American Campus Communities Privacy Policy
Effective Date: June 6th, 2025
American Campus Communities LLC (“American Campus Communities,” “ACC,” “we,” “us,” or “our,”) respects the privacy of our users (“you” or “your”). This privacy policy (“Policy”) applies to personal information we collect online and offline, such as when you visit our campus properties, visit the websites we operate that display this Policy, any website that links to this Policy, or when you otherwise interact with us, such as through our customer support channels (collectively, our “Services”). This Policy also applies to personal information we collect about individuals with whom we have a business relationship.
This Policy does not apply to ACC employees or job applicants. Please see our California Recruitment Privacy Notice for further details.
Personal information is data that can be used to directly or indirectly identify an individual. This Policy is intended to inform you of the personal information that we collect, use, and disclose, why we process this personal information, and the ways in which we will protect your personal information.
We may change this Policy from time to time. If we make changes, we will notify you by revising the date at the top of this Policy. We encourage you to review this Policy regularly to stay informed about our information practices and the choices available to you.
CONTENTS
1. Personal Information Collection, Use, and Disclosure Practices
2. Tracking Technologies
3. Your Choices
4. Third-Party Links and Content
5. Children
6. Disclosures for Individuals in the United States
7. Disclosures for Individuals in Canada
8. Transfer of Personal Information to the United States and Other Countries
9. Data Security
10. Contact Us
1. Personal Information Collection, Use, and Disclosure Practices
A. Personal Information We Collect
The categories of personal information that we may collect about you include the following:
We may collect personal information from the following sources:
We may use your personal information for the following business purposes:
We may disclose your personal information in the following circumstances:
B. Selling or Sharing of Personal Information
We may sell or share identifiers, internet or other electronic network activity, and geolocation data to our advertising and marketing partners, data analytics providers, and social networks for our advertising and marketing purposes.
C. Opt-Out Preference Signals and “Do Not Track”
1. We Honor Opt-Out Preference Signals
We have enabled the Global Privacy Control, which is designed to recognize opt-out preference signals. In order to process your request through an opt-out preference signal, you must use a browser or extension supporting the preference signal. If you choose to use an opt-out preference signal, you will need to turn it on for each browser and each device you use. We treat opt-out preference signals as valid requests to opt-out of the sale, targeted advertising, and sharing of your personal information under privacy laws.
2. Do Not Track
Some web browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Most of these features, when turned on, send a signal or preference to the websites you visit indicating that you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the do not track signal, we currently do not respond to do not track signals.
D. Sensitive Personal Information
ACC collects certain information that is considered “sensitive” under certain United States privacy laws, as described in the table above. Where required by law, we will obtain your consent before processing your sensitive personal information. We only use your sensitive personal information for limited purposes, such as to process an application or manage a lease, and we do not use your sensitive personal information to infer characteristics about you. If you have any questions about our handling of sensitive personal information or to withdraw your consent, please contact us at the email address in Section 10 below.
E. Your Privacy Rights
Residents in the United States, including California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia, may have certain data privacy rights. Subject to certain limitations, you have the following rights:
Right to Access
You have the right to confirm whether we are processing your personal information and to access the personal information we have collected about you.
California residents have the right to request the categories of personal information we have collected, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you.
Right to Deletion
You have the right to request that ACC delete your personal information, subject to certain exceptions. Once we confirm your identity and verify your request, we will delete and direct our service providers to delete your personal information from our records.
Right to Correction
You have the right to request that ACC correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing. Please note that we may provide you with self-service tools to correct your personal information.
Opt-out Rights
You have the right to opt-out of sharing of your personal information for targeted advertising or the sale of your personal information. You may opt-out of the sale of your personal information or sharing of your personal information for targeted advertising by clicking the Do Not Sell or Share My Personal Information link in the footer of our websites.
List of Specific Third Parties and Categories of Third Parties
If you are an Oregon or Minnesota resident, you have the right to receive a list of the specific third parties to whom we have disclosed personal information. If you are a Delaware resident, you have the right to request a list of the categories of third parties with whom we disclosed your personal information. If you are a Maryland resident, you have the right to request a list of the categories of third parties with whom we disclosed personal information.
