Effective as of June 10, 2025
Last Updated: May 15, 2025
Issued by: International Association of Private Universities and Colleges (IAPUC)
1. Introduction & Scope of Application
The International Association of Private Universities and Colleges (hereinafter referred to as “IAPUC”, “the Association”, “we”, “us” or “our”) is a non-profit organization duly registered under the laws of the State of Colorado, United States (Registration Number: 20251179157), committed to promoting quality assurance for private higher education worldwide. This Privacy Policy (hereinafter referred to as “this Policy”) sets out how IAPUC collects, uses, discloses, transfers and retains personal data of individuals and organizations that interact with the Association during its operations.
This Policy applies to:
(i) Users who access and use the official website of IAPUC (www.iapuc.org) and relevant digital platforms;
(ii) Individuals acting on behalf of institutions applying for or maintaining IQA certification, including but not limited to quality representatives, institutional administrators and faculty members;
(iii) Individuals registered or serving as peer reviewers in the IAPUC Peer Reviewer Pool;
(iv) IAPUC members registered or renewing membership in the capacity of institutional representatives or individual members;
(v) Individuals registered for IAPUC events, conferences and training programs;
(vi) Individuals subscribing to IAPUC publications, newsletters or news updates;
(vii) Individuals who submit inquiries or information to IAPUC via any channel.
IAPUC recognizes and respects the importance of personal privacy, and undertakes to process personal data in a transparent, lawful and responsible manner. Formulated in consideration of the unique operational needs of the Association as a global higher education quality assurance organization, including certification review, expert management, member services and academic publishing, this Policy complies with fundamental data protection principles. As the Association operates across multiple jurisdictions, this Policy adheres to applicable laws including the laws of the United States such as the California Consumer Privacy Act (CCPA) and the Colorado Privacy Act (CPA), the General Data Protection Regulation (GDPR) of the European Union, and the Personal Information Protection Law of the People’s Republic of China (PIPL).
2. Information of the Data Controller
For the purposes of this Policy, the data controller is:
International Association of Private Universities and Colleges (IAPUC)
Secretariat Address: Fuyao University of Science and Technology, China
Registered Address: State of Colorado, United States
Non-profit Registration Number: 20251179157
Email: secretariat@iapuc.org
Official Website: www.iapuc.org
For inquiries regarding privacy or data protection matters, please contact us via the above information, or directly reach out to the Data Protection Officer whose contact details are specified in Clause 15 of this Policy.
3. Categories of Personal Data We Collect
The types of personal data collected by IAPUC vary depending on the nature of interaction between individuals and the Association. The categories of collected data include but are not limited to the following:
3.1 Identity & Contact Data
This category includes individuals’ full names, job titles, affiliated institution names, institutional addresses, institutional email addresses, institutional phone numbers, and personal contact information where applicable. Such data is mainly collected during certification application, membership registration, expert pool enrollment, event registration and general inquiries.
3.2 Professional Qualification & Experience Data
This category covers academic and professional qualifications, fields of expertise, teaching and research experience, experience in quality assurance or certification review, language proficiency, resumes, and other information related to individuals’ expertise in higher education administration and quality assurance. Such data is primarily collected during the application and management of peer reviewers, trainer accreditation and appointment of quality representatives.
3.3 Certification & Review Data
This category includes information relevant to the IQA certification process, such as contents in self-evaluation reports, assessments and comments in peer review reports, certification decision records, on-site visit schedules, as well as appointment and performance records of peer reviewers and quality representatives. Such data is collected as part of institutional submissions and review procedures.
3.4 Institutional Data
This category refers to information of institutions interacting with or seeking services from IAPUC, including legal names, registered addresses, school operating licenses or authorization documents, governance structure details, academic program information, student enrollment and graduation data, as well as financial and operational information provided by institutions. Most of the above are institutional data, which may contain personal data of institutional representatives.
3.5 Financial & Transaction Data
This category includes payment-related information such as bank account details, billing addresses, transaction records, invoice numbers and tax identification numbers where applicable. Such data is collected for payment of certification fees, membership dues, event registration fees and other service charges. IAPUC does not store complete credit or debit card numbers. All payment transactions are processed by secure third-party payment providers complying with the Payment Card Industry Data Security Standard (PCI DSS).
