Privacy Policy

Privacy Policy

Last Updated: September 28, 2026

Introduction

We at the Morehead-Cain Foundation and its affiliates (collectively, “we”, “us”, or “our”) respect your privacy and are committed to protecting it through our compliance with this privacy policy (this “Policy”). This Policy describes the types of information we may collect from or about you, or that you may provide to us, including when you: (i) visit, access, or use our primary public-facing website located at https://moreheadcain.org, our website for the Morehead-Cain Global Fellows program located at https://global.moreheadcain.org, our community networking website located at https://moreheadcain-network.org, our mobile application for the Morehead-Cain Network, our  virtual interview platform, or any other website, application, or service where we post this Policy (collectively, along with any successor or subdomains thereof, our “Websites”); or (ii) share your information with us in other online or offline contexts, including submitting an application for one of our programs for students, alumni, or educators (collectively, our “Programs”), nominating someone to participate in our Programs, participating in our Programs, or otherwise contacting us about our Websites, our Programs, or this Policy. This Policy also describes our practices for collecting, using, maintaining, protecting, and disclosing that information.

Important Information

Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, you can choose not to use our Websites or otherwise provide us with your information. By accessing or using our Websites, or by otherwise providing us with your information, you agree to this Policy. This Policy may change from time to time. When we make changes to this Policy, we will post the updated Policy on our Websites and update the Policy’s “Last Updated” date. Your continued use of the Websites or your continued supply of information to us after we make changes is deemed to be acceptance of those changes.

Information We Collect About You and How We Collect It

Personal Information We Collect

We collect several types of information from and about individuals, including (but not limited to) (i) Program applicants, participants, alumni, and nominators; (ii) Program donors, supporters, and employees of partnering organizations; and (iii) other individuals who use our Websites, subscribe to receive our communications, or attend our events. This may include information by which individuals can be personally identified or information about an individual that is maintained in personally-identifiable form (collectively, “Personal Information”). Specifically, the Personal Information we (or our third-party service providers acting on our behalf) may collect includes the following:

• Identifying information and contact details, such as your full name, birthdate, home address, email address, telephone number (including mobile telephone number), your Morehead-Cain ID or similar identification number we assign to you, and the IP address or mobile device ID associated with your computer or device.
• If you register for an account on any of our Websites, your log-in information, including any username or screen name you may use.
• If you are an applicant, nominee, or participant in one of our Programs (or in certain cases, if you are an alum of one of our Programs), we may collect the following additional categories of information in connection with our evaluation of your application or the administration of our Programs:
  • Your birth location (including country, city, and state) and the student ID number or similar identifier provided by your educational institution.
  • If you apply to participate in our Global Fellows Program, your citizenship and passport information, including your country of primary citizenship or dual citizenship and information regarding whether you possess a valid passport.
  • If you apply to or participate in any of our Programs involving international travel, your driver’s license number or other state-issued identification number.
  • Your social security number, which is collected for tax reporting obligations in connection with the disbursement of scholarship awards.
  • Certain biographical or demographic information, including your gender, race/ethnicity, language spoken at home, and hometown population.
  • Certain information about your family, including the name of your parent or guardian, the name of your child, and whether you have any siblings.
  • Certain information about your educational background, including the name of your high school, university, and other educational institutions attended and your dates of attendance; your grade point averages (GPA) and class rank; your graduation year; your declared major(s) and/or minor(s); certain information about the courses or classes you’ve taken and your performance in these courses (including any such information included in your academic records or transcripts); your standardized testing scores and preferences; the identity of your college counselor or guidance counselor; and other information required to confirm your academic standing.
  • Certain information about your employment history, including the identities of your past and current employers and your dates of employment.
  • Certain information about your disciplinary and legal history, including information regarding whether you have been found responsible for or are under investigation for academic, behavioral, or peer misconduct resulting in disciplinary action, and whether you have ever been arrested or charged with an offense.
  • If you participate in an interview using the video platform we provide for the purpose of conducting asynchronous virtual interviews (our “Interview Platform”), we may collect video and audio recordings of your responses to our interview questions, along with associated metadata, timestamps, interview progress and completion status, and certain Technical Information (as defined below) needed to operate the Interview Platform, such as information about your Internet browser and device, the permissions settings for your camera and microphone, the upload status for your responses, and certain troubleshooting signals like whether audio inputs were detected or a camera image appeared unavailable or black.
• If you nominate someone to participate in one of our Programs or submit an applicant to us to become a nominating partner, the name of your educational institution or organization, your position or role, your educational institution’s CEEB code (if applicable), and your educational institution’s phone number.
• If you are an individual external to our organization who is authorized to access our Interview Platform for the purpose of reviewing responses to interview questions submitted by Program applicants, we collect information about your activity on the Interview Platform, including whether you have accessed certain recordings, your account role, and whether your messages on the Interview Platform were sent, delivered, opened, or read.
• If you apply for a grant under one of our funds for educators, information about your relationship with current Program members or administrators, the name and address of your educational institution, the subjects you teach, and other information you provide regarding the background, goals, objectives, and intended impact of your proposal.
• Your payment information, such as your credit card number, debit card number, payment card expiration dates and security codes, and other similar or related account and authentication data necessary to process payment transactions (collectively, “Payment Information”).
• The Technical Information described in the section below titled “Traffic, Usage, and Computer/Device Information.”
• Information related to your Internet or similar network activity, including browsing history, search history, and information on your interaction with our Websites or on your interaction with advertisements on our Websites or other websites (“Internet Activity”).
• Any other Personal Information you choose to provide in any forms or message submitted by you to us through the Websites or otherwise.