Right to Appeal
If we decline to act on your request, you may appeal our decision.
We will not discriminate against you for exercising any of your privacy rights.
We do not profile in a manner that would result in legal or similarly significant effects and as such do not offer a profiling opt-out right.
F. Exercising Your Privacy Rights
You may exercise your privacy rights by submitting a request to ACC by one of the following methods:
G. Appealing a Denial of a Privacy Right Request
You may appeal a denial of your privacy right requests by calling us at our toll-free phone number 1-833-665-0160, or by emailing us at privacy@americancampus.com.
H. Authorized Agents
If permitted or required by applicable law, you may exercise your privacy rights through an authorized agent (which may include a guardian or conservator). If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please contact us at the email or phone number listed below in Section 10.
I. Shine the Light Disclosure for California Residents
If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us by email or postal mail using the information provided in the “Contact Us” section. Any such request must include “California Shine the Light Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each calendar year.
7. Disclosures for Individuals in Canada
This Policy applies to collection, use and disclosure of personal information from individuals located in Canada by ACC and its subsidiary, Canadian Campus Communities, Inc., and references to ACC in this Policy include reference to Canadian Campus Communities Inc. In case of conflict with any other section of this Policy, this Section 7 shall govern with respect to individuals located in Canada. If we make material changes to this Policy, we will take reasonable steps to notify you of those changes in compliance with Canadian privacy laws.
A. Data Collection, Use & Disclosure
ACC collects, uses, or discloses your personal information consistent with this Policy. Please refer to the sections of this privacy policy describing personal information collected directly and indirectly from ACC applicants, residents, residents’ guarantors, prospective residents, prospective residents’ guarantors, and website visitors above. We hope this information helps you better understand the types of personal information we collect, and the choices or opt-out rights you have for this collection.
ACC collects personal information only for purposes that a reasonable person would consider appropriate in the circumstances. We retain personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, as may be required by law (e.g., for tax and accounting purposes), or as otherwise communicated to you.
B. Video Surveillance
ACC uses closed circuit television and digital recorders to monitor our Canadian properties for security and safety purposes.
C. Your Personal Information Rights
Canadian residents can access or update the personal information ACC holds on them, as further described in the “Your Choices” section of the Privacy Policy above. You may also withdraw consent to the continued use or disclosure of your personal information, subject to limitations provided by applicable data privacy laws. If you are in Quebec, you may also request to receive or transmit a portable copy of your personal information in a structured, commonly used technological format, subject to limitations provided under applicable privacy laws.
You may exercise your rights by contacting our Privacy Office at the information set out at the “Contact Us” section below. We may need to verify your identity before we can process your request.
D. Accountability
ACC endeavors to maintain physical, technical, and procedural safeguards that are appropriate to the sensitivity of the personal information in question. These safeguards are designed to prevent your personal information from loss and unauthorized access, collection, use, disclosure, copying, modification, disposal, or destruction. Moreover, we implement, amongst others, the following measures to protect your personal information:
E. Complaints Process
If you have any complaints or concerns about our processing of your personal information, please contact us at the information provided below.
Our process for dealing with complaints related to the protection of personal information generally includes:
ACC is headquartered in the United States, and we have operations and service providers in the United States and Canada. Therefore, we and our service providers and vendors may transfer your personal information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction. If you are located in Canada, please be advised that your personal information may be communicated outside of Canada (including outside of Quebec if you are located in Quebec). Personal information transferred or communicated outside of Canada may be accessible to foreign courts, law enforcement, and national security entities. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it. If you have any questions or wish to receive further written information about the collection, use, disclosure, or storage of personal information by our service providers or affiliates outside of Canada, please contact our Privacy Office at the information provided below.
9. Data Security
We strive to maintain appropriate administrative, technical, and physical safeguards that are designed to help protect personal information collected or received through the Services, taking into account the volume, sensitivity, intended use, and format of the personal information. We limit access to your personal information to our trained employees who we reasonably believe need access to that information to provide products or services to you or in order to do their jobs.
