Data Privacy Policy
Naropa University and its subsidiaries, subcontractors, suppliers, website vendors and affiliated companies (“Naropa” or University”) own and operate a number of Internet domains, including but not limited to, the My.naropa.edu and www.Naropa.edu websites (collectively and individually the “Website”). This statement along with the Website Terms and Conditions which are incorporated herein, describe Naropa’s data privacy policies.
Section 1 - Privacy Statement
Naropa University is committed to protecting the privacy and confidentiality of our community in accordance with applicable state and federal laws. We balance this commitment with the operational necessity of maintaining secure networks, ensuring the safety of our community, and delivering requested educational services. To comply with legal obligations and fulfill user-initiated transactions, authorized University officials may access personally identifiable information (PII) as outlined in this Privacy Policy.
Section 2 - Kinds of Information Collected
Naropa University collects information to provide a personalized experience and fulfill institutional obligations. This data generally falls into three categories:
- Personally Identifiable Information (PII): This includes information that identifies you specifically, such as your name, mailing address, email, phone number, or financial information. PII is typically provided voluntarily when you submit a form, register for an account, or make a payment.
- Technical and Usage Data: We automatically collect certain information when you visit our website, such as your IP address, browser type, device identifiers, and pages viewed. While this data may not directly reveal your identity, it allows us to improve site functionality and understand how users interact with our content.
- Aggregate and De-identified Data: We collect information that does not identify any individual user. This data is used for statistical purposes, such as monitoring website traffic volume and identifying broad geographic trends among our visitors.
Section 3 - Data Collection Methods & Cookies
3.1 Personally Identifiable Information (PII)
You may be asked to provide PII—such as your name, email address, phone number, and financial information—to complete specific transactions, such as event registration, admissions applications, or tuition payments. Naropa collects this information to provide the services you request, facilitate institutional communications, and improve our outreach efforts.
3.2 Automated Technical Collection
When you visit our website, your browser automatically transmits technical data to our servers. This includes your IP address, browser type and version, the referring website URL, the date and time of your visit, and the specific pages or files you access. We use this information to ensure our content is displayed correctly, to analyze site traffic, and to maintain network security.
3.3 Cookies and Tracking Technologies
To enhance site functionality and personalize your journey, we use “cookies”—small text files stored on your device that identify your browser to our servers.
- Session Cookies: These expire when you close your browser and help with site navigation.
- Persistent Cookies: These remain on your device to remember your preferences or recognize you on return visits.
If you provide PII (for example, by submitting a contact form), we may associate that information with the data stored in a cookie to provide a more personalized experience. You may manage your cookie preferences through our website’s consent manager [the popup] or by adjusting your browser settings to refuse or delete cookies. Note that disabling cookies may limit your access to certain website features.
Section 4 - Aggregate and De-Identified Usage Data
Naropa University collects de-identified and aggregate usage data to better understand how visitors interact with our digital environment. This data allows us to identify which resources are most valuable to our community and helps us optimize our website’s content, navigation, and functionality.
We use these insights to tailor the student journey, ensuring that information is relevant and accessible. While this data helps us improve our services, it is processed in a way that does not identify individual users unless they choose to provide Personally Identifiable Information as described in Section 3.
Section 5 - How Information Is Used
Naropa University uses the information we collect for the following primary purposes:
5.1 Service Delivery and Transactions
We use PII to fulfill your requests, process payments, facilitate admissions and enrollment, and provide the specific educational or administrative services you have authorized.
5.2 Institutional Outreach and Personalization
To provide a more relevant experience, we use PII and technical usage data to:
- Communicate with you regarding University programs, events, and news.
- Personalize your website experience based on your interests or “orientations.”
- Analyze the effectiveness of our marketing and recruitment efforts.
- Maintain a record of correspondence (including email and form submissions) to better serve your future needs.
5.3 Operational and Technical Maintenance
We use collected data to monitor network performance, resolve technical issues, audit security protocols, and ensure the ongoing stability of our digital infrastructure.
5.4 Legal Compliance and Safety
Naropa reserves the right to access, preserve, and disclose PII or usage data when required by law or in the good-faith belief that such action is necessary to:
- Comply with legal processes, such as a subpoena or court order.
