Last Modified: June 10, 2022
Quick Guide to Contents
- Collection of Information
- How We Use Your Information
- How We Disclose Your Information
- Information Security and Data Retention
- Accessing and Managing Your Personal Information
- Additional Information
- Notice for California Consumers
Collection of Information
Information You Provide
edX collects information from you when you choose to provide it to us. For example, we collect your information when you submit a webform requesting information about edX-powered boot camp Programs, or otherwise contact us or provide information to us through the Website. The information we collect may include personal information – such as your name, address, email address, telephone number, prior educational background information, work experience, and the content of any communications that we exchange – as well as non-personal information when you:
- indicate an interest in a Program or forming an enterprise partnership with Trilogy (you may unsubscribe from promotional emails by clicking “unsubscribe” on the emails you receive from us);
- create an account;
- attend a webinar;
- register or apply for the Program, either directly with us, through your employer, or through some other means;
- make a payment;
- participate in our surveys, promotions, and competitions;
- sign up for a newsletter;
- communicate with us, for example by submitting queries regarding the Website or a Program; and
- use the Website.
In some cases, we require your personal information in order to perform a contract or to comply with a legal obligation.
Information Automatically Collected
Tracking Options and Do Not Track Disclosures
Information Collected from Other Sources
Where permitted by law, we collect or receive information about you from the Education Institution, your employer, companies to which you indicate that you would like to learn more about a Program, companies that are our partners, companies to which you’ve provided your information for professional or continuing education opportunities, employers or potential employers, edX‘s parent company, 2U, Inc., or other entities within the 2U family of companies (collectively “Other Sources”) in order to update or supplement the information that you provide or that we collect automatically, as described above in Information Automatically Collected. We use this information to help us maintain the accuracy of the information we collect, to target our communications so that we can inform you of products, services or other offers that may be of interest to you, and for internal business analysis or other business purposes. Personal information is collected from Other Sources with consent of the data subject where such consent is required or, otherwise, for the purposes of our legitimate interests, as further described in How We Use Your Information.
Our Combination of Your Information
We combine the information we receive from and about you via the Website and from Other Sources to help us tailor our communications to you and to improve the Website.
Failure to Provide Personal Information
Failure to provide certain information may make it difficult or impossible for you to access some services through the Website. You should ensure that personal information submitted to us is accurate and up-to-date. For example, we need a current email address to communicate with you about a Program.
We do not direct the Website to, nor do we knowingly collect any personal information via the Website from, children under the age of 16.
How We Use Your Information
Purposes for Collecting and Processing Personal Information
We process personal information under the following legal bases:
- To fulfill a contract or take steps linked to a contract, including:
- providing our services;
- verifying your identity;
- taking payments; and
- communicating with you.
- To conduct edX‘s business and pursue our legitimate interests in marketing our business, ensuring that we conduct our business in line with our objectives, improving and developing our products and services, and keeping our records accurate and up to date. This includes:
- using your information to provide products and services you have requested and responding to any comments or complaints you may send us;
- personalizing your experience with the Website and helping us to better respond to your individual needs;
- targeting advertising to individuals with similar interests or characteristics through services offered by third parties;
- developing new products or services or conducting analyses to enhance current products and services;
- reviewing the usage and operations of the Website and analyzing and improving the Website (we continually strive to improve the Website based on the information and feedback we receive from you);
- contacting you for legitimate business purposes;
- using personal information to invite individuals to take part in market research;
- where consent is not required by applicable law, for direct marketing purposes;
- protecting the security and functionality of the Website, including using personal information you provide to investigate any complaints received from you or from others about the Website or our products and services.
- Where you give us consent. This includes:
- where consent is required by applicable law, sending you direct marketing in relation to our relevant products and services, or other products and services provided by edX, edX‘s parent company, 2U, Inc., and the 2U family of companies;
- on other occasions where we ask you for consent, using the data for the purpose which we explain at that time.
- For purposes which are required by law. This includes:
- in response to requests by government or law enforcement authorities conducting an investigation;
- using personal information in connection with legal claims, compliance, regulatory and investigative purposes as necessary, including disclosure of such information in connection with legal process or litigation.
Processing Information at the Direction of the Education Institution
In some instances, edX may collect and process your personal information at the direction of the Education Institution.
Use of De-identified, Aggregate or Anonymized Information
How We Disclose Your Information
edX shares your information with other entities or individuals in the following limited circumstances:
- The 2U Family of Companies: Where you have expressed interest or given your consent, we share your information with 2U, Inc, and the 2U family of companies to provide you with information about other educational programs.