3.6 Website Usage & Communication Data
This category includes IP addresses, browser type and version, operating system, referring URLs, access date and time, browsed pages, website dwell time, and other diagnostic and usage data collected via Cookies and similar tracking technologies. It also includes information submitted through inquiry forms on the Association’s website or exchanged via email.
3.7 Event & Training Data
This category contains event registration details, participation records, training completion status, assessment results, and feedback related to conferences, meetings and training programs organized by IAPUC.
4. Methods of Personal Data Collection
IAPUC collects personal data through the following approaches:
4.1 Direct Collection
Personal data is collected directly from data subjects when individuals:
(i) Fill out and submit online or offline forms (e.g., certification application forms, membership application forms, expert pool application/recommendation forms, event registration forms);
(ii) Communicate with the Association via email, phone or post;
(iii) Provide information at conferences and events organized or attended by IAPUC;
(iv) Submit information as part of the certification process, including self-evaluation reports and supporting documents;
(v) Create online accounts or log in to the Association’s digital platforms.
4.2 Collection via Institutional Channels
Personal data may be collected from the institutions to which individuals belong when such institutions:
(i) Submit certification applications or self-evaluation reports containing information of institutional representatives;
(ii) Appoint quality representatives or nominate personnel to participate in Association events;
(iii) Nominate individuals to serve as peer reviewers or committee members. In such cases, institutions shall ensure that proper authorization or consent has been obtained from relevant individuals before sharing personal data with IAPUC.
4.3 Automatic Collection
Personal data is automatically collected through Cookies, server logs and similar technologies when individuals interact with the Association’s website and digital platforms. Please refer to Clause 9 for detailed information about the use of Cookies.
4.4 Collection from Public Sources & Third Parties
On a limited basis, IAPUC may collect personal data from publicly accessible sources (e.g., institutional websites, academic publications, professional networking platforms and directories) to identify potential peer reviewers or verify information submitted during the certification process. The Association may also receive personal data from third-party service providers such as payment processors, event management platforms and communication tools, whose data processing is governed by their respective privacy policies.
5. Legal Bases for Processing
IAPUC processes personal data based on one or more of the following legal bases:
5.1 Consent
Processing is carried out when data subjects have given explicit and informed consent for specific purposes. Examples include subscribing to IAPUC newsletters, setting preferences for non-essential Cookies on the website, and submitting inquiry forms containing personal data. Data subjects have the right to withdraw consent at any time. The withdrawal shall not affect the lawfulness of processing conducted prior to the withdrawal.
5.2 Necessity for the Performance of a Contract
Processing is necessary for the performance of a contract to which the data subject is a party, or for taking steps at the request of the data subject prior to entering into such a contract. Examples include processing information for membership registration, event sign-up and payment of service fees.
5.3 Legitimate Interests
Processing is necessary for the pursuit of legitimate interests of IAPUC or third parties, provided that such interests do not override the data protection rights and freedoms of individuals. The legitimate interests of IAPUC include:
(i) Maintaining and improving the IQA certification system;
(ii) Administering the peer review process and ensuring its integrity and quality;
(iii) Facilitating exchanges and cooperation among private higher education institutions worldwide;
(iv) Compiling industry reports and conducting research on private higher education;
(v) Protecting the rights, privacy, security or property of the Association, its members, users and the public.
5.4 Compliance with Legal Obligations
Processing is required to comply with legal obligations binding on the Association. Examples include fulfilling legal requirements for non-profit organization registration and reporting under the laws of Colorado, responding to legal claims, and complying with orders issued by competent courts or regulatory authorities.
5.5 Public Interest
Processing is performed for the performance of tasks carried out in the public interest based on the Association’s non-profit educational mission or official mandate. This includes processing activities involved in certification reviews, which aim to maintain academic standards of higher education and protect the interests of students and the general public.
5.6 Additional Legal Bases for Specific Jurisdictions
Processing of personal data subject to the GDPR complies with one or more legal bases stipulated in Article 6 of the GDPR. Processing subject to the PIPL complies with the provisions of Article 13 of the PIPL, including obtaining individual consent, necessity for concluding or performing contracts, and fulfillment of statutory duties or obligations.
6. Purposes of Personal Data Processing
IAPUC uses collected personal data for the following purposes:
6.1 Certification & Quality Assurance Services
Evaluate and process IQA certification applications; conduct peer reviews and on-site visits; make and maintain certification decisions; manage the directory of certified institutions; provide ongoing supervision and support services to certified institutions; operate and manage the IQA Accreditation Decision Committee (ADC) as well as the Appeal and Arbitration Committee.