How We Collect Information

With the exception of your Technical Information and Internet Activity (which we or our third-party service providers collect automatically as you navigate through or interact with our Websites, as described below in the section titled “Traffic, Usage, and Computer/Device Information”), we primarily collect Personal Information directly from you as you provide it or submit it to us, including in connection with submitting applications to participate in our Programs, nominating others to participate in our Programs, signing up to obtain additional information from us (such as our periodic emails, newsletters, text alerts, or other promotional or informational updates about our Programs), registering for an account on any of our Websites, responding to a voluntary survey you have agreed to complete, submitting a job application to us, contacting us to report a problem on any of our Websites, submitting an inquiry to us using the contact methods provided on our Websites, or otherwise contacting us about our Websites or our Programs.

We may also collect Personal Information about you indirectly from third parties who submit your Personal Information to us. In particular (and without limitation), we may collect Personal Information about you when such information is provided by someone who nominates you to participate in one of our Programs (including guidance counselors, educators, academic advisors, supervisors, and coaches) or who reviews your application to one of our Programs (including application assessors, members of our selection committee, or any character references you provide). Further, we may collect Personal Information from the faculty and staff of your educational institution in connection with providing our Programs to you. If you are a student participating in our Programs, in certain limited circumstances we may also collect information from your parent or guardian, including where such information is needed to protect your health, safety, or welfare or that of others.

Traffic, Usage, and Computer/Device Information

Additionally, as you navigate through and interact with our Websites or with certain emails and other electronic messages we send to you, we may automatically collect Internet Activity and certain traffic data, usage information, and information about your computer equipment or mobile device, such as your browser and operating system, your wireless carrier, the geographic region from which you are accessing a Website, time-stamped logs regarding access times and duration of visits, the pages of our Websites that you visit, whether you opened the email message we sent to you and whether you clicked on any links in the message, configuration data, clickstream analytics, and your actions and patterns when you use our Websites or interact with our email messages (collectively, “Technical Information”). The technologies we use for this automatic data collection may include cookies that are stored on the browser of your computer or mobile device, small embedded electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs), and other types of embedded code. We collect this information to manage our content and improve users’ use of our Websites; to count and review the number of users of our Websites and their usage patterns; to track key performance indicators such as pages accessed, frequency of access, and other statistical information related to our Websites and the performance of our email messages (for example, recording the popularity of certain content and verifying system and server integrity); to identify the portion of users who access our Websites via different web browsers or mobile operating systems; to recognize if a user is a return user of our Websites; to store information about a user’s visits; to remember a user’s preferences; and for similar purposes in connection with monitoring, operating, maintaining, and improving our Websites. Third parties may also collect Technical Information, Internet Activity, and other information on our behalf as further described in the section below titled “Use of Google Analytics.”

