Privacy Policy

Privacy Policy

Last updated: September 14, 2026

Keweenaw Bay Ojibwa Community College (“KBOCC,” “College,” “we,” “us,” or “our”) respects the privacy of students, prospective students, employees, applicants, alumni, community members, and visitors who interact with the College and its websites, systems, programs, and services.

This Privacy Policy describes the types of information that may be collected through KBOCC’s public website and College-operated online services, how that information may be used and disclosed, and the measures KBOCC takes to protect information within its control.

This Privacy Policy applies primarily to KBOCC’s public website and online services operated by or on behalf of the College. Certain information maintained by KBOCC, including student education records, personnel records, financial aid information, financial records, health-related information, grant records, and information maintained within specialized College systems, may be subject to additional federal law, Tribal law, College policy, contractual requirements, or other applicable requirements.

1. Information We May Collect

KBOCC may collect information that individuals voluntarily provide as well as certain technical information generated when individuals access College websites or online services.

Information You Provide

Depending upon the service, form, application, or webpage being used, information provided to KBOCC may include:

• Name;
• Mailing or physical address;
• Email address;
• Telephone number;
• Date of birth;
• Student identification or applicant information;
• Enrollment and academic information;
• Employment or employment-application information;
• Financial aid or scholarship information;
• Information submitted through admissions, registration, financial aid, scholarship, employment, event registration, or other College forms;
• Communications submitted to College employees or offices;
• Information submitted when requesting services, appointments, assistance, or information; and
• Other information voluntarily submitted to KBOCC.

Individuals should provide sensitive or confidential information only through College-approved systems or when specifically requested by an authorized KBOCC office.

2. Information Collected Automatically

When individuals access KBOCC websites or certain online services, KBOCC or its service providers may automatically collect technical information such as:

• Internet Protocol (IP) address;
• Browser type and version;
• Device type;
• Operating system;
• Date and time of access;
• Pages and resources accessed;
• Referring website or webpage;
• General geographic information derived from an IP address;
• Time spent on webpages;
• Website navigation and interaction information; and
• Other technical information necessary to operate, secure, maintain, and improve College websites and services.

This information may be collected through server logs, cookies, analytics technologies, or similar tools.

3. How KBOCC May Use Information

KBOCC may use information collected through its websites and online services for legitimate educational, administrative, operational, safety, and institutional purposes, including to:

• Provide requested information, services, and resources;
• Respond to questions, requests, or inquiries;
• Process applications for admission, employment, scholarships, programs, or other opportunities;
• Support enrollment, registration, advising, financial aid, and academic services;
• Administer College programs, events, activities, and services;
• Communicate with students, applicants, employees, alumni, community members, and other constituents;
• Maintain College records;
• Operate, maintain, troubleshoot, and improve College websites and technology systems;
• Evaluate website usage, effectiveness, accessibility, and functionality;
• Protect the security and integrity of College information and technology systems;
• Detect, investigate, or prevent fraud, misuse, cybersecurity threats, or unauthorized activity;
• Carry out institutional research, planning, assessment, and improvement activities;
• Meet accreditation, grant, reporting, auditing, and compliance requirements;
• Comply with applicable federal law, Tribal law, legal process, contractual obligations, or other governing requirements; and
• Carry out other activities reasonably related to KBOCC’s educational mission and institutional responsibilities.

KBOCC does not sell personal information collected through its website for commercial purposes.

4. Student Education Records and FERPA

Student education records maintained by KBOCC are governed by the Family Educational Rights and Privacy Act (FERPA), applicable federal regulations, and KBOCC policies and procedures.

FERPA generally provides eligible students with the right to:

• Inspect and review their education records;
• Request amendment of education records they believe are inaccurate or misleading;
• Provide consent before personally identifiable information from education records is disclosed, except when disclosure is otherwise permitted by FERPA; and
• File a complaint with the appropriate federal office regarding alleged FERPA violations.

At a postsecondary institution, FERPA rights generally belong to the student regardless of the student’s age.