Although we follow reasonable procedures to safeguard information, transmission via the Internet is not completely secure and we cannot guarantee the security of your information submitted online.
10. Contact Us
If you have questions or concerns about your privacy or this Policy, please contact us at:
American Campus Communities
Attn: Privacy Office
12700 Hill Country Blvd, Suite T-200
Austin, TX 78738
Call us at 1-833-665-0160
You may also contact our Privacy Office at privacy@americancampus.com
Effective Date: June 6th, 2025
American Campus Communities LLC (“American Campus Communities,” “ACC,” “we,” “us,” or “our,”) respects the privacy of our users (“you” or “your”). This privacy policy (“Policy”) applies to personal information we collect online and offline, such as when you visit our campus properties, visit the websites we operate that display this Policy, any website that links to this Policy, or when you otherwise interact with us, such as through our customer support channels (collectively, our “Services”). This Policy also applies to personal information we collect about individuals with whom we have a business relationship.
This Policy does not apply to ACC employees or job applicants. Please see our California Recruitment Privacy Notice for further details.
Personal information is data that can be used to directly or indirectly identify an individual. This Policy is intended to inform you of the personal information that we collect, use, and disclose, why we process this personal information, and the ways in which we will protect your personal information.
We may change this Policy from time to time. If we make changes, we will notify you by revising the date at the top of this Policy. We encourage you to review this Policy regularly to stay informed about our information practices and the choices available to you.
CONTENTS
1. Personal Information Collection, Use, and Disclosure Practices
2. Tracking Technologies
3. Your Choices
4. Third-Party Links and Content
5. Children
6. Disclosures for Individuals in the United States
7. Disclosures for Individuals in Canada
8. Transfer of Personal Information to the United States and Other Countries
9. Data Security
10. Contact Us
1. Personal Information Collection, Use, and Disclosure Practices
A. Personal Information We Collect
The categories of personal information that we may collect about you include the following:
- Contact Information and Other Identifiers: We may collect certain identifiers and contact information, such as your name, current and previous mailing addresses, phone number, email address, geolocation, Social Security number, Social Insurance Number, government-issued identification number, passport number, IP address, and other similar identifiers.
- Employment or Other Professional Information: We may collect employment-related information, such as your current and past job history, job title, and place of work.
- Education Information: We may collect information about your education such as your academic major and educational institution.
- Demographic Information: We may collect certain demographic information, such as your date of birth, marital status, veteran or military status, gender, and background check information.
- Internet or Other Electronic Activity: We may collect information about your activity on our website, such as your browsing and click history when you are using our Services.
We may collect personal information from the following sources:
- Personal Information You Provide to Us: We receive personal information from you, such as when you submit an application, communicate with us via phone or email, participate in surveys, or provide information in your online account.
- Personal Information We Collect from Other Parties: We may collect contact and identifying information from internet listing services, our affiliates and subsidiaries, credit reporting agencies, background check agencies, and/or collections agencies.
- Personal Information We Collect Automatically: We may collect Internet or other electronic activity automatically using tools like browser cookies, web beacons, tracking pixels, and other similar technologies. This activity is further described in the “Tracking Technologies” section below.
We may use your personal information for the following business purposes:
- Transactional Purposes: We may use your personal information to:
- provide our Services;
- create, maintain, customize, and secure your account with us;
- process transactions and send you related information, including confirmations, receipts, invoices, and resident/tenant experience surveys;
- provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses; and
- provide you with email alerts, event registrations and other notices concerning our Services, events, or news that may be of interest to you.
- Analytical Purposes: We may use your personal information to analyze preferences, trends, and statistics in connection with our Services.
- Maintenance and Improvement of Services and Websites: We may use your personal information to:
- provide and maintain functionality on our websites;
- improve our websites and Services;
- optimize amenities at our properties; and
- help us diagnose technical and service problems and administer our websites.
- Security and Fraud Prevention: We may use your personal information to protect our websites, our properties, you and other residents, and for fraud detection, theft prevention, and emergency response purposes.
- Legal and Financial: We may use your personal information to comply with our legal, regulatory, and financial obligations, as otherwise permitted or required by law.
