JCSU Website and Mobile Application Privacy Statement
Last Updated: October 30, 2026
Johnson C. Smith University reviews this privacy statement at least annually and updates it as needed.
Johnson C. Smith University (JCSU) wants your experience with the JCSU website and mobile application (collectively, the “JCSU Digital Services”) to be as satisfying, accessible, and secure as possible. Your privacy is of utmost importance to JCSU. This statement explains how JCSU collects, uses, protects, and discloses information through the JCSU Digital Services.
Our Commitment to Each User (“You”)
Information We Collect
When you use the JCSU Digital Services, JCSU may collect information that you provide directly, information from University records when you sign in, and technical or usage information generated through your interaction with the services. Technical and usage information may include your Internet Protocol (IP) address; device model and name; operating system; browser type and version; pages or screens viewed; dates, times, and duration of visits; referring pages; and similar diagnostic information. JCSU may also use cookies and similar technologies to operate the services, remember preferences, support authentication, understand usage, and improve content and services.
USE OF INFORMATION
To access personal information from university records through the JCSU Digital Services, sign in with your JCSU username and password. JCSU encrypts information in transmission. You may choose to stay signed in, but JCSU recommends signing out when finished, especially when others may have access to your device. Closing a website browser or the JCSU mobile application may not automatically end your authenticated session.
JCSU may collect aggregated usage information, such as page or screen views, across the JCSU Digital Services to understand use and improve content and services. JCSU does not use aggregated information to identify an individual user. JCSU may disclose personal information when necessary to provide requested services, complete transactions, comply with law, protect rights or security, or work with authorized service providers, subject to appropriate safeguards.
Third-Party Services and Transactions
Certain services or transactions initiated through the JCSU Digital Services may be processed by third-party providers. You may be redirected to a provider’s website, application, or payment platform to complete a transaction. When you interact directly with a third-party provider, that provider may collect and process your information under its own privacy statement, terms, and security practices. JCSU encourages you to review the provider’s privacy statement before submitting personal information. A link to or integration with a third-party service does not make that provider’s privacy practices part of this statement.
Data Retention
JCSU retains personal information for as long as necessary to fulfill the purposes for which it was collected, provide and secure the JCSU Digital Services, comply with applicable legal, regulatory, contractual, records-management, and audit requirements, resolve disputes, and enforce University agreements and policies. The retention period may vary based on the nature and sensitivity of the information, the purposes of processing, operational needs, applicable retention schedules, and legal obligations. When information is no longer required, JCSU will delete, anonymize, or securely dispose of it in accordance with applicable requirements and University practices.
SECURITY
JCSU uses administrative, technical, and physical safeguards designed to protect information handled through the JCSU Digital Services, including firewall, access-control, and password-protection measures. JCSU periodically reviews its security and privacy practices and limits access to personal information to authorized personnel and service providers with a legitimate need for access. No method of transmission or storage is completely secure.
International Privacy Rights
If applicable privacy law, including the European Union General Data Protection Regulation (EU GDPR) or United Kingdom General Data Protection Regulation (UK GDPR), applies to JCSU’s processing of your personal data, you may have rights to receive information about the processing; access your personal data; correct inaccurate or incomplete data; request deletion; restrict processing; receive certain data in a portable format; object to certain processing; and request human review of certain decisions based solely on automated processing. These rights may be subject to legal conditions, exceptions, and verification of your identity.
You may also have the right to withdraw consent when processing is based on consent and to lodge a complaint with the applicable data protection authority. To exercise an applicable privacy right, contact JCSU IT Support at ITSupport@JCSU.EDU and identify the right you wish to exercise. JCSU will respond as required by applicable law and may request information reasonably necessary to verify your identity and locate the relevant records.
When personal data protected by applicable EU or UK law is transferred internationally, JCSU will use a lawful transfer mechanism and appropriate safeguards when required.
Contact Us
For questions about this privacy statement, the JCSU Digital Services, or the handling of your information—and to submit a request to exercise applicable privacy rights—contact the JCSU Help Desk at ITSupport@JCSU.EDU .
YOUR CONSENT
Your use of JCSU Digital Services is voluntary. Where consent is the appropriate legal basis, your submission of information authorizes JCSU to collect and use that information as described in this statement. JCSU will post material revisions to this statement and change the “Last Updated” date shown at the top. Please review this statement periodically, including when accepting an update to a JCSU service.