sharing
You may opt out of the sale or sharing of your Personal Information for cross‑context behavioral advertising.
Right to Non‑Discrimination
Joyce University will not discriminate against you for exercising your privacy rights.
10. Exercising Your California Privacy Rights
Opt‑Out Requests
You may submit a “Do Not Sell or Share My Personal Information” request by emailing privacy@joyce.edu.
Joyce University also recognizes and honors Global Privacy Control (GPC) signals as opt‑out requests, where applicable.
Submitting Other Requests
You may submit a verifiable consumer request:
- Email: privacy@joyce.edu
11. Authorized Agents
You may designate an authorized agent to submit a request on your behalf. We will require verification of:
- Your identity
- The agent’s identity
- Written authorization (unless the agent holds valid Power of Attorney)
12. Verification Process
To protect your Personal Information, we will verify your identity before responding to certain requests. Information collected during verification is used solely for verification purposes.
13. Responses and Fees
We may deny requests where permitted by law. We may charge a reasonable fee or decline to act on a request if it is excessive, repetitive, or manifestly unfounded, as allowed under the CCPA/CPRA.
Contact Information
For questions about this California Addendum or Joyce University’s privacy practices, please contact us through the methods described above.
Joyce University of Nursing & Health Sciences
1. Scope and Applicability
This Colorado Privacy Addendum (“Colorado Addendum”) supplements the Joyce University of Nursing & Health Sciences Privacy Policy (“Privacy Policy”) and applies solely to Colorado residents acting in an individual or household context, as defined under the Colorado Privacy Act (“CPA”).
If any provision of this Colorado Addendum conflicts with another section of the Privacy Policy, this Colorado Addendum controls for Colorado residents.
Terms used but not defined in this Colorado Addendum have the meanings given under the CPA.
2. Colorado Consumer Privacy Rights
Subject to applicable exceptions, Colorado residents have the following rights with respect to their Personal Data:
Right to Opt Out
You have the right to opt out of the processing of your Personal Data for purposes of:
- Targeted advertising
- The sale of Personal Data
- Profiling in furtherance of decisions that produce legal or similarly significant effects
Right to Access
You have the right to request confirmation of whether Joyce University is processing your Personal Data and to access such Personal Data.
Right to Data Portability
You have the right, up to once per year and free of charge, to receive a copy of the Personal Data you have previously provided to Joyce University in a portable, readily usable format, where technically feasible, that allows you to transmit the data to another entity.
Right to Delete
You have the right to request deletion of certain Personal Data that Joyce University has collected about you, subject to statutory exceptions (including legal, educational, and regulatory obligations).
Right to Correct
You have the right to request correction of inaccuracies in your Personal Data, taking into account the nature of the data and the purposes of processing.
3. Sensitive Data
Due to the nature of its educational, clinical, and regulatory obligations, Joyce University may be required to collect and process Sensitive Data, such as:
- Racial or ethnic origin
- Mental or physical health information
- Citizenship or immigration status
- Biometric information, where applicable
Joyce University processes Sensitive Data only as permitted by law, including to:
- Comply with federal and state education, healthcare, accreditation, and employment laws
- Provide academic programs, student services, and campus safety
- Meet reporting and regulatory requirements
If Joyce University processes Sensitive Data for purposes other than those permitted under the CPA, it will do so only with your affirmative consent or as otherwise authorized by law.
4. Profiling
Joyce University does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers, including decisions related to:
- Admissions or enrollment
- Financial aid eligibility
- Academic standing or discipline
- Access to educational services or programs
5. Sale of Personal Data and Targeted Advertising
Joyce University does not sell Personal Data for monetary consideration.
However, Joyce University may process certain Personal Data (such as online identifiers or device information) to support limited targeted advertising or analytics activities, for example through website analytics or advertising technologies.
Opt‑Out of Targeted Advertising
Colorado residents have the right to opt out of the processing of Personal Data for targeted advertising purposes.
You may exercise this right by submitting an opt‑out request through our designated request mechanism described below.
Joyce University also recognizes Global Privacy Control (GPC) browser signals as a valid opt‑out request, where applicable.
6. How to Exercise Your Colorado Privacy Rights
Submitting a Request
You may submit a request to exercise your Colorado privacy rights through one of the following methods:
- Email: privacy@joyce.edu
7. Authentication and Verification
Once we receive your request, Joyce University will confirm receipt and take reasonable steps to verify your identity before responding, unless the request is an opt‑out request submitted through an automated process.
We may request additional information if necessary to:
- Verify your identity
- Confirm the authenticity of the request
- Verify the identity of the data subject
Personal Data collected during verification is used solely for verification purposes.
8. Authorized Agents and Minors
You may submit a request through an authorized agent acting on your behalf. Joyce University may require:
- Proof of the agent’s authorization
- Verification of your identity directly with Joyce University
A parent or legal guardian may exercise rights on behalf of their minor child in accordance with applicable law.
9. Appeals Process
If Joyce University denies your request, you have the right to appeal the decision within 30 days of receipt of the denial.
