Privacy Policy

1. Scope of This Policy

This policy covers Campus websites and services that link to it, enrollment, course participation, completion records, Certificates of Completion, and Campus-managed digital resources.

Separate housing, ministry, healthcare, employment, or partner programs may have their own notices. Participating in a Campus course does not automatically authorize unrelated programs to access your information. Third-party platforms may also process information independently under their own notices.

2. Information We Collect

Depending on the service you use, information may include:

• Identity and contact details: Name, email address, phone number, mailing address, username, and information reasonably needed to confirm your identity or eligibility.
• Enrollment and course records: Courses, enrollment dates, attendance, progress, assignments, assessments, practical-activity records, completion dates, certificate identifiers, and certificate status.
• Transactions: Amount paid, payment and refund status, billing contact information, order identifiers, and limited payment-method details supplied by a processor.
• Communications and submissions: Support requests, forms, surveys, course discussions, assignments, and other content you submit.
• Technical information: IP address, browser and device information, login activity, access times, pages viewed, session data, and cookie or similar identifiers.

Payment-card credentials entered directly into a payment processor are handled by that processor. The Campus does not intentionally store full card numbers or security codes through ordinary course purchasing.

“Course records” describes information kept for Campus education. That description does not by itself establish coverage under FERPA or another education-privacy law; any law that applies governs our handling of those records.

3. Sources & Uses of Information

We collect information from you, your interactions with courses and websites, service providers, and authorized partners. Information from another program or organization is used only for an appropriate disclosed purpose and with any required authorization.

We use information to:

• Administer accounts, eligibility, enrollment, courses, and learning resources.
• Evaluate required work, document completion, issue certificates, and verify retained completion records.
• Process payments and refunds, provide support, and send necessary service communications.
• Maintain and improve courses, website performance, and accessibility.
• Authenticate users, secure systems, investigate misuse, and protect users and record integrity.
• Meet applicable accounting, legal, regulatory, and recordkeeping duties and address disputes or lawful requests.

We limit information to what is reasonably needed for the disclosed purpose. A materially different use will receive any notice or consent required by applicable law. This notice does not replace a separate consent when one is required.

4. Certificates & Verification

Certificates may identify the participant, course title and code, completion and issue dates, certificate ID, and certificate status. With appropriate authorization and privacy safeguards, limited details may be confirmed to an employer or other verifier through Campus contact or an available verification tool.

Sharing a certificate or its verification link may allow its recipient to view the limited information made available through that verification method. We will identify the information displayed when offering an online verification method.

Detailed grades, assignments, private communications, disciplinary matters, account activity, and partner-site records are not included in public certificate verification. Separate disclosure requires an appropriate lawful basis and any necessary authorization.

Historical course completion and current Campus standing are separate. An inactive or restricted account does not automatically invalidate legitimately earned completion or prevent a request to verify a retained record.

5. Applied Activities, Identity Checks & Assessments

Where required by a course, we may collect practical-activity logs, submitted evidence, attendance confirmations, or supervisor confirmations. Course instructions explain what must be documented. Submit only information needed to demonstrate your own participation and avoid including other people’s private information without appropriate permission.

If an assessment uses identity checks, audiovisual proctoring, recording, or another verification method, we will explain the information involved before collection. Additional notice and consent will be obtained where legally required. A course requirement does not authorize undisclosed biometric processing or access to unrelated personal files.

6. Campus-Managed Accounts & Devices

Campus email, Microsoft 365, portal accounts, and managed devices are administered Campus resources. Authorized administrators may access associated account information, communications, files, security logs, or configuration information when reasonably necessary to administer services, protect systems, investigate misuse, or meet legal obligations.

Administrative access is limited to appropriate personnel and legitimate purposes under applicable law and Campus policy. Account access is not promised indefinitely. Keep permitted copies of personal materials you need; deactivation and record deletion are separate processes.

Device-specific collection or management features will be explained in the relevant deployment or enrollment notice. This policy does not imply continuous location tracking or unrestricted access to a personally owned device.

7. AI, Research & Productivity Tools

Campus resources may include Microsoft Copilot or other third-party learning, research, or productivity tools. Information entered into those tools is handled according to the provider’s terms, applicable agreements, and account settings.

Do not enter passwords, payment-card details, government identification numbers, medical or treatment records, or another person’s confidential information into ordinary AI prompts, assignments, support forms, or email. If additional information is necessary for a specific service, the Campus will identify an appropriate process.

This policy does not promise that every AI service uses the same retention, training, or privacy settings. Review the instructions for the particular Campus-approved tool you use.

8. Sharing, Partners & Business Transfers

Information may be shared, as reasonably necessary, with course and technology providers, payment processors, security providers, and professional advisers supporting Campus operations. We use appropriate contractual restrictions where required for providers processing information on our behalf.

A sponsoring employer, housing program, or other partner may receive limited enrollment, participation, completion, or account information when supported by an appropriate lawful basis and any required consent. Sponsorship does not provide unrestricted access to grades, communications, or personal records.

Information may also be disclosed at your direction, in response to valid legal process, to meet reporting duties, or to address fraud or credible safety and security concerns when permitted or required by law. Disclosures are limited to relevant information and remain subject to applicable protections.

In a merger, acquisition, reorganization, financing, or transfer of Campus operations, relevant information may be reviewed or transferred under appropriate confidentiality protections and applicable law. A transfer does not remove legally binding privacy obligations.

9. Teachable, Microsoft & Other Providers

The Campus uses Teachable for online course services and may provide Microsoft accounts and resources. These companies may act as service providers for some information and process other information independently. Requests about records under Campus control should be directed to us; information held independently by a provider may require a separate request to that provider.

