Privacy Policy

NCAA uses data, including personal information, to provide and improve our products, programs, and digital experiences. This Notice is designed to help you understand how we collect information about you (your “Personal Information”), how we use it, how we share it, and how you can exercise your privacy rights with respect to that information.

Last updated: 8/11/2026

1. What This Notice Covers

This Notice describes how the National Collegiate Athletic Association (“NCAA,” “we,” “us,” or “our”), collects, uses, discloses and otherwise processes your Personal Information when you interact with our websites, mobile applications, ecommerce experiences, career/job-board services, and other online services where this Notice is posted or linked (collectively, the “Services”).

This Notice is intended to provide a single, comprehensive privacy notice that applies across NCAA-branded and NCAA-operated digital properties, including NCAA.org, NCAATickets.com, NCAA Publications, the NCAA Eligibility Center, the NCAA Transfer Portal, and the NCAA Hall of Champions, as well as NCAA digital experiences delivered through vendors that provide hosting, website/app platforms, analytics, advertising, ecommerce, or other functionality on our behalf. This Notice does not cover any website or platform that merely displays the NCAA logo through a licensing arrangement such as NCAA.com.

For purposes of this Notice, the NCAA is the single “controller” (or equivalent term under applicable law) of Personal Information processed in connection with the Services. We may engage vendors and service providers that process Personal Information on our behalf as “processors” or “service providers.” Some third parties you interact with independently (for example, social media platforms, third-party advertisers, or payment processors) may process Personal Information under their own privacy policies.

This Notice does not apply to (a) workforce member information (job applicants, employees, contractors), or (b) information collected by third parties on their own websites or services, even if those third parties are linked from or integrated with our Services. We encourage you to review the privacy policies of any third party you interact with.

2. What Personal Information We Collect

We collect a variety of Personal Information in connection with offering our Services, including so we can personalize your experience and focus on what interests you most. We also collect a variety of Personal Information through partners who use our products and services. “Personal Information” generally means any information that identifies, relates to, describes, is reasonably capable of being associated with you or could reasonably be linked with you, directly or indirectly. Personal Information does not include publicly available information or information that is deidentified or anonymized consistent with applicable privacy laws.

Depending on how you interact with our Services and, in some instances, with our partners, we may collect the following categories of personal information about you:

· Identifiers such as real name, alias, unique personal identifier, IP address, or driver’s license number.

· Contact Information such as postal address, email address, or phone number.

· Demographic Information such as age, gender identity or expression, ethnicity, nationality, philosophical beliefs, marital status, or sexual orientation (if you choose to provide it or it is collected via surveys or promotions).

· Device and Location Information such as device type and identification number, zip code or other geolocation information, mobile network, operating system type, web browser type and version, or system events.

· Usage Information such as where you hover or click on a website, your interactions with features and content, search queries, date and time of certain actions, data on how you navigate and use the Services, links clicked and videos watched, or browsing history.

· Account Information such as username and password, security questions and answers, profile details and preferences.

· Transaction Information such as your purchase history, related payment information, information you input into our websites, or other data related to your use of our Services or websites and services provided by our partners.

· Payment Information such as payment card details or payment account information processed through our payment processors.

· Job Application and Career Information such as registration details, resume/CV, work history, education history,; and application status and related communications.

· Consumer History Information such as purchasing history, products or services considered or obtained, records of personal property, self-reported credit information, or other commercial history information.

· Communications and Content You Submit to our websites or Services or through websites or services operated by our partners, such as information submitted through a form or chat session, reviews of your experience, messages, comments, or other content you submit.

· Sensory Information such as audio recordings or images you submit where permitted and applicable.

· Inferences or assumptions derived from other information and data identified in this Notice, such as inferences regarding your preferences, interests, and predispositions.

NCAA Eligibility Center and NCAA Transfer Portal

This Notice covers the Personal Information collected through your use or interaction with our Services, including those offered through the NCAA Eligibility Center and the NCAA Transfer Portal. The Eligibility Center and Transfer Portal are specialized platforms that support the NCAA's student-athlete eligibility review and transfer processes.

