Privacy Policy

A. RATIONALE AND PURPOSE OF THE POLICY

Northern Essex Community College (“NECC”, “College”, “we”. “us”, or “our”) provides this Privacy Policy to inform Users of our policies and procedures regarding the collection, use, and disclosure of personal information (as defined below) received from Users of this website.

The following policy applies only to the use of NECC’s website. It is the User’s responsibility to review this Privacy Policy carefully, especially before providing any personal information through the site. Other websites operated by state agencies have different policies. NECC suggests that you read the privacy policies for each Commonwealth website that you visit.

NECC also recommends that you read the “disclaimer” that appears on NECC’s website as NECC is not responsible for the content of, or for the privacy policy of, or the use of personal information gathered at a website that you may visit through a link appearing at NECC’s website.

B. OWNERSHIP

This policy is owned by the Registrar and IT offices.

C. SUMMARY

NECC will not sell or share any user information with any outside party, unless required by law to do so. All information collected on the NECC website is used solely to answer questions or fill requests made by users of this site. No information will be used to identify or contact users of this site against their wishes.

Privacy Relationship

NECC attempts to protect the privacy of all users of this website to the maximum extent possible. However, because some of the information that NECC receives through this website is subject to the Public Records Law, Massachusetts General Laws Chapter 66, Section 10, NECC cannot ensure absolute privacy. This policy informs you of the information that NECC collects from you at this site, what NECC does with it, to whom it may be disseminated, and how you can access it. Based on this information, you can make an informed choice about your use of this site. You can maximize the benefits of using this website by making informed choices about whether to share personally identifiable information with NECC through this site.

Definitions

Cookies are files that a website can place on your computer. A cookie file contains unique information that a website can use to track such things as your password, lists of web pages you have visited, and the date when you last looked at a specific web page, or to identify your session at a particular website. A cookie file allows the website to recognize you as you click through pages on the site and when you later revisit the site. A website can use cookies to “remember” your preferences, and to record your browsing behavior on the web. Although you can prevent websites from placing cookies on your computer by using your browser’s preference menu, disabling cookies may affect your ability to view or interact with some websites.

An “Internet Protocol Address” or “IP Address” is a series of numbers that identifies each computer and machine connected to the Internet. An IP address enables a server on a computer network to send you the file that you have requested on the Internet. The IP address disclosed to NECC may identify the computer from which you are accessing the Internet, or a server owned by your Internet Service Provider.

Personal information means any information that could reasonably be used to identify you, including, but are not limited to, your name, mailing address, e-mail address, phone number, Social Security number, IP address, photo, birth date, bank account information, credit card information, or any combination of similar information that could be reasonably used to identify you. Personal information may also include educational, financial, employment-related, and health data. For more information about how NECC uses or processes personal information, please refer to the section below titled Data Protection Statement for Those Seeking Information and/or Applying for Admission.

D. INFORMATION USAGE, SECURITY, AND PROTECTIONS

Information voluntarily provided by you

This site collects information voluntarily given by you only through the e-mails and/or forms that you send through this site. E-mails and/or forms sent by you to this site will contain personally identifiable information.

Information collected and stored by this site

This site does not collect “cookies”, but may collect and store indefinitely your Internet Protocol (“IP”) address, as well as information about the date and time of your visit, whether a file you have requested exists, and how many “bytes” of information were transmitted to you over the web from this site. NECC can use your IP address to assess the frequency of visits to this site and the popularity of its various pages and functions. NECC will not attempt to match any personally identifiable information that you provide to NECC with your IP address, except as necessary as part of an investigation concerning the violation of a law or a college policy.

DoubleClick: NECC uses Google Analytics remarketing codes to log when users view specific pages or take specific actions on a website. This allows the college to provide targeted advertising in the future. If you do not wish to receive this type of advertising from us in the future you can opt out using the DoubleClick opt-out page.