- Service Providers: We share your information with third parties that provide business, professional, or technical support functions for us. In particular, we use third-party providers for website hosting, maintenance, marketing services, courier services, certification services, business operations, payment services, and identity verification services (“Service Providers”). These Service Providers are only given access to your information to the extent necessary to process your information and/or provide services to edX, and they are prohibited from using or sharing your information for any other purposes. Where permitted by law, edX discloses limited information about you to Service Providers to serve relevant advertising on third party platforms to you or to other audiences.
- Your Employer or Sponsor: We share your information with your employer or sponsor, in the event that such third party is paying for your Program. Information disclosed in this case shall include Program performance information, unless otherwise expressly agreed in writing with edX.
- Potential Employers: Where you choose to work with our career services team, we will share your information with potential employers. Information disclosed in this case shall include your resume, employer-ready materials that you prepare (e.g., your portfolio), your LinkedIn profile, or other information that you make available to edX.
- Legal Matters; Safety: We access or share your information to satisfy any applicable law, regulation, legal process, or governmental request; in connection with an investigation on matters related to public safety; as permitted by law; or otherwise as required by law. We may disclose your information to protect the security of a Program, the Website, servers, network systems, and databases. We may also disclose your information, as necessary, if we believe that there has been a violation of our Boot Camp Terms (including investigation of potential violations thereof), any other legal document or contract related to the Website, or the rights of any third party.
- Fraud; Security: We access and disclose your information to detect, prevent, or otherwise address fraud, security or other technical issues.
- Consent; Other: We share information with third parties when we have your consent or otherwise as described to you at the point of collection.
- International Transfers: We transfer personal information from the European Economic Area (“EEA”) to other countries, including the United Kingdom, United States and South Africa. Where information is transferred outside the EEA to a third party in a country that is not subject to an adequacy decision by the EU Commission, data is adequately protected by Standard Contractual Clauses or a Service Provider’s Binding Corporate Rules. A copy of the relevant mechanism can be provided for your review on request to firstname.lastname@example.org.
Information Security and Data Retention
We are committed to protecting the security of your information. We maintain what we believe to be appropriate physical, electronic, and managerial procedures to safeguard and secure your information and to prevent unauthorized access, maintain accuracy, and ensure appropriate use of your information. The accuracy, safety, and security of your information also depend on you. Where we have given you – or where you have chosen – a password for access to any parts of the Website, you are responsible for keeping this password confidential. We ask that you not share your password with anyone. Even though we do our best to protect your information, the transmission of information via the internet is not completely secure, and we cannot guarantee our security measures. We are not responsible for any unauthorized access to or acquisition of your information.
We retain your personal information for as long as we have a relationship with you. We also may retain your personal information for longer period of time which enables us to:
- Maintain business records for analysis and/or audit purposes;
- Comply with record retention requirements under the law;
- Defend or bring any existing or potential legal claims;
- Address any complaints regarding the services;
- Enforce our commercial agreements; and
Accessing and Managing Your Personal Information
If you have created a profile or are enrolled in a Program, you may access your personal information through your user profile.
In some instances, you may be eligible to (a) ask us for a copy of your personal information; (b) correct, delete, or restrict processing of your personal information; and/or (c) obtain the personal information you provide to us in a structured, machine readable format. In addition, you may have the right under applicable law to object to the processing of your personal information in some circumstances.
Your rights regarding your personal information may be limited, for example, if fulfilling your request would reveal personal information about another person or would infringe the rights of a third party (including our rights), or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. We will inform you of the relevant exemption upon which we rely when responding to any request you make.
Our use of certain personal information is necessary for us to provide information to you about a Program or to provide services to you through the Website or otherwise. If you choose not to provide this personal information or request that edX delete or restrict the processing of this personal information, you may not be able to participate in a Program, and we may not be able to provide you with other services, including those provided through the Website or advertised about a Program.
If you wish to access or delete your information as described in this section, please fill out edX‘s Data Request Form. If you believe your rights regarding your personal information have been infringed upon, please contact us email@example.com. For individuals located in EEA, South Africa, Switzerland, or the United Kingdom who have unresolved concerns, you also have a right to lodge a complaint with your applicable Data Protection Authority.
You may have specific rights relating to the disclosure of any personal information that you provide to us and/or education records that we may create about you under the Family Education Rights & Privacy Act (“FERPA”). You also may have specific rights under FERPA related to accessing and/or updating your personal information. Certain information may be excluded from education records made available for inspection, within the bounds of the law and our confidentiality undertakings with third parties. You may also request amendment of education records that you believe are inaccurate, misleading or in violation of your rights. If you would like to inspect and review your education records pursuant to FERPA, you may submit a request to the Education Institution’s FERPA office. Any FERPA-protected information will be processed by edX at the direction of the Education Institution and will not be used for targeted advertising.