How We Use Your Information

Generally

We may use the information we collect about you or that you provide to us, including any Personal Information, to do the following (where applicable):

• Present our Websites and their contents to you.
• Administer and provide our Programs to you.
• Review and evaluate your application to participate in one of our Programs and communicate with you in connection with such application.
• Review and evaluate a nomination you submit for someone else to participate in one of our Programs and communicate with you in connection with such nomination.
• Invite you to participate in or review virtual interviews conducted through our Interview Platform, record your responses to interview questions, deliver and display communications sent through the Interview Platform, and otherwise host, operate, support, and secure our Interview Platform.
• Authenticate or otherwise verify your identity in connection with your requests and inquiries via the Websites or otherwise.
• Provide you with support and respond to your inquiries or requests regarding our Websites, including to investigate and address your concerns and to monitor and improve our responses.
• Update and maintain contact and mailing lists (such as our lists to receive messages, newsletters, or alerts by email or text message) and provide you with informational or promotional communications regarding your application, our interview process, or our Programs.
• Communicate with you via text message (as described in the section below titled “Text Message Alerts”).
• Contact you by telephone to request your financial support.
• Develop and administer voluntary user surveys.
• With respect to Technical Information, fulfill the purposes described in the section above titled “Traffic, Usage, and Computer/Device Information.”
• With respect to aggregate and de-identified information, fulfill the purposes described in the section below titled “Use and Disclosure of Aggregated or De-Identified Data.”
• Conduct research and development and perform quality control activities.
• Notify you about changes to our Websites, our Programs, or this Policy.
• Help maintain the safety, security, and integrity of our Websites, databases, and other technology assets.
• Respond to lawful requests for information through court orders, subpoenas, warrants, and other legal processes or obligations.
• Enforce any contracts between you and us, including for billing and collection, or for the establishment, exercise, or defense of legal claims.
• Fulfill any other purpose for which you provide the information.

We may also use the information that you provide to fulfill any purpose for which you provide the information, in any other way that we describe when you provide the information, and for any other purpose with your consent.

Use and Disclosure of Aggregated or De-Identified Data

We may convert or combine Personal Information of users of our Websites or other individuals with whom we interact under this Policy into de-identified or aggregated data that does not disclose any of the Personal Information of any individual. We may use and disclose to third parties any such de-identified or aggregated data (including but not limited to traffic and usage data that does not identify you personally) for any lawful purpose.

Tracking and “DO NOT TRACK”

Tracking involves the use of cookies, web beacons, or other embedded code or tracking technologies to collect, analyze, and store information on a user’s behavior over time on multiple sites, including information on the sites visited, products viewed, products purchased, and other online interactions. Tracking information can be used to enable companies to make interest-based (behavioral) advertising available to users on multiple sites that they visit.

We may collect Personal Information about your online activities over time and across third-party sites for tracking purposes. However, we do not currently allow third parties to collect Personal Information on the Websites that could be used by them to analyze and store information about your online activities over time and across third-party sites for their own tracking purposes (separate and apart from any services they provide to us in support of our permitted uses of your Personal Information as described in this Policy).

Our Websites do not respond to any “DO NOT TRACK” signals sent by your computer, browser, or mobile device, and if your computer, browser or mobile device sends a “DO NOT TRACK” signal to our Websites, our Websites will not treat you differently from users who do not send such signals.  For more information on how to disable certain tracking technologies, please visit the Network Advertising Initiative’s Consumer Opt-Out page at https://thenai.org/how-to-opt-out/ and the Digital Advertising Alliance’s Consumer Assistance page at https://youradchoices.com/.