KBOCC may disclose information from education records without prior consent when permitted by FERPA, including, when applicable, to College officials and authorized parties who have a legitimate educational interest.

KBOCC may designate certain student information as directory information in accordance with FERPA and applicable College policy. Students will be provided applicable notices and procedures concerning directory information and the ability to restrict disclosure as required by FERPA.

This Privacy Policy does not replace KBOCC’s FERPA notice, student records policies, or other requirements governing education records.

5. Financial Aid and Financial Information

KBOCC may collect and maintain information necessary to administer:

• Federal and other financial aid;
• Scholarships;
• Grants;
• Tuition and fees;
• Student accounts;
• Payments;
• Refunds;
• Federal Work-Study; and
• Other financial services.

Financial and financial-aid information may be used or disclosed as reasonably necessary to administer College programs, process authorized transactions, comply with federal requirements, meet audit or reporting obligations, and fulfill other legitimate institutional responsibilities.

Payment processing and other financial functions may be provided through third-party service providers. Information submitted directly to those systems may also be governed by the provider’s privacy and security practices.

6. Employment and Applicant Information

Individuals applying for employment or providing employment-related information to KBOCC may be asked to provide information including:

• Contact information;
• Employment history;
• Educational history;
• Transcripts;
• Professional credentials;
• References;
• Eligibility documentation;
• Background information;
• Veteran or Indian-preference documentation when applicable; and
• Other information necessary for recruitment or employment purposes.

Employment information may be used for recruitment, hiring, personnel administration, benefits administration, compliance, workforce management, and other legitimate employment purposes.

7. Cookies and Similar Technologies

KBOCC websites may use cookies and similar technologies to support:

• Website functionality;
• Security;
• User preferences;
• Website analytics;
• Performance measurement; and
• Improvement of online services.

A cookie is a small data file stored on a user’s device.

Users may configure their browsers to block or delete cookies. Some website functions or services may not operate properly if certain cookies are disabled.

8. Website Analytics

KBOCC may use website analytics tools or services provided by third parties to understand how individuals use College websites.

Analytics information may include:

• Website visits;
• Device and browser information;
• Approximate geographic location;
• Referral sources;
• Pages viewed;
• Time spent on pages; and
• Interactions with website content.

KBOCC may use this information to evaluate website performance, improve navigation and accessibility, understand user needs, and improve College communications and online services.

Third-party analytics providers may process information according to their own privacy practices and contractual arrangements.

9. Third-Party Systems and Services

KBOCC relies upon third-party technology and service providers for various educational and administrative functions.

Such systems may include:

• Learning management systems;
• Student information systems;
• Admissions and application systems;
• Financial aid systems;
• Payment systems;
• Email and productivity platforms;
• Online forms;
• Library and academic resources;
• Appointment and scheduling systems;
• Video and multimedia services;
• Career services;
• Cloud storage and technology infrastructure; and
• Other educational or administrative applications.

When an individual uses a third-party service, information may also be subject to that provider’s privacy policy, terms, and security practices.

When third-party service providers receive protected College information on behalf of KBOCC, KBOCC expects such information to be handled in accordance with applicable law, contractual obligations, and College requirements.

10. External Websites

KBOCC websites may contain links to websites operated by other organizations.

Links may be provided for educational purposes, convenience, access to services, or additional information.

A link from KBOCC does not necessarily constitute endorsement of the external organization, its services, or all information presented on its website.

KBOCC does not control external websites and is not responsible for their content, availability, security, accessibility, privacy practices, or terms.

Users should review the privacy practices of third-party websites before providing sensitive personal information.

11. Information Sharing and Disclosure

KBOCC may disclose information when reasonably necessary to carry out College operations or when permitted or required by applicable law.