- Aggregate and De-Identified Information: We may also aggregate or de-identify information such that it cannot reasonably be used to identify you. When doing so, we commit to maintain and use the information in an aggregated or de-identified form and not attempt to re-identify the information, unless permitted or required by law.
We may disclose your personal information in the following circumstances:
- Our Service Providers and Vendors: We may disclose personal information to other parties that help us provide our Services, such as:
- Building maintenance staff;
- Property managers;
- IT providers;
- Payment Processors;
- Communications providers;
- Screening and insurance providers; and
- Credit reporting agencies.
- Our Affiliates and Subsidiaries: We may disclose personal information (including Internet or other electronic activity) with our affiliates, subsidiaries, and parent entities so that they may assist us in providing our Services to you and other companies under common control and ownership.
- Corporate restructuring: If we enter into a business transaction with another party including the financing, acquisition, bankruptcy, dissolution, transfer, divestiture, sale, transfer, or merger of all or a part of our business, we may disclose your personal information to the other party for the purposes of the business transaction.
- Law Enforcement and Courts: We may disclose your personal information where we believe the disclosure is required by law, or otherwise necessary to comply with the law, regulatory requirements, requests from public authorities, or to enforce our agreements or policies, to protect our rights and property and to prevent, investigate, and prosecute criminal activities. In matters involving a danger to personal or public safety, we may voluntarily provide your personal information to the appropriate government authorities.
- With Your Consent: We may disclose personal information with your consent or at your direction.
E. Retention of Your Personal Information
We keep your personal information for as long as is necessary for the purposes described in this Policy, which generally means holding the personal information for as long as one of the following apply:
2. Tracking Technologies
We and our vendors may use a variety of tracking technologies, including cookies, beacons, and pixels that collect certain information when you interact with us. Depending on your device and browser settings, these tracking technologies may collect your IP address, device identifiers, user preferences, approximate geolocation, the pages you click on, and the website you visited immediately beforehand. Additionally, these technologies may collect details about how you interact with our Services.
We may use these technologies for various purposes, including to provide functionality, help us route traffic between servers, understand how the Services are performing, how visitors use our Services, improve features and content on the Services, and for advertising purposes. We may combine certain information collected through tracking technologies with other information we obtain about you, which may include information we obtain from our vendors. We or other parties may collect personal information about your online activities over time when you use the Services.
A. Analytics
Many of our websites and apps use Google Analytics. You can learn more about how Google Analytics collects and processes data at “How Google uses information from sites or apps that use our services” and in the Google Privacy Policy. Information about Google Analytics’ current opt-outs for web is available here.
In some cases, we may integrate the analytics services we use with certain advertising services that are also made available by our analytics providers. For example, we integrate Google Analytics with the following Google advertising features:
B. Advertising
Advertising technologies we use may include, but are not limited to:
Meta. Meta may use cookies, web beacons, and other storage technologies, including the Meta Pixel, to collect or receive information from websites, apps, and elsewhere on the Internet and use that information to target and deliver ads.
Certain advertising tracking technology vendors we work with to serve Interest-based Ads participate in the Digital Advertising Alliance (“DAA”) AdChoices Program and may display within the ads an Advertising Option Icon for Interest-based Ads that links to an opt-out tool which allows you to exercise choices regarding certain advertisements. You can learn more about the DAA AdChoices Program at http://www.youradchoices.com/ and its opt-out program for mobile apps at http://www.aboutads.info/appchoices.
In addition, certain advertising networks and exchanges we work with may participate in the Network Advertising Initiative (“NAI”). The NAI has developed a tool that allows consumers to opt out of certain ads delivered by the NAI members’ ad networks. To learn more about opting out of such targeted advertising or to use the NAI tool, see http://www.networkadvertising.org/choices/. Please be aware that, even if you opt out of certain kinds of interest-based ads, you may continue to receive non-targeted ads.
In Canada, please visit: http://youradchoices.ca/choices/.
3. Your Choices
A. Account Information
You may update certain account information at any time by logging into your account or emailing us at privacy@americancampus.com. If you wish to delete your account, please email us at privacy@americancampus.com, but note that we may retain certain information as required by law or for our legitimate business purposes.
