Privacy/Disclaimer Statement

Brightpoint Community College Website Privacy & Disclaimer Statement  

Brightpoint Community College (“Brightpoint”), as a member of the Virginia Community College System (VCCS), is committed to protecting the privacy and security of all individuals who interact with our website, brightpoint.edu. This Privacy & Disclaimer Statement explains what information we collect, how it is used, how it is protected, and the rights available to you. This statement is intended to comply with NIST privacy and security standards, VCCS policies, and all applicable Commonwealth of Virginia regulations. 

Legal Authority 

Brightpoint collects and manages information under the authority of: 

  • The Code of Virginia 
  • Applicable VCCS policies 
  • Federal and state regulations governing educational institutions 
  • Legitimate operational needs that support the mission of the college 

Information We Collect 

Automatically Collected Information (Non-PII) 

When you visit brightpoint.edu, our systems automatically collect and store limited technical information necessary for website security and performance monitoring. This includes IP address, browser type, device type, pages visited, date/time, and referring site. 

Information You Voluntarily Provide (PII) 

Brightpoint may collect personally identifiable information (PII) that you voluntarily provide, such as your name, email address, phone number, mailing address, program interests, or student ID. Only the minimum PII required to provide services is collected. 

Cookies and Tracking Technologies 

Brightpoint uses first-party cookies, Google Analytics, and limited third-party advertising cookies for site performance, metrics, and outreach. Users may opt out of non-essential cookies at any time. 

Purpose of Information Use 

Collected information is used solely for improving website performance, responding to inquiries, enhancing college services, conducting analytics, and ensuring security. Brightpoint does not sell personal data or use it for profiling. 

Information Sharing and Disclosure 

Information may be shared only with VCCS entities, authorized college departments, contracted vendors required to follow NIST-aligned security controls, or law enforcement when required by law. 

Data Security & Protection Measures 

Brightpoint uses NIST SP 800-53 aligned safeguards, including encryption, access controls, audit logging, secure configurations, vulnerability management, and incident response procedures. 

Breach Notification 

If a breach occurs involving personal information, Brightpoint will notify affected individuals and state authorities in compliance with the Code of Virginia and VCCS policy. 

Data Retention and Disposal 

Information is retained only as long as necessary and disposed of according to Library of Virginia retention schedules and NIST SP 800-88 secure disposal guidelines. 

Your Privacy Rights 

You may request access, corrections, deletion (as permitted by law), or information about how your data is used. Requests may be submitted to the Brightpoint Creative Services team. 

Content Disclaimer 

Brightpoint provides its website and materials for general guidance only and does not guarantee completeness or accuracy. Information does not constitute a contract. Brightpoint may modify content at any time. 

External Links 

Brightpoint is not responsible for the content, security, or privacy practices of external websites and encourages users to review third-party privacy policies. 

Updates to This Statement 

This policy may be updated periodically to reflect changes in laws or practices. Updates will be posted on this page.