Information may be shared with:

• Authorized KBOCC employees and officials with an appropriate institutional need for access;
• Contractors, consultants, and service providers performing services for or on behalf of KBOCC;
• Government agencies or regulatory authorities when disclosure is required or permitted;
• Accrediting organizations;
• Auditors and authorized reviewers;
• Granting agencies or program partners when authorized and appropriate;
• Emergency personnel or law enforcement when disclosure is legally authorized or reasonably necessary to address an emergency;
• Educational institutions when authorized or permitted;
• Other parties with the individual’s consent; and
• Other persons or entities when disclosure is authorized or required by applicable federal or Tribal law.

KBOCC may also disclose information when reasonably necessary to protect College systems, property, operations, rights, or safety or to investigate suspected unlawful, fraudulent, or unauthorized activity.

Student education records will be disclosed only as permitted by FERPA and other applicable requirements.

12. Data Security

KBOCC recognizes the importance of protecting personal, educational, financial, employment, and institutional information.

The College uses administrative, technical, and physical safeguards that it considers reasonable and appropriate based upon the nature of the information and the systems involved.

KBOCC seeks to limit access to sensitive information to individuals who have an appropriate educational, administrative, operational, contractual, or legal need for access.

However, no website, computer system, network, electronic communication, or information-storage system can be guaranteed to be completely secure.

KBOCC therefore cannot guarantee the absolute security of information transmitted electronically or maintained within College systems.

Users are responsible for protecting passwords and account credentials and should not share authentication information with unauthorized individuals.

Suspected cybersecurity incidents, phishing attempts, compromised accounts, or unauthorized access involving KBOCC systems should be reported promptly through KBOCC’s designated information technology or security reporting procedures.

13. Data Retention

KBOCC retains records and information for periods reasonably necessary to fulfill the purposes for which information was collected and to meet applicable:

• Educational requirements;
• Administrative needs;
• Financial requirements;
• Grant requirements;
• Accreditation requirements;
• Records-management requirements;
• Contractual obligations;
• Federal requirements;
• Tribal requirements; and
• Litigation or legal obligations.

Retention periods may vary according to the type of information involved.

Information no longer required may be securely destroyed, deleted, anonymized, or otherwise disposed of in accordance with applicable KBOCC policies and procedures.

14. Email and Electronic Communications

Electronic communications submitted to or generated by KBOCC may constitute College records and may be retained when appropriate.

Users should not assume that ordinary email is confidential or secure. Sensitive information should be submitted through College-approved secure systems whenever such systems are available.

KBOCC may send administrative, educational, enrollment, financial aid, safety, employment, or other institutional communications when appropriate.

Optional promotional or informational communications may provide an unsubscribe option when appropriate. Administrative, educational, emergency, transactional, or legally required communications may not be subject to an unsubscribe option.

15. Children and Minors

KBOCC is an institution of higher education; however, the College may serve minors through dual enrollment, Early Middle College, community education, youth programming, outreach activities, or other College programs.

Information involving minors may be subject to additional program requirements, parental or guardian permissions, contractual terms, or applicable legal requirements.

KBOCC does not intend to collect personal information directly online from children under age 13 in a manner inconsistent with applicable law.

Parents or legal guardians who believe that a child has improperly submitted personal information through a KBOCC website may contact the College.

16. Social Media

KBOCC may maintain official accounts on third-party social media platforms.

Information submitted to or interactions occurring through those platforms may be collected and processed by the platform provider according to its own privacy policy and terms.

Users should not submit confidential, protected, or sensitive information through public social media channels.

17. Cultural and Indigenous Information

KBOCC’s mission includes the promotion and preservation of Anishinaabe culture, language, and lifeways.

Certain cultural, historical, linguistic, artistic, ceremonial, or Indigenous knowledge maintained or presented by KBOCC may be subject to cultural protocols, community expectations, intellectual-property protections, permissions, or restrictions beyond those ordinarily associated with publicly accessible information.

The appearance of such information on a public website should not automatically be interpreted as permission for unrestricted reproduction, commercialization, modification, artificial-intelligence training, appropriation, or redistribution.

