Website Privacy Policy

St. John Fisher University (the "University," "we," "our," "us") is committed to protecting the privacy and security of the data of its students, faculty, staff, alumni, and website visitors. We want you to understand how we collect and use information from our website so you can interact with us with confidence.

This Privacy Policy applies to www.sjf.edu, and other websites that we own or control and link or refer to (collectively, the "Sites"). If you have any questions about what pages are covered by this Privacy Policy, please email webmaster@sjf.edu.

By using the Sites, you accept and agree to the practices this Privacy Policy describes.

Information We Collect and Process

When you use our Sites, you may provide and we may collect and process the following types of information from you:

Personal Information:

"Personal Information" is any information that we can reasonably use to directly or indirectly identify you, including your name, address, or email address. If you are located in the European Economic Area (EEA) or the United Kingdom (UK), Personal Information includes all Personal Data as defined under EEA and UK data protection laws. We collect the following Personal Information when you provide it to us:

  • Identification information, such as your first name, last name, demographic information, other relevant biographic information, postal address, email address, phone number, any other relevant contact details, University unique ID, user account(s) on our Sites (including login), and passport number.
  • Information related to your application, such as information related to your application for admission (including your educational history, personal statements, reference letters, any other relevant information provided in your application), and information related to your visa application.
  • Information related to your student life, such as your courses, programs and training (including online/hybrid courses, programs and training), housing and/or dining status, travels through the University’s programs, and alumni status.
  • Financial and banking information, such as your salary history, tax forms, any relevant financial information to evaluate and determine your eligibility for financial aid opportunities, and payment information.
  • Information related to your donation, such as the amount of your donation, affiliation to the University, giving history, and legal documentation related to your donation.
  • Information related to your exchanges with the University, such as date, hour, and subject of your request, exchanges with the University’s services, and preferred means of communication.

Information Received from Third Parties:

We collect your Personal Information from third parties, including other schools, references, family members, and education partners (e.g., The Common Application Inc., Law School Admissions Council, The College Board) where authorized by the data protection laws.

In compliance with the data protection laws, we may collect information about you from other companies and organizations, including public databases, social media platforms, our third-party marketing partners, or various independent organizations. For example, we may collect public information about you when you interact with us through social media.

Automatically Collected Personal Information:

Whenever you visit or interact with our Sites, we may use a variety of technologies that automatically or passively collect information about your online activity. This information may be collected in the following ways:

  • Through your browser: Certain information is collected by most browsers, such as your IP address and Internet browser type and version. Your "IP address" is a number that is automatically assigned to the computer that you are using by your Internet Service Provider (ISP). An IP Address is identified and logged automatically whenever a user visits the Sites, and can identify your location, along with the time of the visit and the page(s) that were visited. We use IP addresses for purposes such as calculating Sites' usage levels, helping diagnose server problems, administering the Sites, and presenting content that is tailored to your country.
  • Through Cookies: Cookies allow a web server to transfer data to a computer for recordkeeping and other purposes. We use cookies and other similar technologies to, among other things, better serve you with more tailored information and to facilitate your ongoing access to and use of the Sites. If you do not want your information collected by cookies and other similar technologies, please see below. Some features of the Sites may not work properly if you decline the use of cookies and other similar technologies.
  • Through pixel tags, web beacons, clear GIFs, or other similar technologies: These may be used in connection with some Site pages and HTML-formatted email messages to, among other things, track the actions of Site users and email recipients, and compile statistics about Site usage and response rates.

We strive to provide you with choices regarding the Personal Information you provide to us. We have created mechanisms to provide you with the following control over your information:

  • Tracking Technologies and Advertising. Most browsers accept cookies automatically. You may be able to set your browser to refuse all or some browser cookies, or to alert you when cookies are being set. For instructions, check your browser's technical "help" information. If you disable or refuse cookies, please note that some parts of this Site may then be inaccessible or not function properly.  Please note that cookie-based opt-outs must be performed on each device and browser that you wish to have opted out.
  • Disclosure of Your Information for Third-Party Advertising. If you do not want us to share your Personal Information with unaffiliated or non-agent third parties for promotional purposes, you may email us at webmaster@sjf.edu.
  • Targeted or Interest-Based Advertising. We may work with third-party advertising companies that collect and use information about your online activities across websites over time, in order to deliver more relevant advertising when you are visiting the Sites and elsewhere on the Internet. This practice is known as interest-based advertising. The online advertising industry also provides websites from which you may opt-out of receiving targeted ads from our advertising partners that participate in self-regulatory programs. You can access these, and also learn more about targeted advertising and consumer choice and privacy at: www.networkadvertising.org, www.youronlinechoices.eu, or www.youradchoices.ca, and www.aboutads.info/choices. You can also opt-out of targeted advertising directly on the advertising platform by visiting www.facebook.com/settings/?tab=ads, www.google.com/settings/ads/anonymous, and advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads. Note that electing to opt-out will not stop advertising from appearing in your browser or applications. It may make the ads you see less relevant to your interests. If you delete, block, or otherwise restrict cookies or use a different computer or Internet browser, you may need to renew your opt-out choice.
  • Google Analytics. We may use Google Analytics to improve our Sites functions.  You can choose not to be included in Google Analytics by visiting: tools.google.com/dlpage/gaoptout.