Use of Google Analytics

We use Google Analytics to track and analyze certain traffic and usage statistics regarding the use of our Websites, such as the number of visitors to our Websites, how visitors are navigating to our Websites, visitors’ general geographic region information, how long individuals are visiting our Websites, and information about the equipment individuals are using to access our Websites (e.g., browser version and operating system). Google Analytics may use a Google Analytics cookie as part of this service, and we may share certain Personal Information with Google Analytics as part of this service. We use this traffic and usage information to gauge, internally, the effectiveness of our advertising efforts and to make improvements to our Websites and our marketing and promotional efforts.

In addition, we may use the following Google Analytics Advertising Features:

• Remarketing
• Google Display Network Impression Reporting
• Google Analytics Demographics and Interest Reporting
• Google Ads (an integrated service with Google Analytics)
• Google Search Ads 360
• Google Search Console

By enabling these features, we and certain third-party vendors use first-party cookies (such as the Google Analytics cookie) or other first-party identifiers, and third-party cookies (such as Google advertising cookies) or other third-party identifiers together for various purposes. The information collected includes demographic information about visitors to our Websites and general information about our visitors’ interests. We use the information collected through our use of the Google Analytics Advertising Features to track our visitors’ patterns and behaviors, segment our audience, and to better target our advertising and marketing efforts, for example to: (1) display targeted advertisements to individuals; (2) target visitors from a certain geographic region with certain ads in Google search results that have previously shown a high degree of success for consumers in that region; (3) advertise across other websites that you may visit, or (4) allow Google or other third-party vendors to show you ads on websites that you visit after using our Websites or clicking on an offer or ad in one of our messages or in our Websites.

For more information, please review the following:

• Information about Google’s use of cookies: https://policies.google.com/technologies/cookies?hl=en-US
• Information about Google’s use of information from sites or apps that use Google’s services: https://policies.google.com/technologies/partner-sites

You can opt out of our use of certain Google Analytics features by updating the “Ads Settings” in your browser (www.adssettings.google.com/authenticated) or mobile device (https://support.google.com/My-Ad-Center-Help/answer/12155656?visit_id=639032418452803465-3982172957&rd=1#mob&zippy=%2Cmobile-devices) or by enabling the Google Analytics Opt-Out Browser add-on in your browser (https://tools.google.com/dlpage/gaoptout). Because these opt-out and preference control pages are specific to the individual browser used to visit them, and because these pages are not operated by us, we are unable to perform the opt-outs on your behalf.

Text Message Alerts

If you provide your phone number to us, or if you otherwise consent to receive text messages from us, you may receive communications by text message relating to our Programs, such as reminders regarding your application or fundraising alerts. In such cases, you voluntarily authorize and direct us to send text messages using an automated system to the mobile telephone number you have provided. You are not required to receive or subscribe to text messages as a condition of using our Websites or participating in our Programs. Standard message and data rates may apply to your receipt of text messages. Once enrolled to receive text messages, you may opt out (i.e., stop text messages) at any time. With respect to any text messages, you may reply STOP, at which time we will reply by text to give you the option to stop receiving text messages from us (and after which we will stop sending these text messages). You may also opt out by contacting us at communications@moreheadcain.org. If you contact us to opt out by email, please include “Text Message Opt Out” or similar language in the subject line of your email, to assist us in our efforts to ensure prompt and proper processing of your request. Regardless of the method you use to opt out, please allow us a few days to process your opt out request.

