Privacy Policy and Terms of Use

UCLA is committed to web accessibility for everyone.

If you are experiencing a web accessibility issue, please contact the ADA/504 Office for further assistance by emailing ada@saonet.ucla.edu or calling (310) 206-8049.

If you are a student and would like to file a disability-based discrimination grievance, please see UCLA Procedure 230.2: Student Grievances Regarding Violations of Anti-Discrimination Laws or University Policies on Discrimination Based on Disability.

General

Our Sites are generally made available to you to provide information about our university and the services offered. You can browse our Sites without providing any personal information such as your name, mailing address, email address, phone number or Social Security number.

Non-Personal Information

When you access and use our Sites, some information is automatically collected. For example, we may collect information about your computer’s operating system, access times, browser type and language and the website that referred you to us. We also collect information about your usage and activity on our Sites.

Cookies

When you visit our Sites, you may be issued a “cookie,” which helps track your session while online. Cookies are small data files stored on your hard drive. Among other things, cookies help to make your site visit more relevant and personalized for you. We use cookies to see which areas and features are popular and to count visits to our Sites. Most browsers are initially set to accept cookies. If you would prefer, you may set your browser to refuse cookies or alert you when cookies are being sent; however, it is possible that some parts of our Sites will not function properly if you do so.

Web Beacons

The Sites and any communications sent by UCLA may contain electronic images (generally, single-pixel “.gif” images) called “web beacons.” These web beacons allow UCLA and third parties authorized by UCLA to monitor and collect certain information about the viewer of a web page, email message or other communication, such as the type of browser requesting the web beacon, the device identifier of the device the web beacon is sent to and the time the web beacon was viewed. Web beacons may be used to count unique users, visits and page views; monitor traffic and conversion patterns; personalize your experience when you visit the Sites, including advertising and content you see; and determine whether or not messages were opened, links were clicked and/or notifications/offers were acted upon.

Third-Party Advertising

We may also allow third parties to use cookies or other tracking technologies to collect information about your use of our Sites, including your IP address, pages viewed and conversion information. This information may be used, among other things, to deliver advertising targeted to your interests and to better understand the usage and visitation of our Sites and other sites tracked by these third parties. This privacy policy does not apply to, and we are not responsible for, third-party cookies or other tracking technologies. We encourage you to check the privacy policies of advertisers and/or ad services to learn more about their privacy practices. If you would like more information about third-party advertising or to opt out of having your information used in this way, please visit https://thenai.org/how-to-opt-out.

Personal Information

We also collect personal information that you voluntarily provide to us, such as when you apply for admission, register for an account, participate in a promotion or sweepstakes, request a brochure or other materials, sign up for a tour, locate or make inquiries to specific departments, make a donation, request information or otherwise contact UCLA. Such information may include: contact information (name, address, telephone number, social media username/handle, mobile phone and/or email address, Internet Protocol (IP) address etc.); academic area or interest (biology, anthropology, human studies, medicine, etc.); financial information (financial aid application history, payment history, current and estimated loan payments, donation attribution and amount, etc.); demographic information (age, academic status, marital status, size of household, income, etc.); and marketing profile information (admissions date, graduation date, alumni status, parent, friend, etc.) We may also collect the names and email addresses of your friends and family, if you choose to provide UCLA with this information. Finally, we may obtain information from other sources and combine that with the information we collect directly from you.

Children’s Personal Information

Except for students enrolled in UC programs, our Services are not directed to, and we do not intend to, or knowingly, collect or solicit Personal Information from children under the age of 13. If an individual is under the age of 13, they should not use our Services or otherwise provide us with any Personal Information either directly or by other means. If a child under the age of 13 has provided Personal Information to us, we encourage the child’s parent or guardian to contact us to request that we remove the Personal Information from our systems. If we learn that any Personal Information, we collect has been provided by a child under the age of 13, we will promptly take steps to delete the information.

Payment Information

If you make a purchase at one of our gift shops or register for one of our Events or Conferences, we may collect payment information in order to complete your transaction. We use third party payment processors to process credit card payments made to us. We do not retain any personally identifiable financial information in connection with credit card payments, such as credit card numbers. All information is provided directly by you to our third-party processor. The payment processor’s use of your personal information is governed by their privacy notice.

Non-Personal Information

Non-personal information is used to generate statistics and to measure site activity in order to improve the usefulness of the site for our visitors.

Personal Information

Personal information allows us to provide you with products, services and information and enables us to offer a customized experience on our Sites. We use personal information for the purposes described in this privacy policy or otherwise disclosed to you on our Sites. For example, personal information may be used to:

• operate and improve our Sites;
• provide information about our institution and send you related information, including confirmations, brochures, academic notices, updates, security alerts and support and administrative messages;
• notify you of the closest UCLA property;
• process and deliver contest entries and rewards;
• respond to comments, questions or requests for information and provide customer service;
• communicate with you about our classes, achievements, new contests, promotions, rewards, special offers, upcoming events and other news about UCLA and our selected partners;
• generate site analytics to improve our website and the user experience;
• link or combine with personal information we get from third parties to help understand your needs and provide you with better service and information; and
• provide marketing communications and advertising, including but not limited to, marketing to you or offering you through digital display, search, email, or direct mail, information and updates on products or services we think that you may be interested in, to conduct market research, and to inform our marketing and advertising activities.

