ARRT WEBSITE PRIVACY POLICY

The American Registry of Radiologic Technologists (“ARRT,” “We,” or “Us” ), 1255 Northland Drive, St. Paul, MN 55120-1155, operates this Privacy Policy (“Privacy Policy”), which describes how we collect, process, and share Personal Information, and provides information about your rights and your choices about how we handle your Personal Information. This Privacy Policy applies to your use of our website, online services, and in-person services (collectively, our “Service” or "Services").

This Privacy Policy is part of the ARRT Website Terms of Use, which governs your use of this Website. You'll find a link to the Terms of Use in the footer on every page of this website.

^{ARRT Website Privacy Policy Last Updated: September
2026}

YOUR USE OF THIS PRIVACY POLICY

ATTENTION: Please read this Privacy Policy carefully before using the Service. Accessing, downloading content from, or using the Service indicates that you accept and acknowledge this Privacy Policy in full. If you do not accept this Privacy Policy, do not access or use the Service.

Unless explicitly stated otherwise, any new features that augment or enhance the current Service shall be subject to this Privacy Policy.

Please review the Privacy Policy each time You use the Service. By using the Services, you agree to be bound by the most recent version of the Privacy Policy. If We materially change this Privacy Policy, We will update this page to reflect any changes to this Privacy Policy.

HOW WE COLLECT PERSONAL INFORMATION

The following describes the information We collect relating to identified or identifiable individuals (“Personal Information”). We collect Personal Information from You when You create a profile, use the Service, contact or interact with Us, fill out a form, and voluntarily provide Us with Your comments and other content in connection with using the Service. After You register for the Service, We collect data from You and from third-party institutions regarding Your qualifications, education, and professional records.

From You

When You create a profile, We may collect Your name, gender, birthdate, social security number, telephone number, email address, mailing address (from which We may calculate Your congressional district), fax number, role (such as board member, program director, staff member, etc.), Your state license information, educational background (including education level), professional records and other employment information, other professional qualifications, user ID, password, account login security questions, information that allows Us to determine through FEMA whether You have been affected by a disaster, such as a hurricane or a fire, that impacts Your ability to complete Your continuing education credits, and information related to Your other non-ARRT credentials.

When You contact Us, We may collect Your name, email address, and any other information that You provide to Us voluntarily.

When You submit an ethics violation report, We collect any information that You provide to Us voluntarily.

When You apply for certification and registration, We may collect Your facial photograph, copies of and information from diplomas, licenses, and other certificates, information about Your clinical education and practice experience, Your classroom education, academic degree and institution, potential violations of ARRT’s Rules of Ethics, payment information, renewal information, reinstatement information, information about Your credentials from other organizations (including the exam dates for those credentials, the status of Your credentials from other organizations (including dropped credentials and their dates), and credential valid dates), and information related to Your continuing education credit information, and discontinued credentials ).

When You submit an eligibility appeal request form, We collect any Personal Information that You provide to Us voluntarily.

When You make a payment through the Service, We may collect Your name, address, credit card type, payment submission date, payment settlement date, payment amount, payment response type and code, payment status, transaction purpose (including renewal, reinstatement, and probation), and other Personal Information sufficient for our payment processors to process the transaction and provide fraud screening, information security, and compliance.

When you interact with ARRT through social media, We may collect your facial photograph, voice recording, and any other information you provide.

When you leave a voice message for ARRT or provide a written message through the ARRT Message Center, We may collect your voice recording and any information you provide in the message.

When you participate in a video or audio meeting, We may collect your voice recording, facial image, and any information you provide.

Automatic Collection

When You access and use the Service, We may collect certain Personal Information automatically. For example, we collect Personal Information relating to your device, browser, or application (e.g. device identifiers), IP address, Your user name, roles/permissions for the Service, the domain name of Your Internet service provider, Your location, the Service features You use and the time of Your use, Your mobile device information (e.g., device model and operating system version), identifiers from cookies, session history, Service navigation metadata, and other data generated through applications and browsers, including via cookies, pixels, and similar technologies when you use our Service, access our Service, or when you open our communications. Additional information collected is described in the Analytics and Cookies and Other Tracking Technologies sections below.