Disclosure of Your Information

We may disclose Personal Information to third parties in the following circumstances:

• We may disclose Personal Information to the University of North Carolina at Chapel Hill or to entities affiliated with the University of North Carolina at Chapel Hill (including any such entities involved in collecting financial contributions, coordinating admissions, or disbursing financial aid) to enable us to administer and provide our Programs to individuals.
• If you are an applicant or participant in one of our Programs, we may disclose your Personal Information to your educational institution or to any references you have provided in your application materials for the purposes of (i) verifying your educational records or the contents of your application, (ii) reviewing your application, and (iii) facilitating and otherwise enabling your participation in our Programs.
• If you are a nominator, we may disclose your Personal Information to the individual you nominated to participate in one of our Programs and as otherwise needed to review and process your nomination.
• If you are an applicant to or participant in one of our Programs, we may disclose your Personal Information to your parent or guardian with your prior consent, or without your consent in certain limited scenarios where disclosure is reasonably necessary to protect your health, safety, or welfare or that of others.
• We may disclose Personal Information to our subsidiaries and affiliates and to any contractors, service providers, and other third parties who need to know such information (or such contractors or service providers may collect Personal Information directly from you on our behalf) to provide services to us that support our hosting, maintenance, operation, and promotion of our Websites and our Programs or our other permitted uses of Personal Information under this Policy. For example (and without limitation), we may disclose Personal Information to:
  • The back-end technology and hosting providers of our application management software, our constituent management platform, and our Websites (including the Morehead-Cain Network application and our Interview Platform).
  • Professional readers or third-party reviewers we engage to assist in reviewing applications or responses to interview questions.
  • Providers of third-party solutions we use to distribute automated emails and text messages.
  • Payments software providers that securely process credit card payments on our behalf.
  • Google Analytics (as described in the section above titled “Use of Google Analytics”).
• We may disclose Personal Information to our affiliates or another successor in the event of a reorganization, affiliation, change in legal structure, or dissolution under state law or if requested in due diligence for such a transaction.
• We may disclose your Personal Information to pursue a significant gift for which a potential donor seeks due diligence information about the Programs.
• We may disclose your Personal Information to comply with any court order, law, or legal process, including to meet national security or law enforcement requirements or to respond to any government or regulatory request or audit, to enforce or apply any contracts you or your organization have entered into with us, or if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our customers or others.
• We may disclose your Personal Information for any other purpose disclosed when the information is provided and for any other purpose with your consent.

Third-Party Sites and Services

Our Websites, emails, and text messages to you may include links to blogs, social media, and third-party websites. These third-party sites have their own privacy policies and terms of use and are not controlled by this Policy. You should carefully review any terms, conditions, and policies of such third-party sites before visiting them or supplying them with any Personal Information. If you follow a link from one of our Websites or email messages to any third-party site, any information you provide to that site will be governed by its own terms of use and privacy policy and not this Policy.

You may be able to use social media widgets on the Websites, including features that permit you to share Website content with third parties.  These widgets may collect your Personal Information, identify which materials you have viewed on the Websites, and make certain information about your preferences available to third parties.  The information collected by such widgets is controlled by the third-party provider of the applicable widget and is subject to their privacy policies.

We are not responsible for the privacy or security of any information you provide to a third-party website or the information practices used by any third-party site, including those that are accessed via links from our Websites, emails, or text messages. We make no representations, express or implied, concerning the accuracy, privacy, safety, security, or the information practices of any third-party sites. The inclusion of a link to a third-party site from our Websites or in our emails or text messages does not constitute any type of endorsement of the linked site by us. We are not responsible for any loss or damage you may sustain resulting from your use of any third-party website or any information you share with a third-party website.

Your Rights and Choices

Generally

You have certain choices regarding the Personal Information you provide to us. You can set your browser to refuse all or some browser cookies. If you disable or refuse cookies, you may be unable to access certain parts of pages of the Websites, or certain parts or features of the Websites may not function properly. Please see the section above titled “Tracking and ‘DO NOT TRACK’” for more information regarding how to opt out of cookies and similar tracking technologies used in connection with our Websites.

If you do not wish to have your Personal Information used by us to contact you for promotional purposes, you may send us an email with your request to communications@moreheadcain.org, or you can opt out by clicking on the “Unsubscribe” or similar link in the most recent email you received from us and by following the prompts that appear. This opt-out does not apply to information provided as a result of a support service inquiry or other informational or transactional communications (e.g., an application update or response to a specific inquiry or request you have made to us).

