Privacy Notice

Thank you for choosing to be part of our community at CIEE, Inc. doing business as CIEE (“CIEE”, “we”, “us” or “our”). We are committed to protecting your right to personal information and your right to privacy. If you have any questions or concerns about our Participant Privacy Notice, or our practices about your personal information, please contact us at dataprotectionofficer@ciee.org. We will update this Privacy Notice from time to time as we adopt new data privacy policies or change our personal data privacy practices.

This Privacy Notice outlines our policies and practices regarding our collection, use, processing and disclosure of personal information provided by you. It applies to any personal information that you voluntarily provide to us when you:

Register to use or use our services including, but not limited to, our website and provide information required to use our services.
Apply for jobs through one of our programs
Fill out application forms on our website to participate in our programs or promotional programs
Register or subscribe to our newsletters or conferences
Create blog posts
Ask us to authenticate you as an authorized user and provide you with a password
Ask us to communicate with you and answer your questions. Request information or services from us
Complete our surveys for our statistical, demographic and marketing analyses
Submit your payment
When CIEE administers or improves our website
When CIEE prevents and detects fraud
When CIEE protects and enforces our legal rights

Personal information that we collect, depends on the context of your interactions with us, on CIEE's family of websites – www.ciee.org, my.ciee.org, beacon.ciee.org, globaleducationconference.ciee.org, globalinternshipconference.com, and highschoolstudyabroadconference.org (the “Sites”) and the services that you choose.

Lawful Basis for Collecting and Processing Personal Data

CIEE's lawful basis for collecting and processing your personal information includes any of the following:

Legitimate Business Purpose: necessary for the legitimate interests pursued by CIEE or third parties in providing programs and services.
Contractual Necessity: for the performance of an agreement and/or contract to which you are a party, or to take steps at your request prior to entering into an agreement or contract.
Protection of Vital Interest: necessary to protect your vital interests or the vital interests of another person.
Public Interest: necessary for the performance of a task carried out in the public interest.
Legal Obligation: necessary for compliance for legal obligations required by applicable law.
Consent: you have given consent for the processing of your personal data for one or more specific purposes. In the case of a data subject is under 16 years of age, consent must be given or authorized by the data subject's natural parent or legal guardian.

Types Of Personal Data We Collect

The personal information we collect and or process takes different forms – it may be factual, images or other recorded information that identifies or relates to you.

Examples include:

Contact information or directory information such as, first and last name, email address, physical address, phone numbers, and other location information
Government or other official Identification Numbers
Personal documents in support of visa applications
Photographs, audio and video recordings
Health and safety information
Social identification (e.g. citizenship, nationality, racial/ethnic origin)
Personal information arising out of Health & Safety incidents while on CIEE programs. (e.g. police reports, hospital reports)
Any other information that you voluntarily choose to provide to CIEE that would help us improve our services
Financial payment information to process applications. (e.g. visas, application fees)

Sensitive personal information

CIEE recognizes that certain jurisdictions have enacted laws that require higher protection of certain sensitive personal information. “Sensitive personal information” includes categories of personal data identified by European and other data privacy laws as requiring special treatment. This may include personal identity numbers; racial or ethnic origin; political opinions; religious, philosophical, or other similar beliefs; membership of a trade union or profession or trade association; physical or mental health; biometric or genetic data; sexual life; or criminal record (including suspected criminal activities).

As a rule, CIEE does not require such sensitive personal information from you. In the limited cases where we do seek to collect such information, we will seek to do so in accordance with applicable data privacy law requirements. If you choose to provide us with unsolicited sensitive personal information, you consent to us using the information, subject to applicable law as described in this Privacy Notice.

Why We Collect Personal Data

As a data controller or data processor, CIEE collects and processes personal data only as necessary, in the exercise of the organization's legitimate interests to provide programs and services to you, such as;

Camp USA, Congress–Bundestag Youth Exchange, Faculty-led and Custom, Flat Buddy, Future Leaders Exchange, Global Internship, Gap Year Abroad, Homestay, High School Abroad, High School Summer Abroad, International Faculty Development Seminars, Intern Trainee, Research Scholar, Study Abroad, Teach Abroad, Teach English as a Foreign Language, Work & Travel and Youth Exchange and Study.