UCLA may store and process personal information in the United States and other countries.

We do not share your personal information with third parties except as described in this privacy policy or as otherwise disclosed to you on our Sites. For example, we may share personal information as follows:

• with our Financial Aid partner for the purpose of offering aid and services to our students or prospective students;
• if we notify you on the Site/s that the information you provide will be shared in a particular manner and you provide such information;
• with vendors, contractors, consultants and other service providers who are working on our behalf and need access to your information to carry out their work for us;
• (i) to comply with laws or to respond to lawful requests and legal process, (ii) to protect our rights and property and those of our agents, customers and others, including to enforce our agreements, policies and Terms of Use or (iii) in an emergency to protect UCLA and the safety of our students, faculty and staff or any third party; and
• we may also share aggregated or anonymous information that does not directly identify you.

Under California's Shine the Light law, Cal. Civ. Code § 1798.83, California residents have the right to request and obtain, once per year, information regarding UCLA’s disclosure of personal information to third parties for their own direct marketing purposes. To request a list of the categories of information UCLA has shared, and the names and addresses of such third parties, please send your request to:

UCLA Records Management Office
10920 Wilshire Blvd, Suite 530
Los Angeles, CA 90095

You may opt out of promotional emails and SMS from UCLA or change your preferences at any time. To opt out of SMS messages, you can also text UCLASTOP from the cell phone that you have registered with UCLA. In addition, you can opt out of receiving commercial emails by following the instructions in those emails, but note that we may still send you non-opted-in emails, such as emails about your account or our ongoing business or academic relations. You may also request changes to your contact preferences and the personal information by writing to:

UCLA Records Management Office
10920 Wilshire Blvd, Suite 530
Los Angeles, CA 90095

We take reasonable measures to protect personal information in an effort to prevent loss, misuse and unauthorized access, disclosure, alteration and destruction.

Our Sites may contain links to third-party websites. This privacy policy does not apply to the linked sites, and we do not control, nor are we responsible for, the content or privacy and security practices of those sites. Any personal information you provide to a linked site is provided directly to a third party and is subject to such third party’s privacy policy. We encourage you to learn more about such third party’s privacy and security practices and policies before providing any of your personal information.

Last Modified: August 19, 2025
These Privacy Disclosures set out information about how we use your personal data if you are located in the European Economic Area (“EEA”), United Kingdom ("UK"), or Switzerland, or otherwise engage in or access our EEA, UK or Switzerland Services from those regions. Please ensure that you have read and understood these Privacy Disclosures before you access or use the Service.

Personal Data: When we use the term “personal data” in these Privacy Disclosures, we mean information relating to an identified or identifiable natural person.

Controller: The Regents of the University of California, a corporation established under the laws of the Constitution of the State of California, and duly incorporated and organized under the laws of United States of America, having its registered address at 1111 Franklin Street, Oakland, CA 94607, is the “controller” responsible for the processing of personal data in connection with our Service. This means that we determine and are responsible for how your personal data is used.

LEGAL BASES FOR THE PROCESSING
We may use your personal data based on the following legal grounds according to the Regulation (EU) 2016/679 (the “EU GDPR”) or, where applicable, the “UK GDPR” as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the UK European Union (Withdrawal) Act 2018 GDPR:

• Perform our contractual services, including prior to entering into a contract with you. If you order services from us or if you contact us to request our services, we use your personal data to provide you with these services, including for account and contract management, to facilitate user benefits and services, including customer support, and evaluate your candidacy for employment and to facilitate the onboarding process.
• Justified by our legitimate interests. The usage of your personal data may also be necessary for our own business interests. For example, we may use some of your personal data to send gifts to you; market our Services to individuals; administer, improve and personalize our services, including by recognizing an individual and remembering their information when they return to our services and analyzing our client-base; process payment for our services; conduct market research; opportunity tracking, conversion and lead generation; test, enhance, update and monitor the services, or diagnose or fix technology problems; help maintain the safety, security and integrity of our property and services, technology assets and business; enforce our agreements,  resolve disputes, carry out our obligations and enforce our rights, and protect our business interests and the interests and rights of third parties; and prevent, investigate or provide notice of fraud or unlawful or criminal activity.
• Consent. In some cases, we may ask you to grant us separate consent to use your personal data.
• Compliance with legal obligations. We are obligated to retain certain personal data because of legal requirements, for example, tax or commercial laws, or we may be required by law enforcement to provide personal data on request.

The table at Annex 1 and Annex 2 set out further detail about the categories of personal data we collect about you, how we use that information when you use the Services, as well as the legal basis which we rely on to process the personal data and recipients of that personal data.