- Investigate potential violations of University policy or law.
- Protect the safety, rights, or property of Naropa University, its students, faculty, staff, or the public.
- Facilitate institutional research and mandatory state or federal reporting.
Section 6 - Distribution and Disclosure of Information
6.1 No Sale of Data
Naropa University does not sell, rent, or lease your Personally Identifiable Information (PII) to third parties for their independent marketing purposes.
6.2 Service Providers and Partners
We may share PII and usage data with trusted third-party contractors, consultants, and vendors (“Service Providers”) who assist in our operations. These include providers of:
- Admissions and enrollment management systems.
- Digital marketing, lead attribution, and website analytics.
- Payment processing and financial services.
- Technical infrastructure and security monitoring.
These Service Providers are contractually obligated to maintain the confidentiality of your information and are prohibited from using your data for any purpose other than providing services to the University.
6.3 Legal and Compliance Disclosures
Naropa may disclose information to third parties without notice if required to do so by law, or in the good-faith belief that such action is necessary to:
- Comply with a judicial proceeding, court order, or legal process (such as a subpoena).
- Protect and defend the rights or property of the University.
- Investigate or prevent potential fraud, security breaches, or violations of our Terms and Conditions.
6.4 User-Directed Disclosures
We will share your information with third parties when you provide explicit consent or specifically request that we do so (e.g., sending transcripts to another institution or authorizing a third-party application).
6.5 Security Disclaimer
While we employ industry-standard security measures to protect your data, no transmission over the Internet or electronic storage method is 100% secure. Consequently, while we strive to protect your PII, Naropa cannot guarantee its absolute security.
Section 7 - External Links and Third-Party Websites
This Privacy Policy applies exclusively to information collected by Naropa University through our owned and operated digital domains. Our website may contain links to external sites, platforms, or services provided by third parties for your convenience and information.
Naropa University does not exercise control over the privacy practices, content, or data collection policies of these external websites. We encourage users to be aware when they leave our site and to read the privacy statements of every website that collects personally identifiable information. Your interactions with any third-party website are governed by that site’s own policies and terms of use.
Section 8 - Reviewing and Updating Your Information
Naropa University strives to maintain the accuracy of the information we collect. You have the right to review, update, or request the deletion of your Personally Identifiable Information (PII) held by the University, subject to legal and institutional record-retention requirements.
- Current & Former Students: To review or update your official academic records, please contact the Office of the Registrar at registration@naropa.edu.
- Prospective Students & Applicants: To update your contact preferences or request removal from marketing communications, please use the “unsubscribe” link provided in our emails or contact the Office of Admissions at admissions@naropa.edu.
- General Inquiries: For all other privacy-related requests or to exercise your data rights, please contact websupport@naropa.edu or the department to which you originally provided the information.
Section 9 - Family Educational Rights and Privacy Act (FERPA)
In addition to the protections outlined in this Privacy Policy, Naropa University complies with the Family Educational Rights and Privacy Act (FERPA), which affords students specific rights regarding their education records. These include:
- 9.1 Right to Inspect: The right to inspect and review your education records within 45 days of the University receiving a formal request.
- 9.2 Right to Amend: The right to request an amendment to records you believe are inaccurate, misleading, or in violation of your privacy rights.
- 9.3 Right to Consent: The right to provide written consent before the University discloses PII from your education records, except in cases where FERPA authorizes disclosure without consent (such as to “school officials” with legitimate educational interests).
- 9.4 Directory Information: The right to restrict the disclosure of “Directory Information.” Unless a student formally requests a non-disclosure hold, Naropa may release directory information (e.g., name, dates of attendance, degrees honored) at its discretion.
- 9.5 Right to File a Complaint: The right to file a complaint with the U.S. Department of Education regarding alleged failures by the University to comply with FERPA requirements.
For detailed instructions on exercising these rights, please refer to the full Naropa University FERPA Policy or contact the Office of the Registrar.
Section 10 - Policy Updates and Notifications
Naropa University reserves the right to modify or update this Privacy Policy at any time to reflect changes in our institutional practices, website functionality, or legal obligations.