Provider privacy information:

• Teachable Privacy Policy
• Microsoft Privacy Statement

External websites and tools have their own terms and practices. Some providers may process information in the United States or other countries. Legally required safeguards will apply to transfers for which the Campus is responsible. Linking to a provider does not remove our own legal responsibilities.

10. Cookies, Analytics & Advertising

Campus websites and platform providers may use cookies, local storage, session identifiers, analytics tools, or similar technologies for login, preferences, course operation, security, performance, and usage measurement. Particular technologies depend on the platform and features in use.

Browser controls may allow you to block or delete cookies. Blocking essential technologies can affect login, checkout, or course functions. Where required, we will obtain consent or provide an applicable opt-out mechanism for technologies we control. Platform privacy controls may also apply to information processed independently by a provider.

The Campus does not sell or rent participant lists or personal information for monetary consideration and does not use grades, assessment results, completion records, or certificates for targeted advertising. These commitments do not imply that independent platforms have identical practices.

Any processing we control that legally constitutes a sale, targeted advertising, or profiling producing legal or similarly significant effects will receive the disclosures and choices required by applicable law. Contact us about applicable privacy choices.

11. Sensitive Information & Data Minimization

Depending on applicable law, health information, religious beliefs, racial or ethnic origin, certain biometric or genetic data, precise location, and children’s information may require additional protection. Course submissions or partner affiliations can also reveal sensitive information.

We seek to avoid collecting unnecessary sensitive information and obtain consent before processing it when required. Ordinary course enrollment does not require you to submit complete medical or treatment records. Contact the Campus before providing sensitive supporting information for an access or accommodation request.

12. Retention, Account Closure & Deletion

Retention depends on the information, the service, and applicable duties. We consider account administration, completion verification, transaction and tax records, security needs, disputes, and legal requirements when determining how long records are needed.

Account closure does not automatically erase all records. Limited completion or certificate records may remain while needed and lawfully retained, including after an account becomes inactive. A verification purpose does not override an applicable deletion right. If a deletion request is subject to an exception, we will explain the relevant basis where required.

Information no longer needed will be deleted, securely disposed of, or appropriately de-identified. Backup copies may remain until replaced under applicable retention procedures; restoration does not remove deletion obligations. We do not use the need to preserve a completion record as a reason to retain every assignment, communication, or account file indefinitely.

13. Security & Incident Response

We work to maintain reasonable administrative, technical, and physical safeguards appropriate to the information and service. Measures may include access restrictions, authentication, managed services, encrypted connections, updates, and backup or recovery procedures. No system can guarantee absolute security.

We review reported security incidents, take reasonable protective steps, and coordinate with relevant providers as appropriate. When a breach triggers notification duties, we will provide required notices within the applicable legal period, subject to any lawful delay. Tennessee breach-notification information is available through the Attorney General’s Consumer Laws resources .

Protect your account credentials and promptly report suspected compromise to campus@lofttn.com.

14. Privacy Rights & Requests

Depending on the law covering you and the Campus, you may request access, correction, deletion, a portable copy, or applicable opt-outs from sale, targeted advertising, or consequential profiling. Rights have lawful limits and authentication requirements. We will not unlawfully discriminate against you for exercising a protected right.

Email campus@lofttn.com with the subject Privacy Request. Identify the requested action and relevant account or course. We may request proportionate identity verification. You do not need to create a new account solely to make a request.

Where the Tennessee Information Protection Act covers the Campus and your request , we will respond without undue delay and within 45 days. A permitted additional 45-day extension will be explained within the initial period. Qualifying responses are free up to twice annually; fees or refusals are limited to circumstances allowed by law. Other applicable deadlines control where required.

TIPA has coverage thresholds and exemptions; this policy does not represent that it applies to every Campus interaction. See the Tennessee Attorney General’s TIPA guidance .

15. Privacy Appeals & Complaints

To appeal a privacy decision, email campus@lofttn.com with the subject Privacy Appeal, identifying the original request and reason for reconsideration. There is no charge for a qualifying appeal.

Where TIPA applies, we will respond in writing within 60 days, explain our decision, and provide a complaint contact method if the appeal is denied. You may consult the Tennessee Attorney General’s official complaint page . Nothing here restricts other available legal remedies.

16. Communications & Your Choices

We may send necessary enrollment, course, assessment, payment, certificate, account, security, and policy communications. Optional marketing communications will include any unsubscribe mechanism required by law.

Unsubscribing from marketing does not stop necessary service messages. Where processing depends on consent, you may contact us about withdrawing that consent. Withdrawal does not invalidate earlier lawful processing and may affect a service that requires the information.

17. Children

Campus online services are not directed to children under 13, and we do not knowingly collect their personal information online without legally required parental authorization. If we learn of collection that requires consent, we will take appropriate action under applicable law, including deletion where required.

A parent or guardian may contact campus@lofttn.com about a child’s information. Individual courses may have additional age and eligibility requirements. See the FTC’s official COPPA information .

18. Changes & Applicable Rights

We will revise the update date when this policy changes and identify when a revision takes effect. Material changes will receive any additional notice or consent required by law. This revision applies prospectively upon publication.

This policy describes Campus practices and does not waive applicable privacy, consumer-protection, education, or other legal rights. Any mandatory legal requirement controls if it conflicts with this notice. Separate consent will be obtained when required; continued use alone is not a substitute for that consent.

19. Contact the Campus

The Loft Campus of Applied Science

Email: campus@lofttn.com

Phone: 865-358-7770

Website: loftcampus.com

Use Privacy Request or Privacy Appeal in your email subject line as appropriate. Provide only the information reasonably needed to identify and review the issue.