Your California Privacy Rights
California Consumer Privacy Act/California Privacy Rights Act
The California Consumer Privacy Act (“CCPA”) and as expanded by the California Privacy Rights Act (“CPRA”) provides California residents with rights to receive certain disclosures regarding the collection, use, and sharing of their “Personal Information,” as well as rights to know/access, delete, and limit sharing of Personal Information. The CCPA defines “Personal Information” to mean “information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” Certain information we collect may be exempt from the CCPA because it is considered public information (i.e., it is made available by a government entity) or covered by a specific federal privacy law, such as the Gramm–Leach–Bliley Act, the Health Insurance Portability and Accountability Act, or the Fair Credit Reporting Act. The Personal Information we collect about you will depend upon how you interact with our Sites and the information you voluntarily provide us. Accordingly, we may not collect all of the below information about you. In addition, we may collect and/or use additional types of information after providing notice to you and obtaining your consent to the extent such notice and consent is required by the CCPA.
To the extent that we collect Personal Information that is subject to the CCPA, that information, our practices, and your rights are described below.
NOTICE AT COLLECTION
Categories of CA Personal Information We Collect and Purposes for Collection.
We collect your name, phone number(s), postal address(es), and email address(es) that you provide to us when you enroll in or request information about educational programs or enablement services. For certain programs regulated by the state for the profession, we may collect additional identifiers to verify your identity when taking examinations as required by the state, such as your Social Security number or driver’s license. We use this information to fulfill or meet the reason for which the information was provided to us; provide the services you request; manage payments, fees, and charges; provide you with support and to respond to your inquiries, including to investigate and address your concerns; monitor and improve our responses; provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you; report your attendance, performance, completion data, and proctored testing conditions to state oversight agencies; respond to law enforcement requests; and as required by applicable law, court order, or governmental regulations. We use the information to personalize your website experience to improve and deliver content and product and service offerings relevant to your interests through our website, third-party sites, and via email or text messages. As an education and enablement service provider with consumers from middle school through professional school, we store this information to optimize your experience with us and assist you in achieving your lifetime and career goals. To the extent permitted by law, we retain this information indefinitely as an education provider to meet state regulations for regulated programs. For unregulated programs we retain this information indefinitely to provide lifelong learners information of interest, until we receive a request that it be deleted. We delete any Social Security numbers (except for the last four digits) provided to us on a monthly basis after the state’s reporting requirements have been met and only if the state regulations permit such deletion.
We collect your social media handle and basic account information when you interact with our services through social media. We use this information to improve the user experience and our services. To the extent permitted by law, we retain this information for as long as we maintain an account with the social media platform.
Personal Information Categories Listed in the California Customer Records Statute (Cal. Civ. Code § 1798.80(e)):
In addition to information in the Personal Identifiers section above, our service providers collect your bank account number, credit card number, debit card number, or any other financial information you submit to process payments, fees, charges, billing and collections so that we provide you with information, products or services that you request from us. We may use this information to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. We do not retain this information in our systems. The service provider processes payment only and may not use the information for any other purpose. We may also collect information regarding your education, occupation and language preference to optimize additional products and services that may be of interest to you. To the extent permitted by law, we retain this information indefinitely to provide lifelong learners information of interest and opportunities for development, until we receive a request that it be deleted.
Protected Classification Characteristics Under California or Federal Law:
For certain programs that offer diversity scholarships, we collect race, national origin, gender, gender identity, sexual orientation, and veteran status for the application from California consumers. The information is only used to qualify for the scholarship. To the extent permitted by law, we use this information to process your application and retain it for the length required by the state and accrediting agency.
From sources other than you (such as firms that use public data to make predictions), we may receive age, gender, marital status, occupation, and demographics (any additional email/postal addresses or phone numbers you may have used) to further understand our customers and personalize offerings of products or services. To the extent permitted by law, we retain this information indefinitely to optimize your experience with us and assist you in achieving your lifetime and career goals, until we receive a request that it be deleted.
We may collect information about online activity data, products or services purchased or considered, or other purchasing or consuming histories or tendencies to provide you with information, products, or services that you request from us and to improve them. To the extent permitted by law, we retain this information indefinitely to provide lifelong learners information of interest and opportunities for development, until we receive a request that it be deleted.
Internet or Other Electronic Network Activity Information:
We automatically collect information about your browsing history and your interaction with the content of our Sites or services to measure activity, determine the effectiveness of our services, and improve them. We retain this information indefinitely at a de-identified, aggregate level.
We collect your audio or voice recordings if your program is recorded as part of the delivery of services or randomly when you telephone us for quality assurance and internal review. We retain program recordings for the benefit of other participants in the program, internal research, and quality assurance. We delete the quality assurance recordings after approximately 5 years. We delete program recordings after approximately 7 years.
Inferences Drawn From Other Personal Information:
We collect information from sources other than you to build a consumer profile of your preferences and characteristics to determine how best to serve you over your lifetime, how you may achieve success when using our products, and how we may modify our offerings for the success of others. Some of this information is collected at a household level such as number of children or estimated household income. To the extent permitted by law, we retain this information indefinitely to provide lifelong learners information of interest and opportunities for development, until we receive a request that it be deleted.