Access to the Eligibility Center and Transfer Portal requires the creation of an account for the student-athlete, and certain additional registration or verification requirements may apply depending on the platform and the user's role. Personal Information may be entered into these systems by a variety of individuals, including the student-athlete, their parents or legal guardians, school administrators, and staff at NCAA member institutions acting on the student-athlete's behalf. By using the Eligibility Center or Transfer Portal — whether as a student-athlete or in another capacity — you acknowledge that the NCAA may collect Personal Information and may use or share that information as described in this Notice.

Some of the Personal Information collected through the Eligibility Center and Transfer Portal — including academic records and other education records — may be subject to the Family Educational Rights and Privacy Act ("FERPA"). FERPA governs educational institutions; the NCAA is not directly bound by FERPA. To the extent an educational institution discloses education records to the NCAA, it is the institution’s responsibility under FERPA to obtain any required consent and to impose any required restrictions on re-disclosure. The NCAA will comply with any such mutually agreed upon restrictions on re-disclosure. Please note that rights with respect to FERPA-protected records — including the right to inspect, correct, or restrict disclosure of those records — must be exercised directly with the educational institution that maintains them, not with the NCAA.

3. How We Collect Personal Information

Directly from You

We collect Personal Information directly from your use or interaction with our Services when you:

· Register for an account or create a profile;

· Place an order, request fulfillment, or subscribe to receive publications or other offerings;

· Sign up for newsletters, alerts, or marketing communications;

· Participate in surveys, promotions, contests, sweepstakes, or similar programs;

· Contact us for customer support or otherwise communicate with us (including via chat);

· Provide information through forms or interactive features.

Automatically from Your Use of the Services

When you download, access, or use our Services, we automatically collect certain Personal Information from your device or browser. We may also collect certain Personal Information about you through your use of services or websites provided by our partners. This may include information such as identifiers, device and location information, usage information, including any videos watched, transaction and account information, or call tracking information as described above. This includes information collected through technologies such as cookies, pixels, log files, web beacons, and other storage technologies (collectively, “Cookies and Similar Technologies”).

Automatically from Cookies and Similar Technologies

We and our business partners and service providers, such as advertising networks, analytics providers, social media platforms, may also use Cookies and Similar Technologies to collect information about your activities over time and across third-party websites, applications, and other online services (sometimes referred to as “behavioral tracking”). For example, we may track your activity when you visit the website of partner, including what actions you take on their website, where you hover or click on the website, what pages you view, or information you enter into the website. For more details about what these technologies are, why we may use them, and the choices you may have regarding their use, please see our Cookie Notice.

From Third Parties

We may receive Personal Information from third parties such as:

· Service providers and technology partners and affiliates that help us with hosting, analytics, security, fraud prevention, customer support, or marketing;

· Advertising and marketing partners and affiliates that assist with delivering and measuring advertising and campaigns;

· NCAA member institutions that we serve and partner with;

· Social media platforms and other third-party features you connect to our Services;

· Publicly available sources in limited circumstances.

Information We Generate

Based on the information we collect, we may also generate additional insights or inferences about you, such as inferences regarding your preferences, interests, predispositions, and sentiments. In some instances, we may use AI to understand the sentiment of an interaction with you, such as when you call us.

4. How We Use Your Personal Information

We use the information we collect about you, or that you provide to us, including Personal Information, for the following purposes:

· Providing services to you: operate, maintain, and provide access to the Services and their features; process transactions; fulfill orders; and provide customer support.

· Providing Services functionality to third parties: support tools and integrations that enable content delivery, ecommerce, and job-board functionality.

· Delivering events: deliver experiences to individuals attending NCAA championships and events.

· Personalization: customize content, recommendations, and experiences.

· Research and analytics: understand how users engage with the Services; measure performance; and improve and develop features and content.