6.2 Membership Services & Administration
Process membership applications and renewals; manage membership directories; provide member-exclusive resources and publications; organize and invite members to participate in the Association’s governance activities including General Assembly and special committees.
6.3 Expert & Trainer Management
Evaluate and process applications for the Peer Reviewer Pool and Trainer Pool; arrange and record training activities; manage and assess the performance of reviewers and trainers; support the continuous professional development of reviewers and trainers.
6.4 Event & Training Organization
Plan and hold conferences, seminars, workshops and training programs; process event registration and payments; manage event logistics and communications; collect and analyze participants’ feedback to improve future events.
6.5 Research & Knowledge Dissemination
Compile and release industry reports and annual observations on quality trends of global private higher education; develop and maintain a repository of best practices; publish newsletters, policy briefs and research works; promote peer learning and knowledge sharing among certified institutions.
6.6 Communication & Support
Respond to inquiries and information requests from individuals; send communications regarding updates on Association activities and the IQA certification system; provide technical support; deliver service-related notifications and updates.
6.7 Legal Compliance & Rights Protection
Comply with applicable laws, regulations and regulatory requirements; enforce this Policy and other policies and agreements of the Association; protect the rights, privacy, security or property of the Association, its members, users and the public; defend against and exercise legal rights in relation to legal claims.
7. Data Retention
IAPUC retains personal data only for the period necessary to fulfill the purposes for which the data is collected, and in no event longer than the period permitted by applicable laws, regulations and industry standards. Specific retention periods are specified in the IQA Certification Archives and Data Retention Management Rules of the Association.
When determining retention periods, the Association takes into account the following factors:
(i) Nature, volume and sensitivity of the data;
(ii) Potential risks of damage caused by unauthorized use or disclosure;
(iii) Purposes of data collection and whether such purposes can be achieved through alternative means;
(iv) Legal, regulatory, tax, accounting and reporting requirements;
(v) Existing or potential relationships with data subjects.
In general, data related to certified institutions will be retained for a reasonable period after the expiration of certification validity to facilitate access to historical certification records, respond to potential appeals and complaints, and fulfill legal obligations. Data of peer reviewers will be retained for a reasonable period after reviewers withdraw from the expert pool. Financial and transaction data will be retained in accordance with applicable laws and regulations. Retention periods for website usage and communication data are specified in Clause 9.
When personal data is no longer required for the original collection purposes and there are no legal or regulatory requirements for continued retention, IAPUC will securely and irreversibly delete or anonymize such data in accordance with the data destruction procedures stipulated in the IQA Certification Archives and Data Retention Management Rules.
8. Data Sharing & Disclosure
IAPUC will not share personal data with third parties except under the limited circumstances set out below:
8.1 Service Providers
The Association may share personal data with third-party service providers engaged to deliver services including website hosting and maintenance, payment processing, event management, email communication, customer relationship management and data analysis. Such providers are granted access to personal data only to the extent necessary for performing their services, and are contractually required to implement appropriate technical and organizational security measures.
8.2 Institutional Members & Certified Institutions
On a limited basis relevant to certification and membership services, the Association may share personal data with institutional members and certified institutions. For example, names, affiliated institutions and qualifications of peer reviewers may be shared with reviewed institutions during review panel formation to allow institutions to raise objections regarding potential conflicts of interest. Contact information of quality representatives may be shared in the quality representative network and institutional directories in accordance with relevant management rules of the Association.
8.3 Association Governance Bodies
During the governance and certification decision-making processes, personal data may be disclosed to members of the Association’s Council, IQA Accreditation Decision Committee, Quality Certification Committee, Appeal and Arbitration Committee and other standing committees to enable them to perform governance and decision-making duties.
8.4 Certification & Review Purposes
As part of the certification review process, personal data of representatives from certified institutions and peer reviewers may be shared within relevant review and decision-making bodies during review panel formation, exchange of self-evaluation and review reports, and delivery of certification decisions. Names and professional qualifications of peer reviewers may be shared on the Peer Reviewer Pool management platform for review task allocation.
8.5 Legal & Regulatory Compliance
Personal data may be disclosed when required by applicable laws, regulations or legal proceedings, or upon requests from competent regulatory or government authorities. To the extent permitted by applicable laws, the Association will notify affected data subjects of such disclosure, except in limited cases where prior notification is not feasible due to legal obligations or protection of legitimate rights of the Association.