Sensitive Personal Information:

"Sensitive Personal Information" includes special categories of Personal Information (e.g., racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health, and data concerning a natural person's sex life or sexual orientation) for which the applicable data protection laws provide enhanced protections.

In compliance with the applicable data protection laws, we may collect Sensitive Personal Information such as race/ethnicity, and certain financial information when you provide it to us for purposes described above, including as part of your application package for graduate or undergraduate admissions or financial aid opportunities. We do not sell or use your Sensitive Personal Information for targeted marketing purposes, and only use your Sensitive Personal Information as permitted by the applicable data protection laws.

Use of Your Information and Legal Basis for Processing

We use the information we collect from you primarily to enable us to provide our information to you in the best possible manner. All processing and use of your Personal Information is justified by a "legal basis" for processing. In most cases, processing will rely on one of the following legal bases:

  • Contract performance to create and manage any account(s) on our Sites; to manage your admission if your application is successful; to manage your student record and your education at the University; to provide you with the services offered by the University (e.g. housing and dining services, wellness program, IT or helpdesk services, events organized by the University or its partners) and to manage any payment related to such services; and to manage the donations.
  • Legal obligation to process your visa application where required for employment or travel; to comply with legal, regulatory and jurisdictional obligations to which the University is subject; and to process your request when you exercise your rights in accordance with the data protection laws that apply to you.
  • Legitimate interests to evaluate your candidacy for admissions and visa (where relevant); conduct internal analyses and collect statistics (with your consent where required); evaluate financial aid eligibility; facilitate provisioning, administration, instruction and quality improvement of educational platform use, courses, learning and teaching; inform registrants about research opportunities; inform the University community about wellness programs, courses, activities and facilitating enrollment to such programs; provide information and processing applications for employment opportunities; if you are a current University student, to distribute brochures, newsletters and other requested communications; manage the alumni network; personalize your user experience on our Sites (with your consent when required), to improve our Sites, their services and your user experience; ensure the security of our Sites; and manage any pre-litigation and litigation.
  • Consent to send you any University newsletters and any other electronic communications that might interest you where your consent is required for such communication; and process your Personal Information if the data protection laws that apply to you expressly require your consent for such processing, including the processing of the Sensitive Personal Information.

Personal Information you submit through our Sites, such as your name, address, and other contact information, may be collected by the University for internal marketing and development purposes as well as to respond to your inquiry, complete a transaction for you, or fulfill other forms of customer service. Where required by applicable data protection laws, we will obtain your consent prior to sending you marketing communications. You can choose not to receive marketing emails from us by “unsubscribing” using the instructions in any marketing email you receive from us.

Security

We use commercially suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect on our Sites. These procedures include, but are not limited to, firewalls, encryption, intrusion detection, and Site monitoring. We also limit access to any Personal Information we receive to employees who need access to that information in order to do their jobs. However, no data protection procedures are entirely infallible. As a result, while we strive to protect your Personal Information, we cannot guarantee that it will be 100% secure. Your transmission of your data to our Sites thus is done entirely at your own risk.

Sharing Your Information

Trusted Third Parties

We may share your personal information with trusted third parties (including advertising networks) or our affiliates to:

  • Assist us in providing information about the University to you, including by acting on our behalf to send postal mail and email, remove repetitive information from lists, analyze data, provide marketing assistance, process credit card payments, and provide customer assistance;
  • Compile statistics and reports regarding our audience and the users of our Sites;
  • Fulfil the purpose for which you provide it; and
  • Assess a restructuring, reconstitution, acquisition, debt financing, merger, sale of assets of the University or a similar transaction, as well as in case of insolvency, bankruptcy or receivership where Personal Information is transferred to one or more third parties as assets of the University.

Such third parties have access to Personal Information as needed to perform their functions, but they are not allowed to use it for other purposes. We do not sell or rent Personal Information collected through our Site to anyone.

When you provide us with Personal Information we also may use and share your Personal Information to contact you, including via email, to thank you for providing your request, to conduct satisfaction surveys, or for other administrative purposes related to your request.

Other Circumstances

We may share your Personal Information with lawyers and all interested parties, but exclusively in the case of the management of possible disputes and other legal matters where appropriate. We may also disclose your Personal Information to third parties if we have a good faith belief that disclosure is necessary to:

  • Enforce any agreement, including any applicable terms of service;
  • Establish or exercise our right to defend against legal claims;
  • Comply with applicable laws, regulations, legal process (such as a subpoena), or enforceable government request; and
  • Protect against harm to the rights, property, or safety of the University, our users, or the public as required or permitted by law.