CIEE collects and processes your personal information to correspond with you prior to entering into a contractual relationship with CIEE, to answer your questions, to process your application, to enroll you in our programs, to act as an intermediary with partner organizations, to sponsor your visa applications, to keep record of your attendance or academic achievements and accomplishments, to provide you with academic or health and safety support services while on our programs and/or to conduct marketing surveys about your experience on our programs, etc.

The provision of our programs and services may require us to process and share your personal information with third-party partner organizations, such as academic institutions, recruiters, potential employers, agents, etc. or foreign government organizations to provide you with a wide range of our services.

How We Collect Personal Data

CIEE receives personal data from multiple sources. Most often, CIEE receives this data directly from you through our website or when you directly contact us.

Information you provide to us

When you submit a contact form, create an account, or enter a search query on the Sites, you may choose to disclose information about you, including your name, physical address, email address, phone number, and date of birth, along with information regarding your interests, educational background, and interests relating to our programs. We collect information from you when you enroll our programs, when you contact or communicate with us (including through the website, by email or otherwise). We gather information about you when you provide it to us, or interact with us directly, for instance engaging with our staff or registering for our programs.

Agents and or Independent Contractors

CIEE works with several third-party service providers who promote our programs to you. When you submit your personal data to them for the purpose of enrolling or receiving information about our programs, they will forward your personal information to us for the purpose of offering you CIEE services. You should check the Agents or Independent Contractors for additional information on their privacy notices. We are not responsible for their privacy policies.

Website Usage Information

We collect information while monitoring our CIEE websites, when you provide it to us, such as when you use our website(s) or otherwise communicate with us (such as by email or via our social media pages). These websites are included in the “Sites” defined above. CIEE collects certain information automatically when you use the website, such as the IP addresses and domain names of visitors, browser type, history of pages viewed and other usage information about your use of the website. We collect this information for site administration purposes, such as to analyze this data for trends and statistics. We may share statistical or aggregated non-personal information about our users with advertisers, business partners, sponsors and other third parties. This data is used to customize our website content and advertising to deliver a better experience to our users. Please see the section below on cookies for more information.

Information that is automatically collected

Like many websites, we use analytics, advertising, and measurement tools that rely on cookies, web beacons, and other automated tracking technologies (“Tracking Tools”) to help us analyze how users interact with and use the Sites, improve the Sites, personalize your experience on the Sites, provide you with information we believe may be of interest to you, and identify others like you who may be interested in our programs and services.

The information collected automatically may include information about your computer and internet connection, including your IP address, operating system, browser type, and details regarding your visits to our Sites, including browsing actions, patterns, and information about any referring website, search engine, social media platform, or link. In some cases, as described in this Privacy Notice, we may also configure Tracking Tools to process user-provided information, such as contact information submitted through forms, for measurement and advertising purposes. We may associate information collected through Tracking Tools with personal information you provide to us.

Third-Party Tracking Tools; Google Analytics, Google Ads, and Microsoft Clarity

The Tracking Tools we use include services we obtain from third parties. The information generated by these services may be transmitted to and stored by the third parties that provide them and will be subject to their privacy policies. We do not control these third parties' tracking technologies, how they may be used, or the information they may collect, and we are not responsible for these third parties' privacy policies.

Google Analytics

One of the third-party Tracking Tools we use is Google Analytics. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google's privacy policies. Learn more about Google's partner services and how to opt out of tracking of analytics by Google.

Google Ads Enhanced Conversions and User-Provided Data

We use Google Ads and related Google tag technologies, including tags deployed through Google Tag Manager, to help measure the effectiveness of our online advertising. When you submit a form, create or update an account, complete an application, make a payment, or otherwise provide information through our Sites, we may use and share certain first-party information you provide, such as your email address, phone number, name, or mailing address, with Google for conversion measurement and ad attribution.