B. Communications Preferences
You may opt out of receiving text messages or promotional emails from ACC by following the instructions in those communications. If you opt out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.
4. Third-Party Content and Links
Our websites may contain links to other sites for organizations that are not directly affiliated with us. We are not responsible for the content or privacy practices of these sites and recommend that you review their privacy statements.
5. Children
Our Services are directed for a general audience and are not directed at minors. We do not knowingly collect personal information of consumers under the age of 16.
6. Disclosures for Individuals in the United States
This section contains additional information for residents in the United States regarding our personal information handling practices and your data privacy rights.
A. Categories of Personal Information Collected and Disclosed
The disclosures below describe our current practices and our practices for the 12 months preceding the Effective Date of this Policy. For additional details on our personal information collection, use, and disclosures and the sources of such collection, please see Sources of Your Personal Information in Section 1.B and Personal Information We Collect in Section 1.A above. For additional details on how we use your personal information for our business and commercial purposes, please see Purposes and Uses of Your Personal Information in Section 1.C above:
We keep your personal information for as long as is necessary for the purposes described in this Policy, which generally means holding the personal information for as long as one of the following apply:
- Your personal information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the personal information;
- Your personal information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the personal information was collected; or
- We are otherwise required or permitted to keep your personal information by applicable laws or regulations.
2. Tracking Technologies
We and our vendors may use a variety of tracking technologies, including cookies, beacons, and pixels that collect certain information when you interact with us. Depending on your device and browser settings, these tracking technologies may collect your IP address, device identifiers, user preferences, approximate geolocation, the pages you click on, and the website you visited immediately beforehand. Additionally, these technologies may collect details about how you interact with our Services.
We may use these technologies for various purposes, including to provide functionality, help us route traffic between servers, understand how the Services are performing, how visitors use our Services, improve features and content on the Services, and for advertising purposes. We may combine certain information collected through tracking technologies with other information we obtain about you, which may include information we obtain from our vendors. We or other parties may collect personal information about your online activities over time when you use the Services.
A. Analytics
Many of our websites and apps use Google Analytics. You can learn more about how Google Analytics collects and processes data at “How Google uses information from sites or apps that use our services” and in the Google Privacy Policy. Information about Google Analytics’ current opt-outs for web is available here.
In some cases, we may integrate the analytics services we use with certain advertising services that are also made available by our analytics providers. For example, we integrate Google Analytics with the following Google advertising features:
- Remarketing with Google Analytics
- Cross Device Remarketing & Reporting
- Google Analytics Demographics & Interest Reporting
- Google Display Network Impression Reporting
B. Advertising
Advertising technologies we use may include, but are not limited to:
Meta. Meta may use cookies, web beacons, and other storage technologies, including the Meta Pixel, to collect or receive information from websites, apps, and elsewhere on the Internet and use that information to target and deliver ads.
Certain advertising tracking technology vendors we work with to serve Interest-based Ads participate in the Digital Advertising Alliance (“DAA”) AdChoices Program and may display within the ads an Advertising Option Icon for Interest-based Ads that links to an opt-out tool which allows you to exercise choices regarding certain advertisements. You can learn more about the DAA AdChoices Program at http://www.youradchoices.com/ and its opt-out program for mobile apps at http://www.aboutads.info/appchoices.
In addition, certain advertising networks and exchanges we work with may participate in the Network Advertising Initiative (“NAI”). The NAI has developed a tool that allows consumers to opt out of certain ads delivered by the NAI members’ ad networks. To learn more about opting out of such targeted advertising or to use the NAI tool, see http://www.networkadvertising.org/choices/. Please be aware that, even if you opt out of certain kinds of interest-based ads, you may continue to receive non-targeted ads.
In Canada, please visit: http://youradchoices.ca/choices/.
3. Your Choices
A. Account Information
You may update certain account information at any time by logging into your account or emailing us at privacy@americancampus.com. If you wish to delete your account, please email us at privacy@americancampus.com, but note that we may retain certain information as required by law or for our legitimate business purposes.
B. Communications Preferences
You may opt out of receiving text messages or promotional emails from ACC by following the instructions in those communications. If you opt out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.