Nonpublic Education Information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)):
We collect information in education records (such as attendance, grades, performance, official exam scores, proctoring conditions, communications, and completion data) as a state-authorized education provider or acting on the behalf of an education institution. To the extent permitted by law, we retain this information as an education provider to meet state regulations for regulated programs.
Professional or Employment-Related Information:
We collect information on professional license numbers or membership information, certifications, licenses, or credentials to assess the offerings that may assist you in maintaining your professional certification and to report continuing education to the state oversight agency for the profession. To the extent permitted by law, we retain this information indefinitely to continue to service your continuing education needs.
We may use any of the categories of information listed above for other business or operational purposes compatible with the context in which the Personal Information was collected.
We may share any of the above-listed information with service providers for the limited purpose of our engagement with them as described in the section titled “How We Share Information.” We do not sell information to third parties. We do not knowingly sell CA Personal Information of consumers younger than the age of 16. Service providers are restricted from using Personal Information for any purpose unrelated to our engagement.
Sources of CA Personal Information
We may collect CA Personal Information from the following sources:
Directly from you: such as when you voluntarily provide CA Personal Information to us or our service providers, or affiliate companies, when enrolling in programs, purchasing subscriptions or publications or services or registering for an account on our Sites, or when it is collected automatically from your device;
Third-Party Business Partners: such as joint marketing partners;
Third-Party Applications: such as blogs or chat rooms or social networks;
State Regulatory Authority for the Profession: such as license exam pass data from the oversight agency for the profession;
Data Analytics Firms: such as market research or market intelligence firms, data augmentation, and data aggregators.
Your Privacy Rights
Right to Know About Personal Information Collected, Disclosed, or Sold
Right to Know/Access Information/Correct Inaccurate Personal Information
You have the right to request access to Personal Information collected about you and information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it. Additionally, you have the right to correct inaccurate or incomplete Personal Information. You may submit such a request as described below.
Right to Request Deletion of Information
You have the right to request in certain circumstances that we delete any Personal Information that we have collected directly from you. You may submit such a request as described below. We may have a reason under the law why we do not have to comply with your request, or why we may comply in a more limited way than you anticipated. If we do, we will explain that to you in our response.
Right to Opt Out of Sale of Personal Information to Third Parties
You have the right to opt out of any sale of your Personal Information by Kaplan to third parties at “Do Not Sell or Share My Personal Information.” We do not sell information to third parties. We do not knowingly sell CA Personal Information of consumers younger than the age of 16.
Right to Information Regarding Participation in Data Sharing for Financial Incentives
You have the right to be free from discrimination based on your exercise of your CCPA rights. We do not discriminate against anyone who chooses to exercise their CCPA rights.
How to Exercise Your Rights
You may submit a request to exercise your rights to know/access or delete your Personal Information by completing the online form Submit Privacy Request, or if you prefer to email or phone us, identify the business or Site you interacted with from the list below and then use the associated contact information. If you choose to send an email, please help us locate your data by including information about the website(s) you interacted with when you provide your information and any email address you used to create your account.
Consumer Interaction with Kaplan Test Prep, PMBR, i-Human Patients, Barron’s Educational Series, Manhattan Prep Powered by Kaplan, or Kaplan Medical Prep:
Privacy Request Contact Information
Consumer Interaction with College for Financial Planning-A Kaplan Company, Kaplan Real Estate, Kaplan Financial Education, Kaplan Professional, Kaplan Schweser, PPI- A Kaplan Company, Dearborn Real Estate Education, or Kaplan Solutions:
Privacy Request Contact Information
Consumer Interaction with Projects In Knowledge:
Privacy Request Contact Information
Consumer Interaction with Bluejacketeer Powered by Kaplan:
Privacy Request Contact Information
Consumer Interaction with Kaplan.com:
Privacy Request Contact Information
To protect consumers’ Personal Information, and to comply with the CCPA, we will use a verification process to confirm your identity before we act on your request. If you use an authorized agent to submit a request on your behalf, we may require that you (1) provide the authorized agent written permission to do so and (2) provide us a copy of the authorization or a copy of a power of attorney.
In verifying requests, we employ reasonable measures to detect fraudulent requests and prevent unauthorized access to your Personal Information. To meet our obligations, we are required to verify your identity, and the identity of your authorized agent if the request is submitted via an agent, by associating the information provided in your request to personal information previously collected by us.
If we suspect fraudulent or malicious activity on or from the password-protected account, we may decline a request or request that you provide further verifying information.
You may only make a verifiable consumer request twice within a 12-month period. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify your identity or authority to make the request.
Shine the Light Law
While we do not provide your personal information to third parties for their use in marketing, under California law, California residents have the right to opt out of such use of your Personal Information if it occurred. California residents are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of personal information to third parties for their direct marketing purposes in the preceding calendar year. To obtain this information, please send an email to email@example.com with the phrase “California Privacy Request” in the subject line and in the body of your message.
Rev. June 2023