· Programs and promotions: administer contests, sweepstakes, surveys, events, and similar programs.

· Marketing and advertising: send marketing communications, including regarding NCAA championships and events, and deliver and measure advertising, including targeted advertising where permitted.

· Communications and feedback: respond to your requests and inquiries; provide service-related messages; and request feedback.

· Product and service improvement: troubleshoot, test, and improve the Services; and develop new offerings.

· Compliance and legal: comply with applicable laws and regulations; enforce our terms and policies; and protect our legal interests.

· Security: detect and prevent security incidents, fraud, and other malicious, deceptive, or illegal activity.

· With your consent: for other purposes disclosed at the time of collection or with your permission.

We may also combine the information that you provide directly with information that we collect automatically, information we receive from third parties, including NCAA member institutions, or publicly available information. The combined information may include information about your use of the Services, your use of other websites, devices, mobile apps, and information from other sources.

5. How We Use Cookies and Similar Technologies

When you interact with our Services, as well as when you interact with the websites or services of our partners, we may use Cookies and Similar Tracking Technologies to automatically collect information about you. For more information about what Cookies and Similar Technologies are, why we may use them, and the choices you may have regarding their use please see our Cookie Notice.

For information about your rights regarding Cookies and Similar Tracking technologies, please see the “Your Privacy Rights” section below.

6. Disclosure of Your Personal Information

We may share your Personal Information with people and businesses that help operate our Services, as well as when we are otherwise legally permitted or required to do so.

We share Personal Information with the following categories of recipients where permitted by law:

· Affiliates and subsidiaries to support business operations and service delivery, to better understand how you use and interact with our Services across our affiliates and subsidiaries, and for our affiliates and subsidiaries to provide information or market products and services to you that you may be interested in.

· NCAA member institutions to better serve and provide offerings to you.

· Professional advisers, such as lawyers, accountants, insurers, information security and forensics experts.

· Service providers to enable them to perform services on our behalf, including marketing vendors, advertisement agencies, cloud storage solutions, payment processors, technology providers, website and data hosting, product and Services delivery, data analytics, data security, ecommerce operations, surveys, research, administration of promotions, offers and loyalty programs, other entities that support and help execute NCAA championships, and otherwise to help us carry out our mission and work. This includes Personal Information and information in pseudonymized form for example, in the use of data clean rooms, for the purpose of audience discovery, audience expansion, audience targeting and look-alike audience modeling.

· Third-party advertising and marketing partners, including online advertising networks, social media companies and other third-party services to collect information about your use of our Services or our partners’ websites and services over time so that they may play or display ads on other devices, applications, and platforms that you may use.

· With our business partners to provide you with complementary offerings, access to information from our business partners, and for marketing products or services to you that you may be interested in.

· Potential or actual acquirers or investors and their professional advisers in connection with any actual or proposed merger, acquisition, or investment in or of all or any part of our business.

· Competent law enforcement, government regulators and courts when we believe disclosure is necessary (i) to comply with the law, (ii) to exercise, establish or defend legal rights, or (iii) to protect the rights, property and safety of us, our consumers, business partners, service providers or another third party.

7. Additional Disclosures for Residents of certain U.S. States

The Personal Information we collect about you includes information within the below categories of data. Note that the “category” of data listed below refers to the category of Personal Information as defined under California law and represents the categories of Personal Information that we have collected, and how it has been shared, over the past 12 months. Inclusion of a category in the list below indicates only that we may collect some information within that category. We do not necessarily collect all information listed in a particular category, nor do we necessarily collect all categories of information for all individuals. While the categories are as defined under California law, the disclosures below also apply to residents of other states as well.

We have disclosed Personal Information in each of the categories listed below to our affiliates and subsidiaries, Partners, service providers, and other third parties, as well as to government entities where required, for our business purposes within the past 12 months. Please note that we have not necessarily disclosed every type of information listed in a given category. In addition, we have shared Internet or other electronic network activity information (as described below) with advertising and marketing partners for purposes of targeted advertising.