4. Third-Party Content and Links
Our websites may contain links to other sites for organizations that are not directly affiliated with us. We are not responsible for the content or privacy practices of these sites and recommend that you review their privacy statements.
5. Children
Our Services are directed for a general audience and are not directed at minors. We do not knowingly collect personal information of consumers under the age of 16.
6. Disclosures for Individuals in the United States
This section contains additional information for residents in the United States regarding our personal information handling practices and your data privacy rights.
A. Categories of Personal Information Collected and Disclosed
The disclosures below describe our current practices and our practices for the 12 months preceding the Effective Date of this Policy. For additional details on our personal information collection, use, and disclosures and the sources of such collection, please see Sources of Your Personal Information in Section 1.B and Personal Information We Collect in Section 1.A above. For additional details on how we use your personal information for our business and commercial purposes, please see Purposes and Uses of Your Personal Information in Section 1.C above:
| Category of Personal Information We Collect | Purposes for Collection, Use, and Disclosure |
| Identifiers, such as name, phone number, current or previous mailing address, email address, Social Security number, government-issued identification number, passport number, IP address, or similar information. | - To provide and improve our Services; - to learn more about our website users; - for roommate matching; - to verify your identity; - for our advertising and marketing purposes; and - for our compliance purposes, including complying with applicable laws, regulations, or legal processes. |
| Any personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name, signature, physical characteristics or description, Social Security number, address, telephone number, passport number, driver’s license number, insurance information, employment history, or financial information. | - To provide and improve our Services; - to learn more about our website users; - to verify your identity; - for our advertising and marketing purposes; - for security and integrity, including detecting security incidents and protecting against malicious, deceptive, or illegal activity; and - for our compliance purposes, including complying with applicable laws, regulations, or legal processes. |
| Characteristics of protected classifications under California or federal law, such as age, marital status, and military or veteran status. | - To provide and improve our Services; - for roommate matching; and - for our compliance purposes, including complying with applicable laws, regulations, or legal processes. |
| Commercial information, such as information regarding the products or services purchased, obtained, or considered, other purchasing histories or tendencies, utility bills, insurance claimant name and contact information, lease information, rental history, and rent amount. | - To provide and improve our Services; - to learn more about our website users; - for our advertising and marketing purposes; and - for our compliance purposes, including complying with applicable laws, regulations, or legal processes. |
| Internet or other electronic network activity, such as IP addresses, electronic key usage, and browsing and click history when using our websites. | - To provide and improve our Services; - to learn more about our website users; - for advertising and marketing; - for security and integrity, including detecting security incidents and protecting against malicious, deceptive, or illegal activity; and - for our compliance purposes, including complying with applicable laws, regulations, or legal processes. |
| Geolocation data | - To provide and improve our Services; - learn more about our website users; - for advertising and marketing; - for security and integrity, including detecting security incidents and protecting against malicious, deceptive, or illegal activity; and - for our compliance purposes, including complying with applicable laws, regulations, or legal processes. |
| Audio, electronic, visual or similar information, such as video or photo footage that we may capture, dates and times that you arrive to and leave our premises, and information about when you enter a particular unit and a defined area of common space. | - To provide and improve our Services; - for security and integrity, including detecting security incidents and protecting against malicious, deceptive, or illegal activity; and - for our compliance purposes, including complying with applicable laws, regulations, or legal processes. |
| Professional or employment-related information, such as current and past job history, job title, and, in the case of prospective and current residents or tenants, pay history and income. | - To provide and improve our Services; - for security and integrity, including detecting security incidents and protecting against malicious, deceptive, or illegal activity; and - for our compliance purposes, including complying with applicable laws, regulations, or legal processes. |
| Education information, such as academic major, educational institution, or degree. | - To provide and improve our Services; and - for roommate matching. |
| Inferences drawn from any of the information identified herein, during roommate matching searches that may reflect a person’s preferences, predispositions, behavior, and attitudes. | - To provide and improve our Services; and - for roommate matching. |
| Sensitive personal information, such as sex life or sexual orientation (if revealed from marital status), Social Security number (including Taxpayer Identification number), driver’s license number, passport number, and financial information. |
- To provide and improve our Services; - to verify your identity and for fraud prevention; - for security and integrity, including detecting security incidents and protecting against malicious, deceptive, or illegal activity; and - for our compliance purposes, including performing debt collection, complying with applicable laws, regulations, or legal processes. |
B. Selling or Sharing of Personal Information
We may sell or share identifiers, internet or other electronic network activity, and geolocation data to our advertising and marketing partners, data analytics providers, and social networks for our advertising and marketing purposes.