NOTICE FOR CALIFORNIA CONSUMERS
Categories of Personal Information that We Collect and Disclose
As required by the California Consumer Privacy Act (“CCPA”), below are the categories of personal information about California consumers that edX collects and discloses for a business purpose.
We collect and disclose for a business purpose the following categories of personal information:
- Contact Information and Identifiers, including real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, phone number, account name, or other similar identifiers.
- Customer Records, including paper and electronic customer records containing personal information, such as name, signature, address, telephone number, physical characteristics (profile photograph), education, employment, employment history, financial information relevant to your payments, or medical information relevant to your participation in the Program.
- Commercial Information, including records of products and services purchased and purchasing history.
- Usage Data, including internet or other electronic network activity information, such as information about how you interact with our services or advertisements.
- Audio, electronic, visual, thermal, olfactory or similar information, including voice recordings when you call us.
- Employment History, including professional or employment-related information.
- Education Information, including information about education history or background.
- Protected Classifications, characteristics of protected classifications under California or federal law such as race, color, sex, age, religion, national origin, disability and citizenship status.
- Inferences drawn from any of the information identified above reflecting your preferences and characteristics.
Categories of Sources of Personal Information
The categories of sources of personal information we collect are described in the section Collection of Information above.
Purposes for Collecting Personal Information
We collect the personal information identified above to communicate with you, for advertising and marketing purposes, to provide and improve our services, and other purposes set forth in How We Use Your Information above.
Categories of Third Parties with Which Personal Information is Shared
We share the categories of personal information identified above with the following categories of third parties:
- The Education Institution (all categories of personal information),
- Third-party providers that serve business, professional or technical support functions (all categories of personal information),
- edX‘s parent company 2U, Inc., and the 2U family of companies (all categories of personal information),
- Your Employer (Contact Information and Identifiers, Customer Records, Employment History, Education Information),
- Potential Employers (Contact Information and Identifiers, Customer Records, Employment History, Education Information), or
- Third parties for legal matters or safety purposes (all categories of personal information).
In some cases, we share Identifiers and Usage Data with business partners in order to deliver ads that are more relevant to you and to measure and report on the effectiveness of our advertising campaigns. Under the CCPA, some of this data sharing may be broadly considered a “sale” of information, even though these activities do not fit what most people would understand “sale” to mean. Except for this type of sharing, we do not sell your information. To opt out of the sale of your personal information, please visit edX‘s Do Not Sell My Information page, which you can find in the footer of the Website.
California Consumer Rights
California law gives California consumers the right to make the following requests:
- The right to opt-out of sale of your personal information.
- The right to request a copy of the personal information that we have collected about you in the prior 12 months.
- The right to request deletion of the personal information that we have collected from you, subject to certain exemptions (for example, where the information is used by us to detect security incidents, debugging or to comply with a legal obligation).
- The right to request more details about the personal information we collect and how and why we use and share it, including the categories of personal information we have collected about you, the categories of sources for personal information we collect, the business or commercial purposes for collecting personal information, and the categories of third parties with which we share personal information.
You can submit a copy, deletion, or right-to-know request online by filling out edX‘s Data Request Form or by contacting us at 1-888-213-3391. To opt out of the sale of your personal information, please visit edX‘s Do Not Sell My Information page, which you can find in the footer of the Website.
You have the right not to receive discriminatory treatment for the exercise of your CCPA privacy rights, subject to certain limitations. We do not discriminate if you exercise your rights under the CCPA.
California’s Shine the Light Law. If you are a California resident and do not want edX to disclose your information to third parties (including to affiliates within the 2U family of companies or Education Institutions) for their direct market marketing purposes, you may opt out here.
Public Forums; Publicly Available Content
Any information you may disclose through the Website on message boards, in chat rooms, or on other public areas, such as on webinars that you may attend about a Program, may be viewed by others, including your classmates and learning facilitators. Please exercise caution when disclosing personal information in these public areas. If you do not want edX to store metadata associated with your content, please remove the metadata before uploading your content.
Under Article 27 of the General Data Protection Regulation, the representative within the European Union for Trilogy data controllers not established in the European Union is 2U (UK) LTD C/o Skadden, Arps, Slate, Meagher & Flom (UK) LLP 40 Bank Street, Canary Wharf, London, United Kingdom, E14 5DS, +44 20 3457 5774, privacy@2U.com.
To make a request to delete or access personal data, or for more information about the personal data edX has about you, use edX‘s Data Request Form.