8.6 Corporate Transactions
In the event of a merger, acquisition, restructuring or asset sale involving the Association, personal data may be transferred as part of the transaction. In such cases, the Association will ensure that the recipient agrees to protect personal data in a manner consistent with this Policy, and provide sufficient notice to affected data subjects prior to the completion of the transaction.
8.7 Disclosure with Consent
IAPUC may use or disclose personal data for other purposes not covered in this Policy upon obtaining consent from data subjects.
9. Cookies & Tracking Technologies
9.1 Use of Cookies
The official website of IAPUC uses Cookies and similar tracking technologies to enhance user experience, analyze website traffic and support basic website functions. A Cookie is a small text file placed on users’ devices by web servers, which may be retrieved by the website or third-party services that recognize the Cookie when users revisit the website.
9.2 Types of Cookies Used
Cookies deployed on the Association’s website are classified into the following categories:
Strictly Necessary Cookies: These Cookies are essential for the operation of the website and cannot be disabled. They are usually set in response to users’ actions such as setting privacy preferences, logging in or filling in forms. Users may configure browsers to block or alert about such Cookies, but certain parts of the website may not function properly as a result.
Performance & Analytics Cookies: These Cookies collect statistics on visitor volume and traffic sources to help the Association measure and improve website performance. All information collected by such Cookies is aggregated and therefore anonymous. The Association uses third-party analytics services including Google Analytics to collect and analyze relevant data. Users may opt out of performance Cookies by adjusting browser settings.
Functional Cookies: These Cookies enable the website to remember users’ choices (e.g., language or regional preferences) to deliver enhanced and personalized functions. If functional Cookies are disabled, part or all of such services may not work properly.
9.3 User Choices
Most web browsers allow users to manage Cookie preferences via browser settings. Users may generally set browsers to reject Cookies, delete existing Cookies or receive notifications when Cookies are placed. Users may also disable specific third-party Cookies via browser settings or opt-out pages provided by third-party analytics services such as Google Analytics.
9.4 Do Not Track Signals
Some web browsers provide a “Do Not Track” preference to signal websites that users do not wish their online activities to be tracked. Due to the lack of unified standards for the interpretation and implementation of Do Not Track signals, the Association currently does not respond to such signals. Users may manage Cookie preferences in accordance with the instructions above.
10. International Data Transfers
As a global operator interacting with institutions and individuals across the world, IAPUC may transfer, store and process collected personal data in jurisdictions outside the data subjects’ country of residence, including China (where the Secretariat is located), the United States (where the Association is registered) and other countries where the Association has representatives or conducts operations.
Where personal data is transferred from the European Union or the European Economic Area (EEA) to third countries deemed to have inadequate data protection levels, IAPUC will implement appropriate safeguards in compliance with the GDPR. Such safeguards may include:
(i) Signing Standard Contractual Clauses (SCCs) approved by the European Commission with data recipients;
(ii) Relying on explicit consent from data subjects;
(iii) When the transfer is necessary for the performance of a contract to which the data subject is a party;
(iv) When the transfer is necessary for the establishment, exercise or defense of legal claims.
For personal data transferred out of the People’s Republic of China, IAPUC will comply with relevant provisions of the PIPL, including obtaining separate consent from data subjects where necessary, conducting personal information protection impact assessments, and signing standard contracts with overseas recipients as required by national cyberspace authorities.
In accordance with the Colorado Privacy Act, the Association will comply with relevant requirements on third-party data transfers when processing personal data of Colorado residents, including obtaining consumer consent when transferring sensitive data.
11. Data Security
IAPUC implements appropriate technical and organizational measures to ensure the security of personal data, prevent unauthorized or unlawful processing, and guard against accidental loss, destruction or damage of personal data. Such measures are designed taking into account the state of the art, implementation costs, nature, scope, context and purposes of processing, as well as potential risks to the rights and freedoms of individuals.
Security measures implemented by the Association include but are not limited to:
(i) Encryption of sensitive personal data in transit and at rest;
(ii) Role-based access control to ensure personal data is accessible only by authorized personnel;
(iii) Regular security assessments and penetration tests to identify and mitigate vulnerabilities;
(iv) Maintenance of audit logs to record access to and modification of personal data;
(v) Establishment of information security incident response procedures and notification mechanisms.
