Privacy Policy

RAGASEDU is a data-driven research, technology, and services organization partnering with education administrators and staff to provide analytical insights and improve student and institutional outcomes.

RAGASEDU’s Commitment to Privacy

RAGASEdu is deeply committed to maintaining the privacy and security of confidential and sensitive information we may collect, retain, process, or transfer or which is provided to us directly by our customers. We comply with all applicable United States regulations, including but not limited to the Family Educational Rights and Privacy Act (FERPA). 

We collect and use personal data to provide our products and services to our customers and our customers’ end users. As used in this Privacy Notice, “Personal Data”, means any information about an identified or identifiable natural person. We do not and will not sell or rent personally identifiable data to third parties. RAGASEdu may disclose Personal Data as required by law, for example, in response to a court order, an administrative proceeding or subpoena. RAGASEdu will, as soon as practical, inform the customer when permitted by law, so the customer may take such actions as it deems necessary to protect the rights of Customer Data Subjects (including but not limited to students, faculty, staff, and administrators). 

This notice is divided into sections based on your relationship with RAGASEdu. Note that more than one section might apply to you.

Scope of this Privacy Policy

This Privacy Policy governs all services we provide directly to our customers and applies to personal data that can be associated with an identified or identifiable person. This Privacy Policy does not relate to anonymized, disaggregated, or de-identified data. Whether you are accessing our public website, exploring employment opportunities through our job portal, participating in a research membership forum, or using one of our products via a software application, this Privacy Policy governs our use of personal data for all our products and services that we provide directly to you. When we collect personal data directly from you in connection with our interactions with you, we are a data controller.

Scope of Your Institution’s Privacy Policies

If you are an employee, student, prospective student, or other end user of our customer, and we are collecting your personal information in connection with the products and services we provide to our customers, we are a data processor. In this case, our use of your personal information is governed by the privacy policy of the institution from which we have received, or on whose behalf we collected or use, your personal information (“your institution”). Our Privacy Statement does not supersede the terms of any agreements between us and your institution, nor does it affect the terms of any agreements between you and your institution, including any prior consent you have provided concerning the use and distribution of your personal information.

The type of personal information we collect about you depends upon your relationship with us.

 

Website Visitors

RAGASEdu maintains a website that is generally accessible by the public. Our website provides general information about our company and its products and services. Our website also may contain information concerning employment opportunities and provide the opportunity for individuals to submit applications for open roles. We may do this directly or through third party vendors. 

You can generally visit our website without having to register or otherwise identify yourself. Although RAGASEdu has endeavored to create a secure and reliable site for you, the confidentiality of any communication or material transmitted to or from RAGASEdu via the website or email cannot be guaranteed.

We collect personal information through our website in the following manner:

Collection and Use of Information

RAGASEdu collects your Personal Data (such as your name, address, or telephone number) through our website if you provide it to us voluntarily.

In addition, as you use our website we automatically collect certain information in the form of statistical data regarding your visit, including information about your equipment, operating system, browsing actions including log data and usage patterns. We use this information for internal purposes, such as to improve our website. We may use cookies to assist us in collecting this information. A cookie is a small file placed on the hard drive of your computer. You have the ability to delete cookie files from your hard drive at any time or avoid cookies by configuring your browser to reject them or to notify you when a cookie is being placed on your hard drive. RAGASEdu, on its own or through third-party vendors, uses first-party and third-party cookies together for lead generation purposes and to inform, optimize and serve ads based on your past visits to our Site. For information on the specific cookies we use on our website, please visit our Cookie Declaration. You can also visit this page, this page and this page to opt out of some such advertising. We also use certain cookies for website functionality.

Our website uses Google Analytics Demographics and Interest Reporting to help us understand, in aggregate, the age, gender and interests of website visitors. This Google Analytics tool does not reveal your name to us. RAGASEdu does not combine the information collected through use of Google Analytics with Personal Data. The information received from Google Analytics is used to improve our website and the type of information displayed to Site visitors so we can better serve those interested in RAGASEdu. You can prevent Google Analytics from recognizing you on return visits to our Site by using Google Analytics’ Opt-out Browser Add-on, available here.

At any time while accessing our website, any user may decline participation in any activity that would require active submission of Personal Data (e.g., responding to a survey email or engaging in an e-commerce transaction). Your decision not to participate will not affect your ability to use any other feature on our Site. 

RAGASEdu may offer you opportunities to engage in blogs, forums, and social media accounts that are designed to be visible to other users, including comments and postings. You should be aware that any Personal Data you choose to submit via those media can be read, collected, and used by other participants, and could be used to send you unsolicited messages. We are not responsible for the Personal Data you choose to submit when you engage in such activities.