You may submit an appeal by:
- Responding directly to the communication denying your request, or
- Emailing: privacy@joyce.edu (or the University’s designated privacy contact)
Joyce University will respond to your appeal within the timeframe required by the CPA.
10. Non‑Discrimination and Fees
Joyce University will not discriminate against you for exercising your rights under the CPA.
If you submit a request more than once within a 12‑month period, Joyce University may charge a reasonable fee or decline to act on the request, as permitted by the CPA.
11. Contact Information If you have questions about this Colorado Addendum or Joyce University’s privacy practices, please contact us using the methods above.
Joyce University of Nursing & Health Sciences
1. Scope and Applicability
This Texas Privacy Addendum (“Texas Addendum”) supplements the Joyce University of Nursing & Health Sciences Privacy Policy (“Privacy Policy”) and applies solely to Texas residents acting in an individual or household context, as defined under the Texas Data Privacy and Security Act (“TDPSA”).
In the event of a conflict between this Texas Addendum and any other section of the Privacy Policy, this Texas Addendum controls for Texas residents.
Terms used but not defined in this Texas Addendum have the meanings given in the TDPSA.
2. Texas Consumer Privacy Rights
Subject to applicable exceptions under the TDPSA, Texas residents have the following rights with respect to their Personal Data:
Right to Access
You have the right to request confirmation of whether Joyce University is processing your Personal Data and to access that Personal Data.
Right to Data Portability
You have the right, up to twice annually and free of charge, to receive a copy of the Personal Data you have provided to Joyce University in a portable, readily usable format, where technically feasible, that allows you to transmit the data to another controller without hindrance.
Right to Delete
You have the right to request deletion of certain Personal Data that Joyce University has collected about you, subject to lawful exceptions (including legal, educational, accreditation, and regulatory obligations).
Right to Correct
You have the right to request correction of inaccurate Personal Data, taking into account the nature of the data and the purposes for which it is processed.
Right to Opt Out
You have the right to opt out of the processing of your Personal Data for purposes of:
- Targeted advertising
- The sale of Personal Data
- Profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you
3. Profiling
Joyce University does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects, including decisions related to:
- Admissions or enrollment
- Financial aid eligibility
- Academic standing, progression, or discipline
- Access to educational programs or student services
4. Sensitive Data
Due to the nature of its educational, clinical, employment, and regulatory obligations, Joyce University may collect and process Sensitive Data, including:
- Racial or ethnic origin
- Mental or physical health information
- Citizenship or immigration status
- Biometric information, where applicable
- Precise geolocation data, where voluntarily provided
Joyce University processes Sensitive Data only as permitted by law, including to:
- Comply with federal and state education, healthcare, accreditation, employment, and licensure requirements
- Provide academic programs, student accommodations, and support services
- Ensure campus safety and institutional security
If Joyce University processes Sensitive Data for purposes not otherwise permitted by the TDPSA, it will do so only with your consent.
Withdrawal of Consent
Where consent is required (for example, if precise geolocation data is voluntarily provided through a mobile application), you may withdraw your consent at any time through:
- The applicable application settings, or
- Your device or browser privacy controls
5. Sale of Personal Data and Targeted Advertising
Joyce University does not sell Personal Data in exchange for monetary consideration.
However, Joyce University may process certain Personal Data (such as online identifiers or device information) to support limited targeted advertising, analytics, or website performance activities, consistent with educational and operational needs.
Opt‑Out of Targeted Advertising
Texas residents may opt out of the processing of Personal Data for targeted advertising purposes.
You may exercise this right using the request mechanisms described below. Joyce University also recognizes Global Privacy Control (GPC) browser signals as a valid opt‑out request, where applicable and technically feasible.
6. How to Exercise Your Texas Privacy Rights
Submitting a Request
You may submit a verifiable consumer request to exercise your TDPSA rights using one of the following methods:
- Email: privacy@joyce.edu
7. Authentication and Verification
Once Joyce University receives your request, we will confirm receipt and take reasonable steps to verify your identity, unless the request is an automated opt‑out request.
We may request additional information to:
- Verify your identity
- Confirm the authenticity of the request
- Verify the identity of the data subject
Personal Data collected for verification purposes is used solely to verify your request.
8. Response Limits and Fees
Joyce University will provide information in response to consumer requests free of charge up to two times per year.
If a request is manifestly unfounded, excessive, or repetitive, Joyce University may:
- Charge a reasonable fee to cover administrative costs, or
- Decline to act on the request, as permitted by the TDPSA
9. Appeals Process
If Joyce University denies your request, you have the right to appeal the decision within30 days of receiving the denial.
You may submit an appeal by:
- Responding directly to the communication denying your request, or
- Contacting us at: privacy@joyce.edu
Joyce University will review and respond to appeals within the timeframe required by the TDPSA.
10. Contact Information
If you have questions about this Texas Addendum or Joyce University’s privacy practices, please contact us using the methods described above.