Before this information is sent to Google for Enhanced Conversions, it is converted in your browser into a hashed format using a secure one-way hashing algorithm, such as SHA-256, so Google does not receive your raw, unhashed personal data. Google uses the hashed information to help match conversions to Google ad interactions and provide conversion reporting to us. This helps us understand whether our advertising is effective and improve our marketing.

Google's use of this information is governed by Google's privacy policies and customer data policies. We do not use Enhanced Conversions to send text messaging opt-in data or text-message consent records to Google. Where required by law, we obtain consent for the collection, sharing, and use of this information for advertising measurement.

You can manage how Google uses information for ads through Google's ad settings and other privacy controls, and you may also be able to limit tracking through your browser or device settings.

Microsoft Clarity

We partner with Microsoft Clarity to capture how you use and interact with our Sites through behavioral metrics, heatmaps, and session replay to improve and market our products and services. Website usage data is captured using first- and third-party cookies and other tracking technologies to determine the popularity of products and services and online activity. Additionally, we use this information for site optimization, fraud and security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Cookies and Web Beacons

The Tracking Tools we use rely on cookies and web beacons:

Cookies. A cookie is a small data file that can be placed on your hard drive when you visit certain websites. Cookies are used to collect and store information, such as the type of computer you are using and how often you log on to a site. Our Sites use “session cookies,” to improve your navigation across the Sites and to remember you over the course of a single visit, and “persistent cookies,” which are stored on your computer until they expire or are deleted and help us provide better service to you over multiple visits to the Sites. You can always delete or disable cookies through your browser. If you disable cookies, you may not be able to sign in or take advantage of certain features of the Sites that require cookies.
Web Beacons. In addition to cookies, we deliver “web beacons” through our Sites and through emails we send you. Web beacons are small graphic images that may not be visible to Sites visitors that collect information about Sites usage on an anonymous basis. In some cases, anonymous data may be transmitted to third-party advertising networks. We use web beacons for our own internal analytics, to better understand the ways users interact with our website, and to determine whether a particular email was received and opened. We also use web beacons in connection with our marketing efforts. For example, web beacons allow third-party advertising networks to detect when a user has visited CIEE's website, and then serve them ads for CIEE's programs when they browse to another site.

Information from third-parties and other sources

We supplement the information we collect through the Sites with information from third parties (including our advertising partners and other service providers) and information we collect through other means, such as offline or through other websites. This information includes social media profile information, depending on the settings you have established for your social media accounts.

CIEE may disclose or share personal information with its international affiliates for various purposes, as permitted by law, including in order for its affiliates to provide services.

CIEE may share some personal data with certain local and foreign third parties service providers who have a need to know and require your personal information within the scope of your agreement with CIEE, for example, we may share your personal data with local and foreign government officials, agencies, consulate or embassies to process and facilitate your visa, host families, accommodation or transportation providers to arrange for program stay and logistics, universities to enroll you in programs, or potential local or foreign employers to facilitate internships or jobs. We may also disclose personal information to advertising, analytics, and measurement providers for advertising attribution, conversion measurement, and analytical purposes.

No mobile information collected in connection with our text messaging programs will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the Text Message services. We can disclose or share your personal data with lawful basis.

Protection Of Personal Data

We use security measures, in compliance with applicable law, to protect personal information from unauthorized access or use.

To safeguard against unauthorized access to personal information by third parties, all electronic personal information held by CIEE is maintained on systems protected by secure network architectures that contain firewalls and intrusion-detection devices. The servers holding personal information are “backed up” (i.e., recorded) on a regular basis in an effort to avoid any inadvertent erasure or destruction of such personal information and are stored in facilities with appropriate security and fire-detection and response systems.

Unfortunately, the transmission of information via the internet is not completely secure. Although we take measures to protect your personal data, we cannot guarantee its security. Any transmission of personal information while using any of our online applications is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained online. The safety and security of information also depends on you. If we have provided you with (or you have chosen) a username and password for access to any of our online applications or websites, you are responsible for keeping such information confidential. Please do not share your username and password with anyone.