External Websites

Some hyperlinks on our Site may link to third-party websites. You should be aware that these third-party websites are not controlled by RAGASEdu and are not subject to this Privacy Notice. You should check the privacy policies of the third-party websites to see how your Personal Data will be collected and used.

End User of an Institution That Uses Our Products

Your institution decides how your personal information is used. We provide nearly all of our products and services to end users of an institution as a “data processor” on behalf of our customers (e.g., colleges, universities, etc). This means that the main responsibility for data privacy compliance lies with your institution as a “data controller.” It also means that your institution’s privacy policy (rather than ours) governs the use of your personal information. Your institution determines what information we collect through our products and services and how that information is used, and we process your information according to your institution’s explicit instructions.

The following section is primarily for informational purposes and describes how your information is generally collected when we provide products and services to you on behalf of a customer. How your personal information is used depends on your institution, so you should read your institution’s privacy policy carefully. 

We collect personal information through our software products in the following manner:

Received directly from your institution: Depending on the products or services that RAGASEdu provides to your institution, we may collect the following types of identifiable information:

  • Your name, email address, student ID, account credentials, course enrollment data, grades, and directory information.
  • Application, enrollment and financial aid information.
  • Other information directly from your institution or other third parties related to your enrollment or application status at your institution, or other institutions, or related to your success at your institution.
  • Application and enrollment information.Your credentials for your institution’s systems account(s) to the extent our products integrate with such systems.
  • Content that you enter directly into our products, including results of surveys or polls, notes and summaries, academic and career preferences.

Received indirectly from you: We collect information on your use of our products and services. Depending on the products and services you access or use, we may collect the following data categories indirectly from you:

  • From the website: information about the pages you visit and how you access and use our products using cookies and third-party analytics tools. This information includes information about the device(s) you use to access the websites including unique device identifiers, IP address, operating system, browser and cookies. Depending on your device settings, we may also collect information about your geographical location. See the section on Website Visitors for details about our Cookie policy.
  • For end users of institutions that use our products, we use your information on behalf of and under the instruction of your institution, which is the data controller. We share the information that we collect in accordance with our agreement with your institution. 

To the extent permitted by applicable law or by our agreement with your institution, we may also use:

  • Your personal information to evaluate and improve our products and services to develop new products and services;
  • To tailor your experience on our websites; and/or
  • De-identified, aggregated information for research or business purposes like providing similar institutions a benchmarking data report on completion rates or class size.
  • Customer data engagement and marketing: we use your information for customer engagement and marketing purposes in limited circumstances, including:
    • To manage the customer relationship, including for invoicing, notification of product updates and maintenance, and similar purposes.
    • To promote our products and services.

We do not and will never disclose personally identifiable information about students that we collect through the provision of our educational products and services to third parties for behavioral targeting of advertisements to students.

Our marketing emails will include a link so that you can opt-out of receiving marketing communications from us. You can do this by clicking on the “Unsubscribe” link in the email footer.

 

Other Types of Disclosures

We will also share your information to the extent required in the following circumstances:

  • To comply with legal or regulatory requirements and to respond to lawful requests, court orders, and legal processes.
  • To protect and defend the rights, property, or safety of us, our customers, or third parties, including enforcing contracts or policies or in connection with investigating and preventing fraud.
  • To process transactions, we may share your payment and transaction data with third party payment processors as needed.
  • To carry out operational tasks for legitimate business purposes.

Children’s Privacy

RAGASEdu’s products and services are not intended for children under the age of 13, and we do not knowingly collect any information from children. If we learn that we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information upon request. Please contact us at  privacy@ragasedu.com if you believe we have inadvertently collected personal information from a child under 13 without proper consent.

Security

In order to protect personal information, RAGASEdu has established a data privacy program based on the ‘privacy by design’ framework which proactively embeds privacy protection into the design of our IT systems, networked infrastructure, business practices, and software applications. We employ a variety of physical, administrative, and technological safeguards designed to protect personal information against loss, misuse, and unauthorized access or disclosure. We have dedicated information security programs and work hard to continuously enhance our technical and operational security measures.

Specifically, we align our policies with the ISO 27001 framework. We maintain a comprehensive list of policies and procedures that are readily accessible by all workforce clients via an internal portal. Information is encrypted at rest on laptops, removable devices, and at the data centers we partner with for our technology products and services. RAGASEdu requires the secure transmission of personal information to and from our network; we work with clients to discourage transmission that is otherwise not secure. This is accomplished through a combination of secure technologies like SSH File Transfer Protocol (SFTP) for in-transit encryption of bulk file transfers and SSL/TLS encryption in transit for web traffic.

 

General Terms: Personal Data

These General Terms apply to anyone (except RAGASEdu employees and job applicants) whose Personal Data is processed by RAGASEdu.