We may link or combine the personal data we collect about you and the information we collect automatically. We may anonymize and aggregate any of the personal data we collect (so that it is no longer linked to you and does not identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving the Service. We may also share such anonymized and aggregated information with others.

We will also indicate to you, at the point that we collect personal data from you, if the provision of certain personal data is mandatory or optional. Some information, such as your name, address, payment transaction information, and information on your requested services, may be necessary for your use of certain features and functionalities of the Service. If you choose not to provide personal data marked as mandatory, we may not be able to provide those aspects of the Service to you, or to respond to your queries and other requests.

1. HOW LONG WE STORE YOUR PERSONAL DATA
   We generally store your personal data for the duration necessary for the data collection purposes identified by the specific UC application or program, unless we are required to do so to comply with applicable law or if we believe your personal data may be necessary to deal with a complaint or legal claim.

   Marketing and Advertising
   We may contact you with information about our services, including sending you marketing messages and asking for your feedback on our services. Most marketing messages we send will be by email. For some marketing messages, we may use Personal Information we collect about you, excluding your searches, to help us determine the most relevant marketing information to share with you.

   We will only send you such marketing messages if you have given us your consent to do so. You can withdraw your consent any time by clicking on the unsubscribe link at the bottom of our marketing emails.

   Security and Storage
   We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, change or damage.  We will never send you unsolicited emails or contact you by phone requesting your account ID, password, credit or debit card information or national identification numbers.

   International Transfers of your Personal Information
   The personal data we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third-party service providers have operations. If you are located in the EEA, United Kingdom, or Switzerland your personal data may be processed outside of those regions, including in the United States.

   In the event of such a transfer, we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards that require the recipient to treat the personal data in a manner that is essentially equivalent to that guaranteed in the country you are in. If you are located in the EEA, United Kingdom or Switzerland, these safeguards include entering into agreements that incorporate the standard contractual clauses adopted by the European Commission and approved by the UK Information Commissioner, and formally recognized by the Swiss Federal Data Protection and Information Commissioner.

   Profiling and Automated Decision – Making
   We may analyze personal data we have collected about you to create a profile of your interests and preferences so that we can contact you with information that is relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively. We may also use personal data about you to detect and reduce fraud and credit risk.

   We may use your personal data for automated individual decision-making, in which case we will inform you of such processing activities and any potential impact of such processing activities.  You have the right to not be subject to decisions solely based on automated decision-making, including profiling, which produces legal effects concerning you or similar significant effects on you. You may opt-out of automated decision-making or profiling by emailing gdpr@compliance.ucla.edu.

2. YOUR RIGHTS IN RESPECT OF YOUR PERSONAL DATA
   In accordance with applicable privacy law, you have the following rights in respect of your personal data that we hold:
   

   1. Right of access. You have the right to obtain:
      1. confirmation of whether, and where, we are processing your personal data;
      2. information about the categories of personal data we are processing, the purposes for which we process your personal data and information as to how we determine applicable retention periods;
      3. information about the categories of recipients with whom we may share your personal data; and
      4. a copy of the personal data we hold about you.
   2. Right of portability. You have the right, in certain circumstances, to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal data to another person.
   3. Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal data we hold about you without undue delay.
   4. Right to erasure. You have the right, in some circumstances, to require us to erase your personal data without undue delay if the continued processing of that personal data is not justified. We may not be able to delete your information in all circumstances. We may be obligated to retain your personal information as required by law, regulation, or policy;
   5. Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your personal data if the continued processing of the personal data in this way is not justified, such as where the accuracy of the personal data is contested by you.
   6. Right to withdraw consent. There are certain circumstances where we require your consent to process your personal data. In these instances, and if you have provided consent, you have the right to withdraw your consent. If you withdraw your consent, this will not affect the lawfulness of our use of your personal data before your withdrawal.
   7. Right to opt out of automated decision-making, including profiling. You have the right to not be subject to decisions solely based on automated decision-making, including profiling, which produces legal effects concerning you or similar significant effects on you. You may opt-out of automated decision-making or profiling by emailing gdpr@compliance.ucla.edu. However, you may not opt out if the decision:
      1. is necessary for entering into, or performance of, a contract between the data subject and a data controller;
      2. is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or
      3. is based on the data subject’s explicit consent.

You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal data, and we will assess and inform you if that is the case.  You can object to marketing activities for any reason. Due to the confidential nature of data processing, we may ask you to confirm your identity when exercising the above rights.

If you wish to exercise one of these rights, please email us at: gdpr@compliance.ucla.edu.

You also have the right to lodge a complaint to your local data protection authority. If you are based in the European Union, information about how to contact your local data protection authority is available here. 

If you are based in the UK or Switzerland, your local data protection authorities are the UK Information Commissioner's Office (https://ico.org.uk/global/contact-us/) and the Swiss Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch/de/kontakt).  

If you have any questions or concerns about this privacy policy, please contact us at privacy@compliance.ucla.edu.

UCLA may change this privacy policy from time to time. If UCLA makes any changes to this policy, we will change the “Last Updated” date below.

Last Updated: August 19, 2025