Accessing, Correcting, and Deleting Your Information

You may also contact us via email at communications@moreheadcain.org to request access to any Personal Information that you have provided to us or that we have otherwise collected from or about you, or to request that we correct or delete any Personal Information that you have provided to us. The following will apply with respect to each such request:

• We will evaluate such requests on a case-by-case basis.
• In certain cases we cannot delete your Personal Information. For example, if you are a participant in one of our Programs, we cannot continue to provide our Programs to you without retaining certain portions of your Personal Information, so a request to delete certain forms of Personal Information would require the cessation of your participation in our Programs.
• We may also not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

If you are a resident of the European Countries (as defined below), you will have additional rights as described below in the section titled “Users Outside of the United States.”

California “Shine The Light” Disclosure

The California Civil Code permits California residents with whom we have an established business relationship to request that we provide a list of certain categories of Personal Information that we have disclosed to third parties for their direct marketing purposes during the preceding calendar year. To make such a request, please contact us via email at communications@moreheadcain.org. Please note, however, that we do not currently disclose your Personal Information to third parties for their direct marketing purposes.

Nevada Residents: Sale Opt-Out Rights

 Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request to this designated address: communications@moreheadcain.org. Please mention that you are making  a “Nevada Sale Opt-Out Right” request. However, please know that we do not currently sell data triggering that statute’s opt-out rights.

Users Outside of the United States

Generally

Our Websites are hosted in the United States and our Programs are provided from the United States. It is possible that certain information will be stored on servers in multiple other countries on the “cloud” or other similar distributed hosting platforms. If you are accessing our Websites or otherwise contacting us or interacting with us from Canada, the European Economic Area, the United Kingdom, Asia, or any other jurisdiction with laws governing personal data collection, use, and disclosure that differ from United States laws, please note that by using our Websites or otherwise providing your Personal Information to us, you are expressly and knowingly consenting to the transfer of your Personal Information from your home country to the United States (where laws may differ from the laws of your jurisdiction) and to our use and disclosure of your Personal Information in accordance with this Policy.

European Users

If you are a user accessing and using our Websites or otherwise providing your Personal Information to us from the European Economic Area countries, Switzerland, or the United Kingdom (collectively, the “European Countries”, and such users, the “European Users”), please read this section carefully for more information about our collection, processing, and transfer of your Personal Information and your rights related to such activities. For the purposes of applicable data protection law in the European Countries, we act as controller for the Personal Information we process about you in accordance with this Policy.

1. Legal Basis for Processing

If you are a European User, we have the legal right to collect, process, use, and retain your Personal Information (“European Personal Information”) in the ways described in this Policy, based on your consent, the need to use your European Personal Information to provide you with the services you have requested, and/or our legitimate interests in furthering our existing relationship with you or preventing fraud. Accordingly, you have a contractual rather than a statutory obligation to provide such information. If you do not provide such information, you may be unable to use our Websites or participate in our Programs, and we may be unable to provide any information or services that you request.

1. Complaints

We endeavor to resolve complaints about your privacy and our collection or use of your European Personal Information transferred to the United States in accordance with applicable law. We strongly encourage European Users with inquiries or complaints regarding our Privacy Policy or our processing of European Personal Information to first contact us directly at communications@moreheadcain.org.

Depending on your country of residence, you may also have the right to lodge a complaint with:

• The Information Commissioner in the UK. The UK’s Information Commissioner may be contacted using the details provided at https://ico.org.uk/make-a-complaint or by telephone: (+44)(0)303 123 1113.
• A relevant data protection supervisory authority in the European Economic Area state of your habitual residence, place of work, or of an alleged infringement of data protection laws. A list of European Economic Area data protection supervisory authorities and their contact details are available at: europa.eu/about-edpb/about-edpb/members_en.
  1. Transfers of Your European Personal Information to the United States