All staff, contractors and third-party service providers with access to personal data are bound by strict confidentiality obligations and may only process personal data within the scope of their assigned duties. The Association conducts regular data protection and information security training to raise compliance awareness among relevant personnel.
In the event of a data security incident, IAPUC will handle the matter in accordance with its information security incident response procedures, and notify affected data subjects and/or relevant regulatory authorities as required by applicable laws. In compliance with the GDPR, the Association will notify relevant regulatory authorities within 72 hours in case of personal data breaches posing high risks to data subjects’ rights and freedoms, and notify affected individuals where necessary. In compliance with the PIPL, the Association will take immediate remedial measures upon discovery of personal information breaches and notify competent personal information protection authorities and/or affected individuals in accordance with relevant regulations.
12. Rights of Data Subjects
IAPUC respects individuals’ rights in relation to their personal data. Data subjects may enjoy one or more of the following rights subject to their jurisdiction and applicable data protection laws. The Association will respond to verifiable requests from consumers in compliance with applicable laws.
12.1 Right of Access
Data subjects have the right to obtain confirmation as to whether their personal data is being processed, and where applicable, access their personal data and relevant information about processing activities as stated in this Policy. Under the GDPR, the first access request is free of charge; a reasonable administrative fee may be charged for additional copies. Under the CCPA, consumers may request two free copies of data portability within any 12-month period.
12.2 Right to Rectification
Data subjects have the right to request the Association to rectify inaccurate personal data relating to them. Taking into account the purposes of processing, data subjects may request the completion of incomplete personal data, including by means of supplementary statements.
12.3 Right to Erasure (Right to be Forgotten)
Data subjects may request the erasure of their personal data under the following circumstances:
(i) The personal data is no longer necessary for the original collection or processing purposes;
(ii) The data subject withdraws consent and there is no other legal basis for continued processing;
(iii) The personal data is processed unlawfully;
(iv) Erasure is required to comply with legal obligations binding on the Association. Under the CCPA, consumers have the right to request erasure of their personal data, subject to specific exceptions.
12.4 Right to Restriction of Processing
Data subjects may request restriction of processing of their personal data in the following cases:
(i) The accuracy of personal data is contested by the data subject, and processing is restricted during the period for verification;
(ii) Processing is unlawful, and the data subject opposes erasure and requests restriction of use instead;
(iii) The Association no longer needs the personal data for processing purposes, but the data subject requires the data for the establishment, exercise or defense of legal claims.
12.5 Right to Data Portability
Where processing is based on consent or a contract and carried out by automated means under the GDPR, data subjects have the right to receive their personal data provided to the Association in a structured, commonly used and machine-readable format, and to transmit such data to another data controller without hindrance.
12.6 Right to Object
Data subjects have the right to object to the processing of their personal data in the following circumstances:
(i) Processing based on legitimate interests or public interest, on grounds relating to their particular situation;
(ii) Processing for direct marketing purposes, at any time and without providing reasons.
12.7 Rights in Relation to Automated Decision-Making
Data subjects have the right not to be subject to decisions based solely on automated processing including profiling which produce legal effects or similarly significant impacts on them. IAPUC does not conduct such automated decision-making at present.
12.8 Right to Withdraw Consent
Where processing is based on consent, data subjects may withdraw their consent at any time. The withdrawal of consent shall not affect the lawfulness of processing conducted prior to the withdrawal.
12.9 Right to Lodge a Complaint with a Regulatory Authority
Data subjects have the right to lodge a complaint with the data protection authority in their place of habitual residence, place of work or where the alleged infringement occurs. For data subjects in the European Union, the competent authority is usually the data protection authority of their member state. For data subjects in China, the competent authority is the Cyberspace Administration of China and its authorized institutions.
12.10 Additional Rights under the PIPL
In addition to the above rights, personal information subjects enjoy the following rights under the PIPL:
(i) The right to be informed of personal information processing rules and processing status;
(ii) The right to request re-obtaining consent when the processing purposes, methods or categories of personal information are changed;
(iii) The right to request explanations and refuse decisions made solely by automated processing if such processing produces significant impacts on their legitimate rights and interests.
12.11 How to Exercise Rights
Data subjects who wish to exercise any of the above rights may submit written requests via the contact details specified in Clause 15. The Association may request identity verification documents to confirm the identity of the requester, and will respond to requests within the time limits prescribed by applicable laws.