Data Subject's Rights

As a person who provides CIEE with personal information, you may inquire as to the nature of the personal information stored at and/or processed by CIEE. You will be provided reasonable access to your personal information held by CIEE and, where appropriate, with the ability to review and correct inaccuracies. CIEE will cooperate in providing such access. All such requests for access may be made by submitting your personal data access request to our Data Protection Officer at dataprotectionofficer@ciee.org.

To help protect your privacy and provide security, CIEE takes reasonable steps to verify your identity before granting access to information. CIEE shall respond to such reasonable requests made by you within such time period as required under applicable law after your identity has been confirmed and you have clarified the specific personal information that you require. If you demonstrate that the purpose for which the personal information is being processed is no longer legal or appropriate, the personal information will be deleted, unless the law or applicable data-retention requirements require otherwise.

In some regions like the European Economic Area (“EEA”), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal information, and (iv) if applicable, to data portability. In certain circumstances, you may have the right to object to the processing of your personal information.

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal.

If you are a resident in the EEA and you believe we are unlawfully processing your information, you can also have the right to complain to your local data protection supervisory authority. You can find the contact details here: Data Protection Authorities

Transferring Personal Data To The United States

CIEE's headquarters is in the United States. Please be aware that any information you provide to us will be processed in the United States and is subject to United States laws. The privacy and data protection laws in the United States may not be equivalent to the laws in your country of residence. If you are accessing our website from outside the United States be aware that your information will be transferred to, stored and processed by us in our facilities and by those third parties with whom we may share your personal information.

CIEE collects and transfers personal data to the United States only under the above listed lawful basis. CIEE endeavors to apply reasonable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with CIEE and the practices described in this Privacy Notice.

Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to the United States, we do so in accordance with applicable data protection laws and rely on appropriate legal transfer mechanisms and safeguards.

How We Handle Personal Data From International Visitors

Any personal data that is provided to CIEE will be hosted on United States servers. Where personal data is transferred to the United States from a jurisdiction with data transfer restrictions, such transfers are made under the safeguards described in the “Transferring Personal Data To The United States” section above.

Data Storage And Retention

CIEE is a global organization; personal data we collect may be transferred internationally throughout the world to countries where CIEE does business, which may not have the same data protection laws as the country in which you reside. We have internal policies and procedures in place in an effort to achieve an equivalent level of protection across our organization. The transfer of personal data to other countries is based on a business need or to comply with applicable laws. Personal data stored or processed in a foreign jurisdiction may be accessed under a lawful order made in that jurisdiction.

Personal data may, for the purposes explained in this Privacy Notice, be transferred to and stored in other countries where CIEE does business, which may not have the same data protection laws as the country in which you reside. Where such transfers are subject to data transfer restrictions, they are made under appropriate safeguards.

Your personal data is stored by CIEE on its servers, and on the servers of the cloud-based database management services CIEE engages, located in the United States. CIEE keeps your personal information for as long as it is necessary for the purpose set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

For more information on where and how long personal data is stored, and for more information on rights of erasure and portability, please contact CIEE's data protection officer at dataprotectionofficer@ciee.org.

Children's Privacy

The programs that we offer are not intended for children under the age of 13, and we do not knowingly collect personal data from children under the age of 13. Parental consent is required before collecting or processing personal data of children who are under the age of 16.

Notification Of Changes

We may update this privacy notice from time to time. The updated version will be indicated “Revised” date and the updated version will be effective as soon as it is accessible on our website www.ciee.org. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

For further information or comments on our Privacy Notice, please contact our data protection officer at dataprotectionofficer@ciee.org, or contact CIEE at the following address:

Council on International Educational Exchange
4 Milk Street, Suite 202
Portland, Maine 04101
Phone: 1.207.553.4000
Fax: 1.207.553.4299
E-mail: contact@ciee.org

EFFECTIVE: 16 October 2026