Privacy Policy

Effective Date: March 2, 2026

​

1. Introduction

Protecting your private information is our priority. This Privacy Policy applies to tracs.org and the Transnational Association of Christian Colleges and Schools (TRACS). It governs data collection and usage for our non-profit educational services. For the purposes of this Privacy Policy, "TRACS" refers to tracs.org and the Transnational Association of Christian Colleges and Schools.

By using the TRACS website, you acknowledge the data practices described in this statement.
 

2. Data Protection Officer (DPO)

TRACS acts as the "Data Controller" for your personal information. To ensure your data is handled with the highest level of integrity, we have appointed a Data Protection Officer:

• DPO: Andy Carrein, Director of I.T.

• Email: DPO@TRACS.ORG

• Direct Phone: (434) 333-6130

• Address: 15935 Forest Road, Forest, Virginia 24551
   

3. Information We Collect

A. Information You Provide Voluntarily

We collect personally identifiable information when you elect to use our services. This may include:

• Contact Data: Name, email address, phone number, and mailing address.

• Institutional Data: College, University, or Seminary name and your role.

• Transaction Data: Billing and credit card information (processed via secure, third-party encrypted gateways).

B. Information Collected Automatically

When you visit tracs.org, we automatically collect certain technical information:

• Google Analytics: We use Google Analytics to understand site traffic and user behavior. This includes your IP address, browser type, domain names, access times, and referring website addresses. This data is used for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of the TRACS website.

​

4. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA) or UK, we process your information under the following legal bases:

1. Contractual Necessity: To fulfill orders or provide accreditation services.

2. Consent: For newsletters, alerts, and the use of non-essential cookies.

3. Legal Obligation: When required by law to disclose information.

4. Legitimate Interests: To improve our website performance, security, and institutional outreach.

​

5. How We Use & Share Your Information

TRACS does not sell, rent, or lease its customer lists to third parties.

We use your data to:

• Deliver the services or products you requested.

• Inform you of other products or services available from TRACS.

• Third-Party Service Providers: We share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to TRACS.
   

6. International Data Transfers

TRACS is based in the United States. If you are accessing the site from outside the U.S., please be aware that your information will be transferred to and stored on our servers in the United States. We implement Standard Contractual Clauses (SCCs) and robust encryption to ensure your data remains protected according to EU/UK standards.

​

7. Your Rights (The "Big Eight")

Under the GDPR, you have specific rights regarding your data. You may contact our DPO at any time to:

1. Access: Request a copy of the data we hold about you.

2. Rectification: Correct any inaccurate information.

3. Erasure: Request that we delete your data ("Right to be Forgotten").

4. Restriction: Limit how we process your data.

5. Data Portability: Request a transfer of your data to another provider.

6. Objection: Object to processing based on legitimate interests.

7. Automated Decision Making: Request human intervention in automated processes (Note: TRACS does not currently use automated profiling).

8. Withdraw Consent: Revoke your permission for data use at any time.
    

8. Security & Retention

• Security: We secure your personal information from unauthorized access using SSL (Secure Sockets Layer) Protocol for all transmissions, especially sensitive financial data.

• Retention: We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal, accounting, or reporting requirements.

​

9. Children Under Sixteen

TRACS does not knowingly collect personally identifiable information from children under the age of sixteen. Our services are directed toward adult professionals and educational institutions.
 

10. Changes to this Statement

TRACS reserves the right to change this Privacy Policy. We will notify you about significant changes by sending a notice to your primary email address or by placing a prominent notice on our site.

​

11. Contact Information

If you believe TRACS has not adhered to this Statement, or if you wish to exercise your data rights, please contact Andy Carrein (DPO) at DPO@TRACS.ORG or (434) 333-6130.