13. Jurisdiction-Specific Provisions
13.1 Residents of the United States
The Association complies with applicable federal and state privacy laws of the United States governing its operations, including the Colorado Privacy Act (CPA) and the California Consumer Privacy Act (CCPA).
Under the CCPA, California residents have the right to:
(i) Know the categories of personal information collected, used, disclosed and sold by the Association;
(ii) Request erasure of their personal information;
(iii) Opt out of the sale of their personal information. IAPUC does not sell personal information as defined under the CCPA.
Under the CPA, Colorado residents enjoy rights similar to those under the GDPR, including the rights of access, rectification, erasure and data portability, as well as the right to opt out of processing for targeted advertising and behavioral analytics.
13.2 Residents of the European Union & European Economic Area
The Association complies with the GDPR when processing personal data subject to the GDPR. In addition to the rights set out in Clause 12, data subjects in the EEA are protected by the safeguards for international data transfers specified in Clause 10 when their personal data is transferred to third countries outside the EEA.
13.3 Residents of the People’s Republic of China
The Association complies with the PIPL when processing personal information subject to the PIPL. In accordance with the PIPL, the Association follows the notice-and-consent principle: it will inform individuals of processing purposes, methods, categories of personal information and retention periods before collecting personal information, and obtain consent unless otherwise stipulated by laws. All cross-border transfers of personal information from China comply with relevant requirements of the PIPL.
14. Children’s Privacy
The website and services of IAPUC are intended for adults engaged in higher education, and are not designed for or targeted at children under the age of 18. The Association does not knowingly collect personal data from children. If IAPUC becomes aware that personal data of children has been collected without parental consent, reasonable measures will be taken to delete such information from records. Parents or guardians who believe their children have provided personal data to the Association may contact us via the details in Clause 15.
15. Data Protection Officer & Contact Information
IAPUC has appointed a Data Protection Officer (DPO) in compliance with Article 37 of the GDPR and Article 52 of the PIPL. The DPO is responsible for overseeing the Association’s compliance with applicable data protection laws, and serves as a contact point for data subjects and regulatory authorities on data protection matters.
Contact Information of the Data Protection Officer
Data Protection Officer
International Association of Private Universities and Colleges (IAPUC)
Email: dpo@iapuc.org
General Privacy Inquiries
For privacy-related inquiries, requests to exercise data subjects’ rights or feedback on this Policy, please contact us via:
Mailing Address: IAPUC Secretariat, Fuyao University of Science and Technology, China
Email: secretariat@iapuc.org
Official Website: www.iapuc.org
16. Amendments to this Policy
IAPUC reserves the right to revise or update this Policy from time to time to reflect changes in data practices, legal requirements or operational needs. In the event of material amendments, the Association will provide notice via prominent announcements on the website or email (for users who have provided contact information) prior to the effective date of changes, and obtain consent where required by applicable laws.
The latest update date is always displayed at the top of this Policy. Data subjects are encouraged to review this Policy regularly to stay informed of the Association’s data practices. Continued use of the website and services after receiving notice of amendments shall constitute acceptance of the updated Policy, except where separate consent is required by laws.
17. General Provisions
17.1 Relationship with Other Documents
This Policy shall be read in conjunction with other policies of the Association, including but not limited to the IAPUC Digital Security and Privacy Regulations, IQA Certification Archives and Data Retention Management Rules and IAPUC-IQA Academic Ethics Code, which together form a comprehensive framework for data protection and information security of the Association.
17.2 Severability
If any provision of this Policy is deemed invalid, unlawful or unenforceable by a competent court or regulatory authority, such provision shall be amended or removed as necessary, while the remaining provisions shall remain in full force and effect.
17.3 Governing Law
This Policy is governed by and construed in accordance with the laws of the State of Colorado, United States (the Association’s place of registration). The Association undertakes to comply with applicable data protection laws in all relevant jurisdictions.
17.4 Language
This Policy is originally drafted in English. In case of discrepancies between translated versions and the English version, the English version shall prevail.
18. Other
18.1 Contact Information
IAPUC welcomes your questions or comments regarding this Statement of Privacy. If you believe that IAPUC has not adhered to this Statement, please contact IAPUC at:
International Association of Private Universities and Colleges
Address: 3000 Huron St, Unit 650, Denver, CO 80202
E-mail: support@iapuc.org
Tel: +1 (720) 897-8865
Effective as of June 10, 2025
Third Edition, Revised May 15, 2025
