Cookie Policy

 

Effective as of July 01, 2025
Last Updated: June 20, 2025
Issued by: International Association of Private Universities and Colleges (IAPUC)

---

 

 

1.General Overview & Legal Compliance

This standalone Cookie Policy exclusively governs the deployment, collection, processing, retention and management of Cookies and all similar automated tracking technologies on the official IAPUC website www.iapuc.org, including all subdomains, affiliated web portals, member service platforms and online functional systems operated by the International Association of Private Universities and Colleges (“IAPUC”, “we”, “us”, “our”).

For the purpose of this Policy, Cookies refer to small encrypted text files stored on users’ terminal devices (computers, tablets, mobile devices and other intelligent access devices) during website visits. Similar tracking technologies include web beacons, pixel tags, local storage, session storage and anonymous log collection tools. Such technologies serve to stabilize website operation, standardize user access sessions, optimize platform service functions, and conduct anonymous operational statistics. Cookies and tracking tools deployed by IAPUC cannot execute malicious programs, transmit viruses, obtain local private files, or cause security risks to users’ terminal devices.

This Policy is independently formulated in strict compliance with the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Colorado Privacy Act (CPA), and the Personal Information Protection Law of the People’s Republic of China (PIPL), as well as global ePrivacy regulatory requirements. It covers all legal obligations of prior notification, explicit consent, classified management, limited retention and user right guarantee for website tracking technologies. This Policy acts as a specialized independent supplementary document to the official IAPUC Privacy Policy. All tracking-related personal data processing activities shall comply with the core provisions of the IAPUC Privacy Policy.

IAPUC adheres to a strict non-commercial public welfare operation orientation. We do not deploy any advertising cookies, marketing profiling cookies, paid promotion tracking tools or commercial user behavior analysis tools on all official platforms. All tracking behaviors are solely for the maintenance of official website operation, academic service optimization and institutional service improvement.

2. Legal Basis for Cookie Data Processing

All Cookie-related data processing activities of IAPUC are based on the following legally valid bases, which fully meet the compliance requirements of multiple jurisdictions:

2.1 Strictly Necessary Cookies: Processed based on legitimate interest and service necessity. Such Cookies are essential to ensure the basic operation, access security and functional stability of the official website, and do not require user prior consent in accordance with applicable laws.

2.2 Non-Essential Cookies (Functional / Analytics): Processed solely based on users’ explicit, voluntary, specific and informed consent. Users have the right to freely accept or reject such Cookies, and consent can be withdrawn at any time without negative impact on users’ use of core website services.

3. Classified Specifications & Detailed Inventory of All Cookies Used

IAPUC adopts standardized classified management of all Cookies deployed on the official website. All Cookies are divided into Strictly Necessary Cookies, Functional Cookies, and Analytics & Performance Cookies. No other types of tracking Cookies are deployed. The detailed specifications, purposes, attributes, duration and processing rules of all Cookies are fully disclosed in the table below:

Cookie Category	First/Third Party	Session / Persistent	Exact Purposes of Use	Retention Duration	Requirement for Consent	Impact of Disabling
Strictly Necessary Cookies	First-party only	Session & Limited Persistent	Maintain secure user browsing sessions; support official account login and identity verification; verify access permissions for member-only and certification-exclusive content; prevent cross-site tampering and unauthorized access; save real-time status of online forms and application submissions; ensure the normal operation of core website functions and security defense mechanisms.	Session Cookies: cleared immediately after browser closure; Persistent necessary Cookies: maximum 12 months	Not required (legally exempted)	Core website functions will be unavailable; secure login, form submission and permission verification functions will fail.
Functional Cookies	First-party only	Persistent	Record user personalized browsing preferences, including website display language, regional adaptation settings, page browsing habits and preset form filling information; optimize repeated visiting experience and realize consistent personalized service display.	Maximum 12 months	Explicit user consent required	No impact on core service access; personalized preference settings will not be retained, and page display will be restored to default status for each visit.
Analytics & Performance Cookies	Third-party (authorized analytics tools)	Persistent	Collect fully anonymized and aggregated website traffic data, including page access volume, visiting frequency, access time period and platform operation stability; conduct internal statistical analysis to optimize website structure, academic resource layout and institutional service processes; no individual user identification or portrait construction.	Maximum 24 months	Explicit user consent required	No impact on all user services; website operation data statistics and function optimization cannot be carried out.

 

4. Session Cookies and Persistent Cookies Management Rules

IAPUC strictly distinguishes and standardizes the use of Session Cookies and Persistent Cookies to minimize data storage risks:

4.1 Session Cookies: Temporary short-term Cookies that only take effect during a single user browsing session. All session data is automatically cleared completely after the user closes the browser, with no residual data stored on the user’s terminal device and no long-term tracking behavior.

4.2 Persistent Cookies: Time-limited valid Cookies stored on user terminals. All persistent Cookies set by IAPUC have fixed and clear expiration periods, will automatically fail and be permanently cleared upon maturity. The system will not automatically renew or update persistent Cookies. Only when users actively access the website again and confirm relevant preferences can the validity period be refreshed.

5. Strict Data Retention & Security Destruction Rules

IAPUC implements the minimum necessary retention principle for all Cookie-related data, prohibiting excessive and long-term unauthorized retention, fully complying with the data retention requirements of all applicable laws:

1. All Session Cookie data is permanently cleared immediately after the end of the browsing session, with no background residual storage;
2. Functional persistent Cookie data is retained for a maximum of 12 months, and automatically destroyed upon expiration;
3. Anonymized analytical statistical data is retained for internal platform optimization for a maximum of 24 months. After the expiration, all data will be completely de-identified or securely and irreversibly deleted;
4. Once Cookies are disabled by users or no longer required for service purposes, IAPUC will actively terminate tracking behavior and clear relevant cached data in a timely manner;
5. All retained Cookie data is included in the Association’s data security audit scope, with complete operation logs retained for compliance verification.