Category

Source

Purpose

Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (“IP”) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

Directly from you when you:

· Register for one of our products or services;

· Make information available to us via social networking logins;

· Participate in chats, web forums, or other interactive sessions;

· Subscribe to newsletters or provide feedback;

· Participate in surveys or promotions;

· Automatically when you interact with our Services including the site of a partner that uses our technology or platforms; or

· From our third-party business partners.

For everyday business purposes:

· To provide you with our products and services or the products and services of others, and to ensure functionality of our Services.

· To learn more about you and to perform market and consumer research, trend analysis, demographic analysis, and financial analysis.

· To communicate about, and administer your participation in, special events, programs, surveys, and other offers or promotions.

· To provide you with marketing, including third-party marketing, targeted advertising or other promotional information or content to you that correlates to your interests and browsing and usage history both within our Services and on other websites and applications.

· To engage with you when you contact us or to request your feedback.

· To enforce our terms, agreements, and policies.

· To improve our products and Services.

· To comply with laws and policies, fulfil our legal obligations, or address claims or disputes.

· To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.

Other Information About You or information that identifies, relates to, describes, or is capable of being associated with you, including, but not limited to, name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health information.

Directly from you when you:

· Register for one of our products or services;

· Make information available to us via social networking logins;

· Participate in chats, web forums, or other interactive sessions;

· Subscribe to newsletters or provide feedback; or

· Participate in surveys or promotions.

For everyday business purposes:

· To provide you with our products and services or the products and services of others, and to ensure functionality of our Services.

· To learn more about you and to perform market and consumer research, trend analysis, demographic analysis, and financial analysis.

· To communicate about, and administer your participation in, special events, programs, surveys, and other offers or promotions.

· To engage with you when you contact us or to request your feedback.

· To enforce our terms, agreements, and policies.

· To improve our products and Services.

· To comply with laws and policies, fulfil our legal obligations, or address claims or disputes.

· To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.

Characteristics of protected classifications under California or federal law, such as familial status, disability, sex, national origin, religion, color, race, sexual orientation, gender identity and gender expression, marital status, veteran status, medical condition, ancestry, source of income, age, or genetic information).

Directly from you when you:

· Register for one of our products or services;

· Make information available to us via social networking logins;

· Participate in chats, web forums, or other interactive sessions;

· Subscribe to newsletters or provide feedback; or

· Participate in surveys or promotions.

For everyday business purposes:

· To provide you with our products and services or the products and services of others.

· To learn more about you and to perform market and consumer research, trend analysis, demographic analysis, and financial analysis.

· To comply with laws and policies, fulfil our legal obligations, or address claims or disputes.

· To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.

Commercial information such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Directly from you when you:

· Register for one of our products or services;

· Make information available to us via social networking logins;

· Participate in chats, web forums, or other interactive sessions;

· Subscribe to newsletters or provide feedback;

· Participate in surveys or promotions;

· Automatically when you interact with our Services including the site of a partner that uses our technology or platforms; or

· From our third-party business partners.

For everyday business purposes:

· To provide you with our products and services or the products and services of others.

· To learn more about you and to perform market and consumer research, trend analysis, demographic analysis, and financial analysis.

· To communicate about, and administer your participation in, special events, programs, surveys, and other offers or promotions.

· To engage with you when you contact us or to request your feedback.

· To enforce our terms, agreements, and policies.

· To improve our products and Services.

· To comply with laws and policies, fulfil our legal obligations, or address claims or disputes.

· To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.

Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with an internet website application, or advertisement.

Automatically when you interact with our Services including the site of a partner that uses our technology or platforms.

· To learn more about you and to perform market and consumer research, trend analysis, demographic analysis, and financial analysis.

· To enforce our terms, agreements, and policies.

· To improve our products and Services, and to ensure functionality of our websites and Services.

· To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.

Geolocation Data

Automatically when you interact with our Services including the site of a partner that uses our technology or platforms.