C. Opt-Out Preference Signals and “Do Not Track”
1. We Honor Opt-Out Preference Signals
We have enabled the Global Privacy Control, which is designed to recognize opt-out preference signals. In order to process your request through an opt-out preference signal, you must use a browser or extension supporting the preference signal. If you choose to use an opt-out preference signal, you will need to turn it on for each browser and each device you use. We treat opt-out preference signals as valid requests to opt-out of the sale, targeted advertising, and sharing of your personal information under privacy laws.
2. Do Not Track
Some web browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Most of these features, when turned on, send a signal or preference to the websites you visit indicating that you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the do not track signal, we currently do not respond to do not track signals.
D. Sensitive Personal Information
ACC collects certain information that is considered “sensitive” under certain United States privacy laws, as described in the table above. Where required by law, we will obtain your consent before processing your sensitive personal information. We only use your sensitive personal information for limited purposes, such as to process an application or manage a lease, and we do not use your sensitive personal information to infer characteristics about you. If you have any questions about our handling of sensitive personal information or to withdraw your consent, please contact us at the email address in Section 10 below.
E. Your Privacy Rights
Residents in the United States, including California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia, may have certain data privacy rights. Subject to certain limitations, you have the following rights:
Right to Access
You have the right to confirm whether we are processing your personal information and to access the personal information we have collected about you.
California residents have the right to request the categories of personal information we have collected, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you.
Right to Deletion
You have the right to request that ACC delete your personal information, subject to certain exceptions. Once we confirm your identity and verify your request, we will delete and direct our service providers to delete your personal information from our records.
Right to Correction
You have the right to request that ACC correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing. Please note that we may provide you with self-service tools to correct your personal information.
Opt-out Rights
You have the right to opt-out of sharing of your personal information for targeted advertising or the sale of your personal information. You may opt-out of the sale of your personal information or sharing of your personal information for targeted advertising by clicking the Do Not Sell or Share My Personal Information link in the footer of our websites.
List of Specific Third Parties and Categories of Third Parties
If you are an Oregon or Minnesota resident, you have the right to receive a list of the specific third parties to whom we have disclosed personal information. If you are a Delaware resident, you have the right to request a list of the categories of third parties with whom we disclosed your personal information. If you are a Maryland resident, you have the right to request a list of the categories of third parties with whom we disclosed personal information.
Right to Appeal
If we decline to act on your request, you may appeal our decision.
We will not discriminate against you for exercising any of your privacy rights.
We do not profile in a manner that would result in legal or similarly significant effects and as such do not offer a profiling opt-out right.
F. Exercising Your Privacy Rights
You may exercise your privacy rights by submitting a request to ACC by one of the following methods:
- Phone: Call us at 1-833-665-0160; or
- Email: Email us at privacy@americancampus.com;
G. Appealing a Denial of a Privacy Right Request
You may appeal a denial of your privacy right requests by calling us at our toll-free phone number 1-833-665-0160, or by emailing us at privacy@americancampus.com.
H. Authorized Agents
If permitted or required by applicable law, you may exercise your privacy rights through an authorized agent (which may include a guardian or conservator). If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please contact us at the email or phone number listed below in Section 10.
I. Shine the Light Disclosure for California Residents
If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us by email or postal mail using the information provided in the “Contact Us” section. Any such request must include “California Shine the Light Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each calendar year.
