Box Elder School District (BESD) has released a formal data privacy notice outlining its procedures for protecting the personal information of individuals using its website and online services. The notice applies to employees, parents, guardians, volunteers, contractors, and other adult users, though it does not cover student educational records which are governed by separate FERPA policies.
Commitment to Data Privacy
The district stated it is committed to collecting only the minimum amount of personal data necessary for specified purposes and will not use covert surveillance unless permitted by law. Furthermore, BESD noted that it will not sell personal data unless expressly required by law and will not share data unless permitted by GRAMA or other governing laws.
Types of Information Collected
The district collects information provided voluntarily through online forms, account creation, newsletters, and surveys. This data may include names, email addresses, phone numbers, mailing addresses, employment details, and payment information. Additionally, the website automatically collects technical data such as IP addresses, browser types, device information, and pages visited via server logs, cookies, and analytics tools like Google Analytics.
Purpose of Data Usage
BESD utilizes this information for legitimate educational and administrative purposes, including communication, service delivery, employment management, and legal compliance. The district also uses the data to improve website functionality and ensure security against fraud or policy violations.
Third-Party Data Sharing
Regarding third-party involvement, the district does not sell personal information but may share it with trusted service providers for tasks such as website hosting, communication platforms, and payment processing. These providers are contractually obligated to use information only for specified purposes and maintain appropriate security measures.
Legal Disclosure Requirements
Information may also be disclosed to meet legal requirements, such as subpoenas, court orders, or GRAMA requests, or when necessary to protect the safety of individuals and the district.
Security and Retention Measures
To safeguard data, BESD implements security measures including encrypted data transmission, restricted access based on job responsibilities, and regular security assessments. The district retains personal information only as long as necessary for its stated purposes or as required by Utah State Archives retention schedules.
In the event of a data breach, the district will notify affected individuals without unreasonable delay, following the determination of the breach scope and restoration of system integrity, in accordance with Utah Code 13-44. Individuals also maintain rights to access, correct, or request the deletion of their personal information, subject to legal retention requirements.