Dissemination and processing of your personally identifiable information and/or personal information

You may provide us with personal information through electronic forms or emails and we may use this data to send you information, respond to inquiries, and/or other requests or questions. When you complete an electronic form, you may be asked to enter your name, email address, mailing address, phone number, or other details. We collect this information and use it for internal College purposes, including to send you information about the College, respond to your questions and requests, administer College events, gather statistical information about prospective students and website or mobile app users, and other similar purposes.

NECC does not sell, rent, give away, or loan any personal information collected through this website or mobile app to any third party for commercial purposes. We may use such information, or share such information with our agents, for internal College purposes, such as to provide and improve our services or communications to users. We may also provide your information to our agents in circumstances where we believe that doing so is necessary or appropriate: as required by law; to prevent or otherwise address fraud, security or technical issues or to protect the rights, property, or safety Northern Essex Community College, our users, or others. Any personal information voluntarily submitted to NECC or its agents through an e-mail or a form submittal is subject to the Public Records Law and the Fair Information Practices Act (Massachusetts General Laws Chapter 66A), and other applicable laws and regulations. For this reason, part or all of the information you send to NECC or its agents may be disclosed in response to a public records request.

In addition, the information that you voluntarily submit will be disclosed only to Commonwealth employees, agents of the College, or officials with a “need to know” for purposes of fulfilling their job responsibilities. These individuals will only use the information to answer your questions, respond to any requests for assistance, and fulfill the Commonwealth’s legal obligations. Where appropriate, NECC may provide the information submitted by you to the person or company that is the subject of your inquiry, or to a government agency responsible for the matters referred to in your communication.

In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. No method of transmission over the Internet or method of electronic storage, however, is 100% secure.

The website and/or mobile app may contain links to other websites of interest. Northern Essex Community College does not control third-party websites and is not responsible for the privacy practices or contents of any linked website.

Your access and opportunity to correct

The Public Records Law and the Fair Information Practices Act provide you certain rights to get information about you that is in our records. To learn more about the circumstances under which you can get and correct this information, please click on the above references to these laws.

Security

Because this site does not encrypt all incoming e-mail, you should not send information that you consider highly sensitive through this website. NECC uses standard security measures to ensure that your personal information is not lost, misused, altered, or unintentionally destroyed. The Commonwealth also uses software programs to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage. Except for authorized law enforcement investigations, no attempts are made to identify individual users or their usage habits.

Special protections against misuse of personal information within Commonwealth Offices

Executive Order 412 enhances the privacy protection of information about you as a named individual held by the Executive Department of state government. Executive Order 412 limits the collection and dissemination of personally identifiable information within the Executive Department. This site complies with Executive Order 412, so all of the personal information that you submit to this site is handled consistent with Executive Order 412.

E. POLICY CHANGES AND REFERENCES

Policy changes

NECC will post changes to this policy at least 30 days before they take effect. Any information NECC collects under the current privacy policy will remain subject to the terms of this policy, consistent with the Public Records Law and the Fair Information Practices Act. After any changes take effect, all new information NECC collects, if any, will be subject to the new policy.

Additional policies

NECC will comply with all State of Massachusetts policies and procedures including the Acceptable Use of Information Technology Policy.

Any link (including hyperlinks, buttons or referral devices of any kind) used on this or any other NECC web page is provided for the use and convenience of the visitor. The appearance of a link on this or any other NECC web page does not constitute an endorsement, recommendation, or certification by NECC, nor should the presence of a link in any way be construed as a suggestion that the site has any relationship with NECC.

Links to the NECC website from external sites is not permitted without prior consent of the Web Content Developer.

Any information submitted to the NECC website becomes the property of NECC and will not be subject to any obligation of confidentiality. No compensation will be made to the provider of information/images/audio or video via the NECC website.

By using the NECC website, you agree to the policies disclosed here.

For questions about your privacy while using this website, please contact webdeveloper@necc.mass.edu.