When material changes are made, we will provide notice by updating the “Effective Date” at the top of this policy and, where appropriate, placing a prominent notice on our website or within our cookie consent manager. We may also send service alerts, registration confirmations, or administrative messages to inform you of specific changes that impact your use of our digital services.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting the information we collect. Your continued use of the Website after any changes constitutes your acceptance of the updated policy.
Section 11 - SMS Terms of Service
11.1 SMS Communications and Consent
Naropa University uses SMS text messaging for two distinct purposes:
- Emergency Notifications: Automated alerts regarding campus safety, weather closures, or urgent health and safety information. Participation is highly encouraged for all community members to ensure timely communication during a crisis.
- Institutional Outreach: Recurring automated promotional and personalized messages regarding admissions, enrollment milestones, academic alerts, and campus events. By providing your mobile number and opting in, you consent to receive these messages. Consent is not a condition of enrollment or purchase.
11.2 Opting Out
You may cancel the Institutional Outreach SMS service at any time by texting STOP to our short code. After you send “STOP,” we will send a one-time SMS to confirm your request.
Note: Opting out of marketing or recruitment texts may not automatically remove you from the University’s Emergency Alert System, which is managed separately to ensure campus safety compliance.
11.3 Support and Assistance
If you experience issues with our messaging program, reply with the keyword HELP for assistance, or contact us directly at admissionsupport@naropa.edu or 1-800-772-6951.
11.4 Carrier and Rate Information
Standard message and data rates may apply. Message frequency varies based on user interaction; typically, subscribers receive between 5–15 messages per month. Mobile carriers are not liable for delayed or undelivered messages.
Section 12 - International Data Protection (GDPR)
12.1 Scope and Applicability
This section applies to personal data collected or processed by Naropa University from individuals (“Data Subjects”) located within the European Economic Area (EEA), United Kingdom (UK), or Switzerland at the time of collection, regardless of citizenship status.
12.2 Lawful Basis for Processing
Under the General Data Protection Regulation (GDPR) and similar frameworks, Naropa must have a lawful basis to process your data. We primarily rely on the following:
- Legitimate Interests: To facilitate recruitment, manage alumni relations, and improve our website experience.
- Contractual Necessity: To process applications for admission, manage enrollment, and deliver educational services.
Legal Obligation: To comply with mandatory state/federal reporting or law enforcement requests.
Consent: For specific actions where you have given clear permission (e.g., subscribing to a specific newsletter).
12.3 Data Subject Rights
If you are covered by this section, you have the following rights:
- Access and Rectification: To receive a copy of your data and correct any inaccuracies.
- Erasure and Restriction: To request that we “forget” your data or limit its processing, subject to institutional record-retention requirements.
- Data Portability: To receive your data in a structured, machine-readable format.
- Right to Object: To object to processing based on legitimate interests or for direct marketing purposes.
- Withdrawal of Consent: To withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Automated Decision-Making: The right not to be subject to a decision based solely on automated processing (profiling) that produces legal effects, unless necessary for a contract or based on your explicit consent.
12.4 International Data Transfers
By using our Website, you acknowledge that your personal data will be transferred to and processed in the United States, where data protection laws may differ from those in your home jurisdiction.
12.5 Exercising Your Rights
To exercise any of these rights, or to file a complaint with a supervisory authority, please contact our data privacy coordinator at privacy@naropa.edu.
Section 13 - Consent and Acceptance
By accessing and using this Website, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its terms, as well as the University’s overall Terms of Use.
If you do not agree with any part of this Privacy Policy, please discontinue your use of the Website immediately and do not provide any Personally Identifiable Information. Your continued use of the Website following the posting of changes to this policy will be deemed your electronic acceptance of those changes.
Section 14 - Contact Information & Effective Date
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us through one of the following channels:
Email: privacy@naropa.edu
Phone: (303) 444-0202
Mailing Address: > Naropa University
Attn: Data Privacy Coordinator / Web Manager
2130 Arapahoe Avenue
Boulder, CO 80302
Effective Date: March 19, 2026