Users are expected to respect applicable cultural protocols, creator rights, community expectations, and restrictions identified by KBOCC, the Keweenaw Bay Indian Community, creators, knowledge holders, or other appropriate rights holders.

18. Requests Concerning Personal Information

Individuals may contact KBOCC regarding personal information they have submitted to the College or to request correction of inaccurate contact or account information when appropriate.

KBOCC may be unable to modify, delete, disclose, or provide access to particular information when records are subject to:

• FERPA;
• Records-retention requirements;
• Financial aid requirements;
• Employment requirements;
• Accreditation requirements;
• Grant requirements;
• Legal holds;
• Contractual obligations;
• Federal or Tribal law; or
• Other legitimate institutional requirements.

Requests concerning student education records will be handled in accordance with FERPA and KBOCC policy.

19. International Access

KBOCC is located in the United States and primarily provides educational programs and services within the United States.

Individuals accessing KBOCC websites from outside the United States should understand that information submitted to KBOCC may be processed or stored in the United States.

To the extent a particular privacy law applies to KBOCC or a particular activity, KBOCC will address applicable obligations in accordance with governing requirements.

20. Tribal Authority and Sovereign Immunity

Keweenaw Bay Ojibwa Community College is a Tribal institution of higher education organized and chartered under the laws of the Keweenaw Bay Indian Community and operates pursuant to the authority granted to it by its Charter and applicable Tribal law.

Nothing contained in this Privacy Policy, on the KBOCC website, or through the use of any KBOCC website or online service shall be construed as an express or implied waiver of any sovereign immunity, governmental immunity, defense, privilege, jurisdictional right, or other protection available to Keweenaw Bay Ojibwa Community College or the Keweenaw Bay Indian Community.

No waiver of sovereign immunity shall be effective except through an express written waiver duly authorized in accordance with applicable Tribal law and governing authority.

Nothing in this Privacy Policy is intended to expand or diminish the jurisdiction of the Keweenaw Bay Indian Community, the Keweenaw Bay Tribal Court, or any other governmental authority.

21. Governing Authority

KBOCC is organized and operates pursuant to its Charter and applicable laws of the Keweenaw Bay Indian Community.

KBOCC is also subject to applicable federal laws and requirements associated with its activities as an institution of higher education and recipient of federal funding.

State or local laws may apply to particular KBOCC activities to the extent applicable under governing law.

Nothing in this Privacy Policy shall be interpreted as an agreement that any particular state law governs KBOCC generally, as consent to state jurisdiction, or as a waiver of sovereign immunity or any other legal protection.

22. Changes to This Privacy Policy

KBOCC may revise this Privacy Policy periodically to reflect changes in:

• College operations;
• Technology;
• Applicable laws and regulations;
• Tribal law;
• College policies; or
• Privacy and security practices.

The “Last Updated” date will be revised when changes are made.

When appropriate or required, material changes may also be communicated through additional notices.

23. Relationship to Other College Policies

This Privacy Policy should be read together with other applicable KBOCC policies, notices, handbooks, and procedures, including those relating to:

• FERPA and student education records;
• Information technology;
• Information security;
• Acceptable use;
• Student records;
• Financial aid;
• Employment;
• Nondiscrimination;
• Title IX;
• Records retention;
• Website Terms of Use; and
• Other applicable institutional policies.

When this general Privacy Policy conflicts with a more specific KBOCC policy, legally required notice, contractual obligation, or governing legal requirement, the more specific or controlling requirement applies to the extent of the conflict.

24. Contact KBOCC

Questions or concerns regarding this Privacy Policy or KBOCC’s privacy practices may be directed to:

Keweenaw Bay Ojibwa Community College
770 N. Main Street
L’Anse, MI 49946
Phone: (906) 524-8400

Questions concerning student education records or FERPA should be directed to the appropriate KBOCC office responsible for student records.

Questions involving information security, suspicious electronic communications, compromised accounts, or potential unauthorized access should be reported through KBOCC’s designated information technology or security reporting procedures.