From Other Sources

We may collect Personal Information about You, such as educational background information, professional records, disciplinary records, facial image, voice recording, and other information related to Your professional credentials, from third-party sources, such as program directors, clinical experience verifiers, state licensing boards, other professional membership associations and societies, exam service providers, disability accommodation providers, and continuing education providers.

We may combine all of the information We collect from or about You and use it in the manner described in this Privacy Policy.

HOW WE USE YOUR INFORMATION

We may use the Personal Information that We collect for several purposes, including:

To compile and maintain a database of professional and educational credentials and the professional record of those who obtain certification and registration with Us, or seek to obtain or maintain our certification and registration, and to make available the data to the public and to various third parties, such as employers, other education organizations, continuing education providers, and state and regulatory authorities, consumers, and patients as a verification service;
The purposes for which You provided it;
To provide information and services to You;
To process and respond to Your inquiries and comments;
To send You information about Your relationship or transactions with Us;
To facilitate payment transactions (Your information will be used to submit Your payment information to our payment processor);
To administer, operate, and improve the Service or develop new services;
To personalize and enhance Your experience using the Service;
To send periodic emails. If You choose, the email address You provide may be used to send You occasional news, reminders, updates, etc. (Note: If You would like to update Your email preferences, or unsubscribe from receiving future emails at any time, We include detailed instructions at the bottom of each email.);
To generate and review reports and data about our user base and Service usage patterns;
To analyze the accuracy, effectiveness, usability, or popularity of the Service;
To compile aggregate data for internal and external business purposes;
To prevent fraud and abuse of the Service and to otherwise protect users and visitors and our organization;
To assist law enforcement and respond to subpoenas; and
To perform other business activities as needed, or as described elsewhere in this Privacy Policy.
As explained elsewhere in this Privacy Policy, Personal Information We collect may be processed by our partners in providing services related to the Service (such as administration services, technical services relating to the maintenance, servicing, and upgrading of the products, software services, hosting services, customer service, data migration services, and analytical services, among others).

Please note that You may choose not to allow Us to use Your Personal Information for certain purposes as described in the Your Choices Regarding Your Personal Information section below.

HOW YOUR PERSONAL INFORMATION IS DISCLOSED

Your Personal Information may be disclosed to third parties in accordance with this Privacy Policy. Please note that a user may choose not to share certain information as described in Your Choices Regarding Your Personal Information below.

Third Party Service Providers and Business Partners

We may use third-party service providers and business partners to perform functions in connection with the Service and our other services, such as: delivering announcements (email) and renewal reminders (email and U.S. mail); developing, registering for, and delivering exam payment processing; certificate printing; providing self-assessments; providing other activities to assist Registered Technologists in maintaining their certification and registration; website searching; analyzing and improving the utility, usability, reliability, and operation of the Service; storing, securing, hosting, and migrating data; advertising; social sharing; providing users with services; and providing other services as described in this Privacy Policy. We may share Your Personal Information with these providers and partners for their marketing and promotional purposes, and so they can provide services to You (where legally required, We will obtain Your express consent).

Brevo. We use Brevo to send emails. Brevo may collect Your name, email address, telephone number, address, device information (including Your IP address, operating system, browser ID, email client type, and other information about Your system and connection), and usage data (including the dates and times when You access emails and Your browsing activities, such as information related to the pages You view and the emails You open), including through the use of cookies and tracking technologies. For more information, please visit Brevo’s privacy policy.
CE Broker. We have an agreement with CE Broker to access our credential verification services. CE Broker may collect your ARRT ID, first name, last name, credentials, CE biennium start and end dates, zip code, registration information, and sanction and discipline information. For more information, please visit the CE Broker privacy policy.
CyberSource. We use CyberSource for payment processing services. CyberSource may collect your first name, last name, email address, phone number, mailing address, order and payment information, IP address and information about the device used to access the Service, how and which Service are used, information provided though means such as social media or when you contact us through our website, and enrollment numbers or demographic group information (which does not identify individual users). For more information, please visit the CyberSource privacy policy.
Facebook. By clicking on the Facebook button on the Service, You will be automatically transported to the official Facebook Page for ARRT, https://www.facebook.com/americanregistryofradiologictechnologists/. By Your posting to ARRT's Facebook page, ARRT may be able to collect Personal Information about You related to Your Facebook account. For more details on the information that Facebook collects or makes available, please visit Facebook's privacy policy.
Galaxy Digital. We use Galaxy Digital to accept and process volunteer applications, and to store information about volunteers. Your name, address, email address, qualifications, and related information may be shared with Galaxy Digital if you volunteer with us. For more details on the information that Galaxy Digital collects or makes available, please visit Galaxy Digital's privacy policy.
Google. We use various Google products and services to support ARRT, including:

