Privacy policy.

Policy updated August 2026

Information collected

ASPC limits collection to information reasonably necessary to operate the website, respond to institutional inquiries, maintain publications, and protect its services.

Information you provide

The contact form collects a name, organization when provided, work email address, inquiry category, subject, and message. The same information may be received when a visitor contacts ASPC directly by email. Visitors should not submit classified, controlled, financial, medical, identity, or security-sensitive information.

Technical information

The hosting and email services may process routine technical records such as an IP address, request time, requested page, browser information, delivery status, and security events. The contact handler records the submitting IP address in the delivered administrative message and uses a short-lived session value to limit repeated submissions.

Search

Archive searches are performed in the visitor’s browser against a public ASPC search index. Search terms are not intentionally transmitted to ASPC by the search interface, although normal hosting logs may record the address of a results page when a query appears in its URL.

Use and disclosure

ASPC may use information to evaluate and respond to an inquiry, route correspondence, maintain an administrative record, protect the website, investigate misuse, improve public information, and satisfy applicable legal obligations. Information is not sold and is not used to create advertising profiles.

Information may be available to personnel responsible for the relevant inquiry and to providers that support website hosting, email delivery, security, or records administration. ASPC may also preserve or disclose information when reasonably necessary to protect rights and systems, address abuse, comply with lawful process, or respond to an emergency.

Retention and security

Routine inquiries should be retained only while they remain operationally useful and normally no longer than 24 months after the last substantive activity. Records connected to an active publication, partnership review, dispute, security event, or legal obligation may be retained longer. Hosting logs and backups are controlled by the applicable service provider and may follow separate operational cycles.

ASPC uses proportionate administrative and technical measures intended to limit unauthorized access, alteration, or disclosure. No internet transmission or email system can be guaranteed completely secure, and visitors should choose the information they submit accordingly.

Your choices

A person may ask ASPC to identify, correct, or delete information supplied through an inquiry. A request should provide enough detail to locate the correspondence and verify that the requester is entitled to act on it. ASPC may retain limited information where necessary for security, record integrity, legal obligations, or documentation of a completed request.

The website does not currently offer public accounts, behavioral advertising, payment processing, or an operational mailing-list subscription.

External services and links

ASPC publications link to government agencies and other source institutions. Those destinations operate under their own privacy and accessibility practices. ASPC’s website and email may be hosted or delivered by contracted infrastructure providers that process information only as needed to provide those services.

Privacy questions

Privacy questions and requests may be submitted through the contact form or sent to inquiries@aspcouncil.org. Select “Website issue” and include “Privacy” in the subject line.