In connection with our collection and use of your European Personal Information, we may transfer all or certain portions of your European Personal Information to our servers in the United States or our third-party service providers in the United States. Please note that the governing bodies in your jurisdiction have determined that the laws of the United States do not provide adequate protection for your European Personal Information. Accordingly, we are transferring your European Personal Information from your country to the United States based on your explicit consent, because the transfer is necessary for the performance of a contract between you and us or the implementation of pre-contractual measures taken at your request, because the transfer is necessary for the conclusion or performance of a contract concluded in your interest between us and another natural or legal person (e.g., your organization), and/or because the transfer is necessary for the establishment, exercise, or defense of legal claims. You acknowledge and agree that we may collect, use, and disclose your European Personal Information, both before and after such transfer, in accordance with this Policy.

1. Storage of Your European Personal Information

We securely store your European Personal Information in distributed locations in the United States using our own servers or the servers of reputable, third-party service providers such as our cloud-hosted infrastructure service providers and other cloud-based software service providers. We will keep such information for no longer than necessary for the purpose for which it is used or as otherwise required by applicable law. The length of time we retain your European Personal Information will depend on any legal obligations we have, the nature of any contracts we have in place with you, the existence of your consent, or our legitimate interests. Following the end of the relevant retention period, we will delete or anonymize your European Personal Information.

1. Your European Privacy Rights

If you are a European User, you will have the following additional rights with respect to your European Personal Information (your “European Privacy Rights”):

• The right to withdraw consent: If we are processing your European Personal Information based on your consent, you may withdraw that consent at any time. Your withdrawal will not affect the lawfulness of our processing based on your consent before your withdrawal. If you withdraw your consent, we may not be able to provide our Websites, our Programs, or our other services to you. We will advise you if this is the case at the time you withdraw your consent.
• The right to restrict processing:You may restrict our use and processing of your European Personal Information in certain circumstances (e.g., if you contest the accuracy of the data).
• The right to access:You have the right to be provided with a copy of your European Personal Information.
• The right to rectification:You have the right to require us to correct any mistakes in your European Personal Information. You are responsible for letting us know if your European Personal Information changes or is no longer correct.
• The right to erasure (also known as the right to be forgotten): You have the right to require us to delete your European Personal Information in certain situations.
• The right to data portability:You have the right to receive your European Personal Information you provided to us in a structured, commonly used, and machine-readable format and/or transmit that data to a third party in certain situations.
• The right to object: You have the right to object at any time to your European Personal Information being processed for our direct marketing purposes,and in certain other situations to our continued processing of your European Personal Information (e.g., processing carried out for the purpose of our legitimate interests, unless there are compelling legitimate grounds for the processing to continue or the processing is required for the establishment, exercise, or defense of legal claims).
• The right to opt out of certain onward transfers: Subject to certain exceptions under applicable law, you may choose to opt out of our disclosure of your European Personal Information to third parties or our use of your European Personal Information for a purpose that is materially different from the purpose for which it was originally collected or subsequently authorized by you; provided, however, that such right will not apply to our disclosures to third parties acting as an agent to perform tasks on our behalf and under our instruction.
• The right not to be subject to automated individual decision making:You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.

If you would like to exercise any of these European Privacy Rights, please:

• email us at communications@moreheadcain.org;
• provide such identifying information about yourself as we may reasonably request from you; and
• let us know which European Privacy Right you want to exercise and the European Personal Information to which your request relates.

Upon our receipt of your request and our verification of your identity, we will advise you whether we are processing European Personal Information concerning you and, if so, will provide you with a  copy of your European Personal Information being processed and certain information about the nature or purposes of the processing.

You will not usually have to pay a fee to exercise any of your European Privacy Rights. We may, however, charge a reasonable fee if a request is clearly unfounded, repetitive, or excessive.  Alternatively, we may refuse to comply with your request in those circumstances.

We may need to request specific information from you to help us confirm your identity and to validate your right to exercise your European Privacy Rights. This is a security measure to ensure that your European Personal Information is not disclosed to a person who does not have a right to receive it.

We try to respond to all valid requests to exercise European Privacy Rights within 30 days of receipt. Occasionally, it may take us longer if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated of our progress.