For everyday business purposes:

· To improve our products and Services.

· To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.

Sensory Data, including audio, electronic, visual, thermal, olfactory, or similar information.

Directly from you when you provide it to us.

· To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.

· To physically secure our offices and other facilities.

Inferences (defined as “the derivation of information, data, assumptions or conclusions from facts, evidence or another source of information or data”) drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behaviour, attitudes, intelligence, abilities, and aptitudes.

From our third-party business partners.

· To provide you with our products and services or the products and services of others.

· To learn more about you and to perform market and consumer research, trend analysis, demographic analysis, and financial analysis.

· To improve our products and Services.

· To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.

In addition to the categories of Personal Information above, we also collect the following categories of Sensitive Personal Information to the extent permissible under applicable law:

Category	Source	Purpose for Collection
Your Social Security, driver's license, government issued photo IDs, state identification card, or passport number.	Directly from you when you provide it to us.	· To provide you with our products and services or the products and services of others.
Your account log-in, financial account, debit card, or debit card number in combination with any required security or access code, password, or credentials allowing access to an account.	Directly from you when you provide it to us.	· To provide you with our products and services or the products and services of others.
Your precise geolocation.	Automatically when you interact with our Services or the site of a partner that uses our technology or platforms. From our third-party business partners, such as data brokers.	For everyday business purposes: · To provide you with marketing, including third-party marketing, targeted advertising or other promotional information or content to you that correlates to your interests and browsing and usage history both within our sites and on other websites and applications. · To improve our products and Services.
Your racial or ethnic origin, national origin, or citizenship or immigration status, religious or philosophical beliefs, or union membership.	Directly from you when you provide it to us. From our third-party business partners, such as data brokers.	· To provide you with our products and services or the products and services of others. · Marketing, including third-party marketing, targeted advertising or other promotional information or content to you that correlates to your interests and browsing and usage history both within our sites and on other websites and applications.

We may use your Sensitive Personal Information to provide you with services you request from us, to aid in protecting and securing your Personal Information and our systems, to verify or maintain the quality or safety of our services and systems, to market products to you that you may be interested in and measure the effectiveness of that marketing, or as otherwise permitted under regulations or required by law.

Sale of Personal Information and Sharing for Purposes of Cross-Context Behavioral Advertising

Some of the ways that we disclose Personal Information, including online and offline Personal Information, to third parties constitutes a “sale” of Personal Information or “sharing” for cross context behavioral advertising under applicable privacy law. Cross-context behavioral advertising, or “targeted advertising”, is advertising customized based on predictions generated over time from your visits across different websites, devices, and mobile applications. In the preceding 12 months, we have sold or shared the following categories of Personal Information identified in the chart above:

Identifiers;
Other information about you;
Characteristics of protected classifications under California or federal law;
Commercial information;
Internet or other similar network activity;
Geolocation data; and
Inferences drawn from other Personal Information.

We sell or share each of these categories of information with the following categories of third parties:

· Advertising networks to deliver targeted advertisements to consumers and generate statistics and metrics related to the delivery of targeted advertisements, provide customization, auditing, research and reporting for us, our affiliates and other advertisers.

· Our partners to offer you products and services that may interest you.

We do not provide information that is directly associated with a specific person (such as name and address) to an advertising network when you interact with or view a customized advertisement. However, when you view or interact with an advertisement, the advertiser may make an assumption that you are interested in the subject matter of the advertisement.

For information on Cookies and Similar Technologies and how to modify your Cookie Settings, including how to opt-out, please see our Cookie Notice and “Your Privacy Rights.”

For more information on your right to opt out of the sale of your Personal Information or sharing for purposes of targeted advertising, please see the “Your Privacy Rights” section below. For more information on how to exercise your privacy rights, please see the “Exercising Your Privacy Rights” section below.

8. Data Retention

Except as otherwise permitted or required by applicable law, we retain Personal Information in the categories set forth above only for as long as we have a legitimate business need to provide our Services to consumers and our partners. We keep some categories of information longer than others so that we can provide our Services, such as identifiers, Internet or network activity, and inferences.