Security

RAGASEdu may collect and otherwise receive the following categories of Personal Data:

  • Name and contact details 
  • Professional and employment information
  • Education and professional qualifications
  • Application, website or information technology access and usage information – this may include cookies as described below and in our Cookie Declaration
  • Account or transaction information

The Personal Data collected by RAGASEdu will depend on the individual’s relationship to RAGASEdu as further described in the sections below.

RAGASEdu collects Personal Data from the following sources:

  • You
  • Your device – this may include information collected automatically as further described in the sections below
  • Other sources – we collect Personal Data from third parties as needed to accomplish the purposes described below.

Purposes of Personal Data Collection and Use

RAGASEdu collects, uses and processes Personal Data for the purposes of:

  • Providing information about our products, services, and events
  • Providing products, services, and support to our customers
  • Processing transactions with our customers
  • Communicating with business partners, vendors, agents and contractors about business matters
  • Analyzing information in order to improve business practices, products and services
  • Conducting related tasks for legitimate business purposes
  • Meeting other needs disclosed at the time of collection
  • Complying with legal requirements and protection of rights and property

Security of Personal Data

RAGASEdu is committed to safeguarding the Personal Data that it receives. While we cannot guarantee the security of Personal Data, we have implemented reasonable technical and organizational measures to protect Personal Data in our possession from loss, misappropriation and unauthorized access, disclosure and destruction.

RAGASEdu utilizes a combination of online and offline security technologies, procedures and organizational measures to help safeguard Personal Data. Electronic security measures — including, for example, network access controls and passwords — provide protection from hacking and other unauthorized access. RAGASEdu limits access to Personal Data to employees that have a specific business reason for accessing such Personal Data. Customer Personal Data is stored on a Google Cloud Server with access controls for employees, but no information about Customer Data Subjects (see below) is stored on any cloud servers. Individuals who have been granted access to Personal Data will be made aware of their responsibilities to protect such information and are provided instruction on how to do so.

If RAGASEdu learns of an unauthorized disclosure of Personal Data that is within our possession or control, RAGASEdu will perform all actions required by applicable laws, including taking prompt measures to remedy the unauthorized disclosure and providing required notices.

Your Access to and Control Over Your Personal Data

You may do the following at any time by contacting us at privacy@ragasedu.com:

  • Opt out of any future contacts from us
  • See what information we have about you, if any
  • Change, correct, or, in certain circumstances, request that we delete any Personal Data we have about you
  • Express any concern you have about our use of your Personal Data

RAGASEdu will comply with these requests when required by law. We may request additional information from you in order to process your request.

The Customer’s Responsibilities with Respect to Its Personal Data

RAGASEdu’s customers may choose to include Personal Data with the customer data provided to us. This Personal Data may include employee name and contact details for the purpose of administering the customer’s account with RAGASEdu.

RAGASEdu processes Personal Data that its customers have chosen to share with us. RAGASEdu has no direct or contractual relationship with the subjects of this Personal Data (including but not limited to staff, current, and prospective students; the “Customer Data Subjects”). As a result, when customer data includes Personal Data, the customer is solely responsible for satisfying all legal obligations owed directly to Customer Data Subjects under applicable data protection laws.

It is the RAGASEdu customer’s responsibility to ensure that Personal Data it collects or directs RAGASEdu to collect can be legally collected. The customer also is responsible for providing to Customer Data Subjects any notices required by applicable law and for responding appropriately to Customer Data Subjects’ requests to exercise their rights with respect to Personal Data. In addition, the customer is responsible for ensuring that its disclosure of Personal Data to RAGASEdu is consistent with any privacy policy the customer has established and any notices it has provided or is required to provide to Customer Data Subjects.

RAGASEdu is not responsible for its customers’ privacy policies or practices; or for customers’ compliance with such policies/practices. RAGASEdu does not review, comment upon, or monitor its customers’ privacy policies or its customers’ compliance with such policies. RAGASEdu does not review instructions or authorizations sent to us by customers or other parties to determine whether the instructions or authorizations are in compliance with, or conflict with, the terms of a customer’s published privacy policy or of any notice provided to Customer Data Subjects.

Sharing of Personal Data with Third-Parties

RAGASEdu does not share any personal data outside the organization.

Contact Us

Should you have any questions or concerns about this Privacy Notice, please contact privacy@ragasedu.com.

Changes to This Privacy Notice

RAGASEdu may revise this Privacy Notice from time to time in order to comply with new laws and regulations; to conform to industry best practices; to reflect changes in RAGASEdu product and service offerings; and for other reasons. The revised Privacy Notice will become effective when it is posted on the RAGASEdu website.

Ready to get started?

Contact us today to find out how RAGASEDU can help your institution. 

RAGASEDU
515 Sparkman Drive NW
Huntsville, AL 35816

© 2021 RAGASEDU. All rights reserved.