Tag Manager. We use Google Tag Manager and Dynamic Remarketing to deploy marketing tags and cookies. Google Tag Manager or Dynamic Remarketing may collect information related to tag firing, information contained in standard HTTP request logs, and information related to online identifiers, such as cookie identifiers and IP addresses. For more information, please visit Google’s privacy policy.
APIs and Static. We may use Google APIs and Static to deliver our website to You by deploying CDN headers and cookies. For more information, please visit Google’s privacy policy.
Analytics. We use Google Analytics to analyze user activity on our Service for remarketing and behavioral targeting. Google and other third parties may use cookies, pixels, web beacons, and other storage technologies to collect information from the Service and from other Internet websites, and use that information for the purposes of targeting ads and providing measurement services. Google may track Your activity over time and across websites.

Instagram. We use Instagram for marketing purposes. By clicking on the Instagram button on the Service, You will be automatically transported to the official Instagram Page for ARRT, and your Personal Information may be shared with Instagram.
LinkedIn. We use LinkedIn for marketing purposes. By clicking on the LinkedIn button on the Service, You will be automatically transported to the official Instagram Page for ARRT, and your Personal Information may be shared with LinkedIn.
Paradigm Testing. We use Paradigm Testing to assist in evaluating requests for test accommodations in accordance with the Americans with Disabilities Act (ADA). If You require accommodations, You will start by answering yes to the question about ADA accommodations on your application for ARRT certification and registration. After we receive your ARRT application, we’ll provide instructions on your payment confirmation page about how to apply for accommodations. If you applied via a paper application, those instructions will be mailed to you. When You then request ADA accommodations from Paradigm, You will provide Personal Information, including Your contact information, medical information related to the nature of Your mental or physical impairment, and the ways in which it limits Your major life activities; information related to the ways in which Your mental or physical impairment impacts Your ability to examine under standard conditions; information related to any treatments, medications, devices, or auxiliary aids You commonly use, or plan to use, while taking Your exam; information related to Your history with classroom, workplace, and testing accommodations; and an explanation to Paradigm Testing about the necessity of the accommodations You are requesting and their appropriateness relative to Your impairment. Paradigm Testing will make the recommendation as to what, if any, special accommodations You should receive. After Paradigm Testing makes a recommendation, it will transmit Your access code and the recommendation to ARRT, which will make the final decision regarding which accommodations are appropriate. All information that You provide to Paradigm Testing is subject to its privacy policy.
Pearson. We use Pearson to conduct our examinations. We may provide Pearson with Your Personal Information, including Your name, address, email address, and other state licensure information, to facilitate examinations. Pearson may collect other information from You, including Your driver's license information, credit card information, date of birth, social security number, employment data, education data, and biometric data, including Your photograph and palm vein topography, to verify Your identity. More information on Pearson's collection practices and privacy policies.
PrimaData. We use PrimaData to deliver U.S. mail notifications to individuals regarding Their certification and registration. We may provide PrimaData with Your full name, ARRT ID number, ARRT credential string, and postal mailing address.
The Soft Edge. We use The Soft Edge to host our ARRT Advocacy Center website. If you choose to provide information on our ARRT Advocacy Center website, ARRT may receive certain personal information that you voluntarily submit. For details about the information The Soft Edge collects or shares, please review The Soft Edge Privacy Policy.
UKG. We use UKG to host, process, and accept job applications. When You apply for a job, You may provide UKG with your Personal Information, including Your name, address, email address, employment history, and related information. More information about UKG’s privacy notice.
Verisys. We use Verisys for credential processing services. Verisys may collect your name, birthdate, ARRT ID, credentials, CE biennium start and end dates, zip code, registration information, and sanction and discipline information. For more information, please visit the Verisys privacy policy.
X. (formerly Twitter) We use X for marketing purposes. By clicking on the X button on the Service, You will be automatically transported to the official X Page for ARRT, and your Personal Information may be shared with X.
YouTube. We host videos on YouTube that are embedded in the Service. These videos are hosted on our account, viewable at: https://www.youtube.com/user/TheARRT. When You view the videos on the Service, YouTube may collect Your information, including Your username, other account information, and interactions with its site. For more information, please visit the YouTube privacy policy.