F. DATA PROTECTION STATEMENT FOR THOSE SEEKING INFORMATION AND/OR APPLYING FOR ADMISSION

This Data Protection Statement (“policy statement”) provides information about why personal information is being requested from you and how it will be used by Northern Essex Community College and its agents. This policy statement is provided in compliance with the General Data Protection Regulations (“GDPR”) issued by the European Union (“EU”) and effective on May 25, 2018. The GDPR protects the personal information of EU citizens and residents and provides a single set of rules for international businesses and organizations, including institutions of higher education, that process this data. The GDPR applies exclusively to the processing of personal information that is obtained from you while you are physically located in an EU member state, regardless of your nationality or citizenship. The GDPR does not apply to Personal information obtained from you when you are located outside of the EU.

G. POLICY FAQS

What is “personal information”?

Please see the Definitions section of this policy.

What does it mean to “process” personal information?

Processing is any operation performed on personal information, such as collecting, destroying, recording, organizing, storing, altering, or disclosing.

What personal information will be processed?

The College will process the information you provide when you request additional information from the College and/or submit your admission application together with the supporting documents requested to complete your application.

What is the purpose and legal basis of the processing?

The College will process your personal information for the purposes of identifying you, processing your request for information or application for admission, verifying the information provided, reaching an admission decision, and communicating that outcome and/or other feedback. The College may also process your information for the following statutory obligations, contractual necessity and/or public interest purposes:

• To confirm immigration status;

For affirmative action and equal opportunity monitoring;

To prevent or detect fraud or other criminal activity;

To confirm elementary and secondary education record;

To assist in providing reasonable accommodations for a disability;

To provide information as required by applicable law; and

For research and statistical purposes, but only in a non-identifiable, aggregate format.

Admission decisions are made on a case-by-case basis and are not the result of automated decision-making.

Who will process my personal information?

For the purposes stated above, during the admission process your personal information will be processed by and shared with the following:

• Admissions Office;
• Financial Aid Office;
• International Studies Office;
• Student Services Office;
• Registrar’s Office;
• Disability Services if an accommodation is requested;
• Institutional Research;
• Student and Exchange Visitor Program Designated School Official;
• Governmental bodies when required by law;
• State authorities in order to perform one or more statutory duties; and
• Third-parties providing specific services to, or on behalf of, the College.

The College may subsequently identify other departments or external parties who will process your personal information as you progress through the application process.

How is my personal information used if I am accepted?

Once you are accepted and begin attending the College your personal information is no longer covered by the GDPR. As a student at the College, your personal information shall be processed in accordance with the Family Educational Rights and Privacy Act (“FERPA”), a U.S. federal law.
To learn about your rights under FERPA, please visit https://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html?src=rn.

If your acceptance to the College is for an on-line course or program only, and you remain in an EU member state while participating in the course or program, the GDPR shall continue to apply to the processing of your personal information.

How can I access my personal information?

You have the right to access the personal information that is held about you by the College. You also have the right to ask the College to correct any inaccurate personal information it holds about you. In order to access your personal information, please contact the Registrar at registrar@necc.mass.edu.

How long is my personal information kept?

The College shall retain and store personal information in accordance with applicable U.S. state and federal laws and regulations. If you attend the College, your personal information will be kept as part of your student record for the duration of your studies and for a period up to 5 years after graduation. If you do not attend, your application information will be retained for a period up to 3 years after the completion of the application process.

Who can I contact if I have any questions?

If you have any questions about this policy statement, the College’s compliance with the GDPR, or the processing of your personal information, please contact the IT Service Desk at 978-556-3111 or servicedesk@necc.mass.edu.

How do I report a complaint?

If you are not happy with the way your information is being handled, or with the response received from the College, it is recommended that you contact the IT Service Desk at 978-556-3111 or servicedesk@necc.mass.edu. If the College fails to adequately address your concerns, you also have a right to file a complaint with the Massachusetts Department of Higher Education at: https://www.mass.edu/forstufam/complaints/complaints.asp.

H. POLICY STATEMENT UPDATES

This policy statement was updated and issued on March 24, 2026. It will be reviewed as necessary and at least annually. Any changes to the policy will be posted on the College’s website.