Privacy Policy

Scope

This Privacy Policy describes how NRSFAS Corporation (“NRSFAS,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit our website, communicate with us, or use our services (collectively, the “Services”).

This Privacy Policy is intended for a business-to-business context and public-sector engagements. It does not replace contract-specific data protection terms that may apply to a government or enterprise client engagement.

Information We Collect

Information you provide

We may collect information you choose to provide, including:

• Contact details (name, email address, phone number, organization, title)
• Inquiry details (message content, attachments you submit, and information you provide via forms or email)
• Business communications (meeting notes, correspondence, and proposal-related information)

Information collected automatically

When you visit our website, we may collect limited technical information, such as:

• Device and browser information (browser type, operating system)
• IP address and approximate location derived from IP
• Usage data (pages visited, time on site, referring pages)
• Cookies or similar technologies (as configured on our site)

How We Use Information

We use information for legitimate business purposes, including to:

• Respond to inquiries and communicate with you
• Provide, maintain, and improve our Services
• Prepare proposals, statements of work, or other pre-award materials
• Operate security, fraud prevention, and abuse monitoring
• Comply with legal obligations and enforce our terms

How We Disclose Information

We may disclose information:

• To service providers that support website operations, email delivery, analytics, and hosting, under contractual confidentiality and security obligations
• To professional advisors (legal, accounting) as needed
• To comply with law, legal process, or lawful requests
• In connection with a corporate transaction (such as a merger, acquisition, or asset sale), subject to appropriate safeguards

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Cookies and Analytics

We may use cookies and similar technologies to operate the website and understand usage patterns. You can control cookies through your browser settings. If we implement a cookie banner or consent tool, you may also manage preferences there.

If we use analytics, we configure it to the extent reasonably feasible to minimize data collection and limit retention where appropriate.

Data Retention

We retain information only as long as necessary for the purposes described above, unless a longer retention period is required by law or needed to establish, exercise, or defend legal claims. Proposal-related communications may be retained for auditability and procurement recordkeeping.

Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information. However, no method of transmission or storage is fully secure, and we cannot guarantee absolute security.

For additional information about our approach to protecting client information and supporting public-sector security and privacy expectations, review our Data Handling page.

Your Rights and Choices (California)

If you are a California resident, you may have rights under the CCPA/CPRA, subject to applicable exceptions, including the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of personal information (subject to exemptions)
• Request correction of inaccurate personal information
• Opt out of sale or sharing (we do not sell or share as described above)
• Limit the use and disclosure of sensitive personal information (we generally do not collect sensitive personal information through our website)

How to submit a request:

Email: info@nrsfas.org with the subject line “Privacy Request” and include your name, contact information, and the request type (access, deletion, correction). We will verify your identity as required and respond within the timeframes required by law.

Authorized agents:

You may designate an authorized agent to submit requests on your behalf. We may require proof of authorization and identity verification.

Notice at Collection (Website Forms)

When we collect personal information through a website form, we provide notice at or before the point of collection. Our form notice references this Privacy Policy and summarizes the categories of data collected and the purposes for which it is collected. If a form notice is not visible on a specific page, contact us at info@nrsfas.org, and we will address it promptly.

Children’s Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Third-Party Links

Our website may link to third-party sites. We are not responsible for the privacy practices of those sites. Review their policies before providing information.

Do Not Track and Global Privacy Control (GPC)

NRSFAS Corporation is committed to giving you meaningful choices about the data we collect and how we use it.

Do Not Track (DNT): Some web browsers incorporate a "Do Not Track" feature that signals to websites you visit that you do not want to have your online activity tracked. The internet industry has not established a unified standard for defining what DNT means or how to respond to these signals. As a result, we do not currently respond to automated DNT signals.

Global Privacy Control (GPC): We recognize and support the Global Privacy Control (GPC) signal. GPC is a standard enabled at the browser or extension level that communicates your request to automatically opt out of the sale or sharing of your personal information for targeted advertising. When our systems detect a valid GPC signal from your browser, we will automatically process this as a valid request to opt out of the sale or sharing of your personal information, in compliance with applicable state privacy laws. Please note that if you visit our website from a different device or browser, you will need to ensure the GPC signal is enabled on those platforms as well.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last Updated” date.

Contact Us