1. European Sensitive Information

We do not as a matter of course collect, store, or process sensitive information related to your racial or ethnic identity, political opinions, religious or philosophical beliefs, trade union membership, health (including genetic and biometric data), sex life, or sexual orientation (“European Sensitive Information”), unless you expressly and voluntarily provide such European Sensitive Information to us (for example, in connection with completing and submitting an application for one of our Programs). If we do process your European Sensitive Information, we will ensure we are permitted to do so under applicable data protection laws, such as on the basis of your explicit consent, where the processing is necessary to carry out our obligations and exercise our specific rights under applicable law, where the processing is necessary to protect your (or someone else’s) vital interests, where the processing is necessary to carry out our legitimate activities as a not-for-profit foundation, where you are physically or legally incapable of giving consent, or where the processing is necessary to establish, exercise, or defend legal claims. We will not disclose your European Sensitive Information for a purpose different from the purpose for which it was originally collected or subsequently authorized by you without your express affirmative consent (i.e., “opt-in”).

1. Profiling

Subject to our compliance with the other terms of this Policy, we may create a profile to analyze or predict your personal preferences or interests related to your use of our Websites and for the purposes described in this Policy. We do not make any decision about you that would have legal consequences or similarly significant effects on you based solely on automated decision-making, including the use of profiles.

1. Disclosure to Third Parties

If we intend to disclose your European Personal Information to any third party that will have the right to process your European Personal Information, we will only allow those organizations to handle your European Personal Information if we are satisfied they take appropriate measures to protect your European Personal Information. We will also impose contractual obligations on such third parties to ensure they only use your European Personal Information to provide services to us and to you.

In certain situations, we may be required to disclose your European Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement demands.

1. Marketing

We may use your European Personal Information to send you updates (by email, text message, telephone, or mail) about our Programs.

We have a legitimate interest in using your European Personal Information for our direct marketing purposes where you have an existing relationship with us or where you have contacted us about our Websites or our Programs. In all other cases, we will seek your prior consent before using your European Personal Information for our direct marketing purposes.

You have the right to opt out of receiving marketing communications from us at any time by following the instructions set forth in the section above titled “Your Rights and Choices.”

We may ask you to confirm or update your marketing preferences if you ask us to provide further services in the future, or if there are changes in the law, regulation, or the structure of our business.

Children Under the Age of 16

Our Websites and our Programs are not intended for children under 16 years of age, and no one under age 16 may provide any information to us on or using our Websites or otherwise. We do not knowingly collect Personal Information from children under 16. If you are under 16, do not use our Websites or provide any information about yourself to us, including your name, address, telephone number, email address, or any screenname or username you may use. If we learn we have collected or received Personal Information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under the age of 16, please contact us at communications@moreheadcain.org.

Data Security

We have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information that you provide to us is stored on our servers behind firewalls, and certain Personal Information will be encrypted using secure socket layer (SSL) technology.

The safety and security of your information also depends on you. When we have given you (or where you have chosen) a password for access to certain parts of our Websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information over the Internet is not completely secure. Although we have implemented security measures that we think are adequate, we cannot guarantee the security of your Personal Information transmitted to our Websites. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on our Websites.

Changes to Our Privacy Policy

We post any changes we make to our Policy on this page. If we make material changes to how we collect, use, or disclose individuals’ Personal Information, we will notify you through a notice on our primary Website and, if we have an email address on file for you, by email to such email address. The date this Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Websites and this privacy policy to check for any changes. Please note that we will not collect additional categories of Personal Information about you or use your Personal Information for additional purposes beyond those disclosed in this Policy without providing notice and, if you are a European User, obtaining your consent as indicated in the section above titled “European Users – Your European Privacy Rights.”

Contact Information

To ask questions or comment about this Policy and our privacy practices, please contact us at:

The Morehead-Cain Foundation
Post Office Box 690
Chapel Hill, NC 27514

communications@moreheadcain.org
(919) 962-1201