Third Party Websites and Social Media Features

Our Sites may contain links to other websites, including those of third parties or business partners. While we seek to link only to websites that share our high standards and respect for privacy, we cannot be responsible for the privacy practices other websites use. By accessing other third party websites or applications through our Sites, you are consenting to the terms and privacy policies of those websites. It is possible that other parties may collect Personal Information about your online activities over time and across different websites when you use our Sites. If you have questions about what links are official pages of our Sites, please contact webmaster@sjf.edu.

Donations

We are extremely grateful of any donations. When you visit the "Support Fisher" page on our Sites, you will be taken to a website of a third-party Service Provider. This Service Provider will collect your first and last name, zip code, postal address, email address, donation amount, billing information, and payment card information. Please refer to the privacy policy of the Service Provider to learn more about the use of your Personal Information.

International Visitors and the Privacy Shield

Personal Information that you provide to us may be transferred and stored in countries other than your home country such as the United States (U.S.), where applicable data protection laws may differ from those of your home country. By providing us with your information you acknowledge that your information will be transferred to the U.S. and processed and stored on servers in the U.S. Your Personal Information may also be processed by employees or by other third parties who work for us, or by the representatives and employees of the University located outside your home country.

If we transfer your Personal Information to third parties located in other countries, we will only do so if the third party offers an adequate level of protection under the data protection laws that apply to you and by implementing the appropriate safeguards where required.

In addition, we take all reasonable steps to protect your privacy in accordance with the applicable data protection laws.

We only share your Personal Information with third parties who adequately implement appropriate technical and organizational measures and who guarantee the protection of your rights as required under the laws that apply to you.

If you live in the EEA, UK, Australia, Brazil or China, if we transfer your Personal Information out of your respective area, and that area has not been deemed to provide an adequate level of protection for Personal Information, we will ensure the appropriate safeguards are implemented such as using standard contractual clauses or contracts approved by the data protection laws or the relevant authorities which gives Personal Information the same protection it has in your home country or ensure there is some other protections in place which has been approved by the law giving Personal Information the same protection it has in your home country.

Individual Privacy Rights

Under certain circumstances and depending on your country or state of residence, you may have rights under the data protection laws that apply to you in relation to your Personal Information. You have the right to:

  • Know what Personal Information we have;
  • Receive a copy (access) your Personal Information;
  • Modify or update Your Personal Information;
  • Delete your Personal Information;
  • Object to or request to restrict processing of your Personal Information;
  • Request that we transfer your Personal Information to you or a third party;
  • Opt-out of marketing;
  • Not be subject to decisions based solely on automated processing;
  • Withdraw any consent you have previously given.

If needed, you have a right to file a complaint related to our Personal Information practices or file a complaint to your country’s supervisory authority if you believe we have not processed your Personal Information in compliance with the data protection laws and principles that apply in your home country.

We do not discriminate against people who exercise their privacy rights.

Making a Request:

If you wish to contact us in connection with the exercise of your rights listed above, please email us at webmaster@sjf.edu. Please include your name, address, email, phone number, and the specific type of request you would like to make (a request to know, erase, opt-out, etc.). 

We will respond to your written request without unreasonable delay and in accordance with any deadlines imposed by the data protection laws that apply to you and without making our other data less secure or changing our data.

Unless specific circumstances apply, we will not charge you any fee in connection with the exercise of your rights. If we are not able to honor any part of your request, we will notify you in our response as well as the reason we cannot do so.

To protect you and your information, we may ask you to confirm certain information before we honor your request. For example, where permitted by the data protection laws, we will ask you to confirm your name, email address, and phone number to verify your identity, so that we can help protect your information.

Minors

Our Sites are not intended for children under 13 years of age. We do not knowingly collect Personal Information from children under 13. If you are under 13, do not use or provide any information on the Sites. If we learn we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13 without verifiable parental consent, please contact us at webmaster@sjf.edu.

Additional Resources

Students, faculty and staff may visit the Policies section on the University intranet "mySJF" for additional information on St. John Fisher University's data protection and management practices. You may also email us at webmaster@sjf.edu to learn more.

Privacy Policy Updates

This Privacy Policy was last updated in May 2025.

We update the Privacy Policy from time to time, so please review it regularly. If we materially change our Privacy Policy, we will notify you by contacting you through your user account email address or by posting a notice on our Sites. Your continued use of the Sites will be deemed your agreement that your information may be used in accordance with the new policy. If you do not agree with the changes, then you should stop using the Sites and notify us that you do not want your information used in accordance with the changes.

Contacting Us

We welcome any questions, comments, or complaints you may have regarding this Privacy Policy. Please do not hesitate to contact us by email at webmaster@sjf.edu or by writing to:

St. John Fisher University
Office of Marketing and Communications
3690 East Avenue
Rochester, NY 14618