7. Disclosures for Individuals in Canada
This Policy applies to collection, use and disclosure of personal information from individuals located in Canada by ACC and its subsidiary, Canadian Campus Communities, Inc., and references to ACC in this Policy include reference to Canadian Campus Communities Inc. In case of conflict with any other section of this Policy, this Section 7 shall govern with respect to individuals located in Canada. If we make material changes to this Policy, we will take reasonable steps to notify you of those changes in compliance with Canadian privacy laws.
A. Data Collection, Use & Disclosure
ACC collects, uses, or discloses your personal information consistent with this Policy. Please refer to the sections of this privacy policy describing personal information collected directly and indirectly from ACC applicants, residents, residents’ guarantors, prospective residents, prospective residents’ guarantors, and website visitors above. We hope this information helps you better understand the types of personal information we collect, and the choices or opt-out rights you have for this collection.
ACC collects personal information only for purposes that a reasonable person would consider appropriate in the circumstances. We retain personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, as may be required by law (e.g., for tax and accounting purposes), or as otherwise communicated to you.
B. Video Surveillance
ACC uses closed circuit television and digital recorders to monitor our Canadian properties for security and safety purposes.
C. Your Personal Information Rights
Canadian residents can access or update the personal information ACC holds on them, as further described in the “Your Choices” section of the Privacy Policy above. You may also withdraw consent to the continued use or disclosure of your personal information, subject to limitations provided by applicable data privacy laws. If you are in Quebec, you may also request to receive or transmit a portable copy of your personal information in a structured, commonly used technological format, subject to limitations provided under applicable privacy laws.
You may exercise your rights by contacting our Privacy Office at the information set out at the “Contact Us” section below. We may need to verify your identity before we can process your request.
D. Accountability
ACC endeavors to maintain physical, technical, and procedural safeguards that are appropriate to the sensitivity of the personal information in question. These safeguards are designed to prevent your personal information from loss and unauthorized access, collection, use, disclosure, copying, modification, disposal, or destruction. Moreover, we implement, amongst others, the following measures to protect your personal information:
- Internal policies and procedures that define the roles and responsibilities of our employees, representatives, and service providers throughout the life cycle of an item of information and limit their access to that information on a “need-to-know” basis;
- If the information is collected or stored electronically, technical safeguards such as encryption, firewalls, passwords, anti-virus software, and similar measures;
- A Chief Legal Officer that monitors ACC’s compliance with applicable privacy laws; and
- Procedures for receiving, investigating, and responding to complaints or inquiries about ACC’s information handling practices.
E. Complaints Process
If you have any complaints or concerns about our processing of your personal information, please contact us at the information provided below.
Our process for dealing with complaints related to the protection of personal information generally includes:
- Acknowledgement of receipt without undue delay;
- Appropriate steps to confirm the identity of the complainant, and to obtain the details of the complaint as well as any relevant documentation;
- Consideration of applicable laws;
- An appropriate, fair and impartial investigation; and
- Communicating the outcome of the investigation to the complainant, including any remediation measures we take (where justified).
ACC is headquartered in the United States, and we have operations and service providers in the United States and Canada. Therefore, we and our service providers and vendors may transfer your personal information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction. If you are located in Canada, please be advised that your personal information may be communicated outside of Canada (including outside of Quebec if you are located in Quebec). Personal information transferred or communicated outside of Canada may be accessible to foreign courts, law enforcement, and national security entities. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it. If you have any questions or wish to receive further written information about the collection, use, disclosure, or storage of personal information by our service providers or affiliates outside of Canada, please contact our Privacy Office at the information provided below.
9. Data Security
We strive to maintain appropriate administrative, technical, and physical safeguards that are designed to help protect personal information collected or received through the Services, taking into account the volume, sensitivity, intended use, and format of the personal information. We limit access to your personal information to our trained employees who we reasonably believe need access to that information to provide products or services to you or in order to do their jobs.
Although we follow reasonable procedures to safeguard information, transmission via the Internet is not completely secure and we cannot guarantee the security of your information submitted online.
10. Contact Us
If you have questions or concerns about your privacy or this Policy, please contact us at:
American Campus Communities
Attn: Privacy Office
12700 Hill Country Blvd, Suite T-200
Austin, TX 78738
Call us at 1-833-665-0160
You may also contact our Privacy Office at privacy@americancampus.com