To determine the appropriate retention period, we consider various criteria, including whether the Personal Information continues to be necessary to provide our Services; the amount, nature, and sensitivity of the Personal Information; the potential risk of harm to consumers from unauthorized use or disclosure; and the purposes for which we collect the Personal Information.

We continually review and enhance our retention practices in order to protect consumers while providing our services.

9. Your Privacy Rights

Depending on your state of residency, and the type of data collected, you may have some or all of the rights listed below with respect to your Personal Information, subject to certain exemptions provided by law. We may choose to extend these rights to you even if we are not required to under applicable law.

Right to access/know: You may have the right to know and request information about the categories and specific pieces of Personal Information we have collected about you, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the categories of third parties, or specific third parties, depending on your jurisdiction, to whom we share such information, as well as the categories of Personal Information shared. You may also have the right to know if we have sold or disclosed your Personal Information, including the categories of third parties, or specific third parties, to whom we have sold Personal Information and the categories of the personal information sold. You may also have the right to access any inferences derived from your Personal Information and the right to know whether we use or sell your Personal Information for the purpose of training large language models.

Right to opt-out of the sale or sharing of personal information: Our disclosure of your Personal Information to third parties may constitute a “sale” or “sharing” of your Personal Information or constitute processing of your Personal Information for purposes of targeted advertising or direct marketing under certain state laws. To the extent that our use constitutes such activity under applicable law, you have the right to opt out by (a) opting out of cookies in our US-facing websites’ cookie preference center, or (b) submitting a request to us using a method listed in the “Exercising Your Privacy Rights” section below. To opt out of the sale or sharing of your offline information please submit a request to us. You may still receive advertising, including personalized ads based on our data. Please note, if you use different browsers, devices, or services you will need to enable an opt out preference signal and opt out of cookies for each separately.

Right to delete. You may have the right to request the deletion of your Personal Information, subject to certain exceptions.

Right to correct. You may have the right to request correction of any inaccurate information we hold about you. We may not be able to accommodate your request if we believe it would violate any law, any legal requirements, or cause the information to be incorrect. Information solely retained for data backup purposes is generally excluded.

Right to portable data. You may have the right to obtain Personal Information about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another entity without hindrance.

Right to non-discrimination. You may have the right to not be discriminated or retaliated against for exercising any of the above-listed rights.

Right to limit use and disclosure of sensitive personal information. To the extent we process or disclose your sensitive personal information, you may have the right to limit our use of this information to what is necessary to perform the services expected by an average consumer. Depending on your state of residency, you may also have the right to opt-out of the processing of your sensitive personal information.

Right to appeal. Depending on your jurisdiction, you may have the right to appeal our decision regarding a request by email at privacy@ncaa.org. Please use the same email address that you used to submit the initial privacy rights request when you submit your Request to Appeal and please add “Request to Appeal” in the subject line of the email. If you do not use the same email address, we cannot link your request to appeal to your initial privacy rights request.

Data solely retained for data backup purposes is principally excluded from these rights until it is restored to an active system or next accessed or used for a sale, disclosure, or commercial purpose. These rights also do not apply to pseudonymous data if the information necessary to identify the individual is kept separately and is subject to controls that prevent access to the information. Pseudonymous data is Personal Information that can no longer be attributed to a specific individual without the use of additional information, if the additional information is kept separately and is subject measures to ensure that Personal Information is not attributed to the specific individual.

10. Exercising Your Privacy Rights

If you would like to exercise any of the privacy rights outlined above please make your request using the other contact method listed below.

Email: privacy@ncaa.org

You also may designate an authorized agent to make a request on your behalf. If you are submitting a request through an authorized agent, the authorized agent must provide us with your signed written permission stating that the agent is authorized to make the request on your behalf. Alternatively, your authorized agent may provide evidence of having power of attorney or acting as a conservator for you. We may also request that any authorized agents verify their identity and, where permitted by law, may reach out to you directly to confirm that you have provided the agent with your permission to submit the request on your behalf.