6. User Consent Mechanism & Full Independent Control Rights

IAPUC adopts a granular, equal and non-mandatory consent mechanism that fully meets GDPR and global cookie law requirements, without pre-ticked authorization, forced consent or hidden tracking:

6.1 Consent Acquisition Rules: When users first access the official website, a standardized Cookie consent banner will pop up, providing independent options of “Accept All Non-Essential Cookies”, “Reject All Non-Essential Cookies” and “Customize Preferences”. Non-essential Cookies will not be deployed before users confirm their choices.

6.2 Real-Time Control Rights: Users can adjust, modify or withdraw Cookie authorization preferences at any time through website preference settings or local browser management functions.

6.3 Scope of Control: Users can independently block, clear or prohibit subsequent deployment of functional and analytical Cookies. Restricting non-essential Cookies will never affect users’ access to all public academic resources, certification guidelines, member services, official announcements and core functional services of the website.

6.4 Consent Withdrawal Effect: The withdrawal of user consent is effective immediately. It will not affect the legality of data processing behaviors completed before the withdrawal of consent.

7. Do Not Track (DNT) Signal Processing Rules

Major mainstream browsers provide users with “Do Not Track (DNT)” privacy signal settings. Due to the lack of unified global technical standards for DNT signal identification, resolution and response among website platforms, IAPUC does not automatically identify or respond to browser DNT headers.

Not responding to DNT signals does not weaken user privacy protection. Users can completely realize personalized tracking prohibition and Cookie management needs through the independent consent control and browser setting functions stipulated in this Policy, with full and effective privacy protection channels.

8Third-Party Cookie Supervision & Compliance Specifications

IAPUC only accesses limited anonymous third-party analytics tools to assist website operation optimization, and may generate a small amount of third-party analytical Cookies. All third-party tracking behaviors are strictly regulated and restricted:

1. All cooperative third-party service providers have signed formal data protection and compliance agreements with IAPUC, undertaking to abide by GDPR, CCPA, CPA, PIPL and other applicable laws;
2. Third-party tracking is limited to anonymous aggregated statistical analysis only, and no identifiable personal user data is collected, stored or shared;
3. The generation and use of third-party Cookies are subject to user prior consent. Users can refuse third-party tracking through website settings or third-party official opt-out channels;
4. The processing rules of third-party Cookies are subject to the third party’s official privacy and Cookie policies. IAPUC will conduct regular compliance audits of third-party tracking behaviors to eliminate privacy risks.

9. User Data Subject Rights

In addition to Cookie preference control rights, users enjoy all legal data subject rights for Cookie-related personal data in accordance with applicable laws:

1. Right to Know: Users have the right to obtain clear, detailed and true information about all Cookie types, purposes, scope and duration used by the website;
2. Right of Access: Users may apply to IAPUC for access to records of Cookie-related data processing involving their personal information;
3. Right to Erasure: Users may request us to clear invalid, unnecessary or illegally stored Cookie data records;
4. Right to Object: Users have the right to object to non-essential Cookie tracking at any time;
5. Right to Complaint: Users have the right to lodge complaints with local data protection regulatory authorities if they believe our Cookie processing behaviors violate legal provisions.

10. Policy Correlation & Conflict Resolution

This document is an independent and specialized Cookie compliance policy of IAPUC, which forms a complete data protection system together with the IAPUC Privacy Policy. All tracking technology data processing activities shall comply with the basic principles, security standards and user protection provisions of the IAPUC Privacy Policy.

If there is any inconsistency between the clauses of this Policy and the IAPUC Privacy Policy due to professional refinement, the provisions of the IAPUC Privacy Policy shall prevail in terms of legal interpretation and compliance execution.

11. Policy Revision, Update & Notification Mechanism

IAPUC reserves the independent right to revise and update this Policy in accordance with website function iteration, technical upgrade, service optimization and updates of global data protection laws and regulations.

For material revisions affecting user privacy rights and tracking rules, IAPUC will release prominent and effective update announcements on the official website homepage in advance of the effective date, and remind users to confirm updated rules through pop-up prompts or notification channels.

Users’ continued access to and use of the IAPUC official website after the policy update takes effect shall be deemed as voluntary recognition and acceptance of the revised Cookie Policy.

12. Inquiry & Complaint Contact Channels

For any inquiries, objections, right exercise applications or compliance consultations regarding this Cookie Policy and website tracking behaviors, users may contact the IAPUC Data Protection Officer through official dedicated channels:

Email: dpo@iapuc.org

Official Website: www.iapuc.org

IAPUC will respond to all legitimate user inquiries and applications within the time limit stipulated by applicable laws.

13. Copyright Statement

Copyright © 2026 International Association of Private Universities and Colleges (IAPUC). All rights reserved. All content, text, structural provisions and compliance clauses contained in this IAPUC Cookie Policy are the exclusive intellectual property of IAPUC. No part of this document may be reproduced, distributed, modified, excerpted, or used for any commercial or non-commercial secondary purposes without the prior written authorization of IAPUC. Unauthorized dissemination, revision or quotation of this Policy shall constitute a violation of applicable intellectual property laws and industry compliance norms. As an officially issued independent regulatory document, all interpretation rights of this Cookie Policy belong exclusively to IAPUC.