When you exercise these rights and submit a request to us, we may verify your identity where required by law by asking you for the following pieces of information: your relationship with us, first and last name, email address, telephone number, and postal address.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will use the Personal Information you provide to us when submitting a consumer request only to verify the requestor’s identity or authority to make the request.

Depending on your jurisdiction, we generally have between 45 and 90 days to respond to your request.

There may be circumstances where we will not be able to honor your request, in which case, we will notify you. For example, if you request deletion, we may need to retain certain Personal Information to comply with our legal obligations or other permitted purposes. Additionally, if you continue to interact with our Site, the Mobile App, and our Services after you request deletion, this may result in us receiving your Personal Information despite having honored your previous request to delete. Depending on your jurisdiction, you may have the right to appeal this decision or to contact your Attorney General if you have concerns about the results of the appeal.

Please note that depending on your jurisdiction, we may only be obligated to respond, free of cost, to Personal Information requests from the same consumer up to two times in a 12-month period. Depending on your jurisdiction, after you have exceeded the applicable number of requests, we have the right to charge a reasonable fee for fulfilling the request. In addition, under the applicable state privacy law, and for the protection of your Personal Information, we may be limited in what Personal Information we can disclose.

Depending on your jurisdiction, we may maintain your rights requests for at least 2 years. This information will not be used for any other purpose except to review compliance processes; it will not be shared except as necessary to comply with a legal obligation.

11. Data Security

The security of your information is important to us. We have implemented reasonable security measures to protect the information, including without limitation, use of firewalls, encryption, cybersecurity controls, application controls and monitoring. No method of electronic storage or transmission over the Internet is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee complete security.

12. Minors and Children

Our general Services are directed at adults and are not intended for children under the age of 13. We do not knowingly collect Personal Information from children under 13 through our general Services. If we learn that we have inadvertently collected Personal Information from a child under 13 without verifiable parental consent, we will take prompt steps to delete that information. If you believe we have collected Personal Information from a child under 13 without parental consent, please contact us immediately at privacy@ncaa.org. More broadly, our general websites and digital properties are not directed at, and we do not seek to collect Personal Information from, individuals under 18. If you are under 18, please do not use our general Services or submit any Personal Information through them.

Eligibility Center and Transfer Portal. An important exception applies to our Eligibility Center and Transfer Portal, which are specifically designed to serve prospective and current student-athletes, including those who may be minors. Where a student-athlete who is under 18 (or under 13, where applicable) registers with or uses the Eligibility Center or Transfer Portal, the NCAA collects Personal Information in that official capacity. Registration and use of these platforms by a minor requires parental or guardian consent where required by applicable law, and such consent is obtained as part of the registration process. Personal Information in connection with these platforms may be submitted by the student-athlete, their parent or legal guardian, coaches, school administrators, or staff at NCAA member institutions acting on the student-athlete's behalf.

13. Third-Party Links

Our websites may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control third-party websites and are not responsible for their privacy notice. If you submit Personal Information to any third-party websites or service providers, your information is governed by their privacy policies. When you leave our websites, we encourage you to read the privacy notice on every website you visit.

14. Changes to this Notice

We reserve the right to change this Notice at any time in our sole discretion. If we make changes, we will post the revised notice with the update date here, so that you can see what information we gather, how we might use that information and in what circumstances we may disclose it. If we make a material change to this Notice, i.e. a change notifying you of materially different collection, processing, or transfer, we will notify of such change as required by law. By continuing to use our services after notice is provided, you accept and agree to this Notice as modified.

15. International Users

This website is based and administered in the United States of America. The website is governed by the laws of the United States and is not directed at users based outside of the United States.

16. Contact Details

If you have any questions about this Notice, the ways we collect and use your Personal Information, or you would like to exercise your privacy rights, you may contact us at:

Email: privacy@ncaa.org