Medical Community and Public

Because We are a healthcare profession credential provider, We may disclose Your Personal Information and certification and registration status in connection with our credentialing and verification services. For example, We may disclose Your Personal Information to the program where You completed Your education, and We may share Your Personal Information with other continuing education providers, healthcare systems, healthcare services organizations, specialty professional societies (and their respective state affiliates), boards, associations, CE Approvers, CE sponsors, researchers, marketing agencies, and management consulting organizations. We may share Your Personal Information for their marketing and promotional purposes (where legally required, We will obtain Your express consent), for listing in their publications, and so they can provide services. In addition, the public may search for Your certification and registration status on the Service.

Investigators, State Medical Boards, or the Public

We may disclose examination, credentialing information, maintenance of certification participation, and certification and registration status to investigators, state medical boards, or to the public. We release individual examination scores and credential status to state agencies. A state agency may request Your information by entering Your Personal Information into our state entity website. If We have a record on You, We will release a status report back to the registered state agency. We will disclose all relevant information in our possession for which We do not have claim of legal privilege in response to a lawful subpoena, court order, or an authorized request by a government or regulatory entity.

Organizational Changes

If We become involved in a merger, acquisition, sale of assets, joint venture, securities offering, bankruptcy, reorganization, liquidation, dissolution, or other transaction; or if the ownership of all, or substantially all, of our organization otherwise changes, We may transfer Your Personal Information to a third party or parties in connection therewith.

Affiliates

We may also share Your Personal Information with our affiliates for purposes consistent with this Privacy Policy. Our affiliates will be required to maintain that Personal Information in accordance with this Privacy Policy.

Researchers

We may also share Your Personal Information with researchers from time to time for upcoming research studies that are looking for participants. We may share Your email address with the research organization, or provide You with information about the study and ask if You would like to participate.

Investigations and Law

We may disclose your Personal Information to third parties if We believe that such disclosure is necessary to:

Comply with the law or guidance and cooperate with government or law enforcement officials or private parties;
Investigate, prevent, or take action regarding suspected illegal activities, suspected fraud, the rights, reputation, safety, and property of Us, users or others, or violations of our policies or other agreements with Us;
Respond to claims and legal process (for example, subpoenas); and/or
Protect against legal liability.

Cookies and Other Tracking Technologies

A "cookie" is a small text file that a website can place on your computer’s hard drive for record keeping or other administrative purposes. We may use temporary "session" cookies to measure the flow of visitor traffic in the aggregate and to make the site easy to use. Once you leave this site, the temporary cookie assigned by our server will expire and be deleted from your computer.

Most web browsers are designed to initially accept cookies. You can reset your browser to refuse all cookies or to alert you when a cookie is being sent to your computer. However, if you choose to disable cookies or refuse to accept a cookie, certain portions of this site may not function properly or efficiently.

We and authorized third parties may use cookies and similar technologies for the following purposes:

for “essential” purposes necessary for our Service to operate (such as maintaining user sessions, content delivery, and the like); and
for “functional” purposes, such as to enable certain features of our Service (for example, to allow a customer to maintain a logged-in session); and
for “analytics” purposes and to improve our Service, such as to analyze the traffic to and on our Service (for example, we can count how many people have looked at a specific page, or see how visitors move around the Service when they use it, to distinguish unique visits/visitors to our Service, and what website they visited prior to visiting our Service, and use this information to understand user behaviors and improve the design and functionality of the Service).

SECURITY

We implement a variety of security measures to protect the safety of Your Personal Information when You enter, submit, or access Your Personal Information.

While We take reasonable measures to protect your Personal Information against loss, theft, and unauthorized use, disclosure, or modification, We cannot guarantee its absolute security. No Internet, email, or mobile application transmission is ever fully secure or error free. Email or other messages sent through the Service may not be secure. You should use caution whenever submitting Personal Information through the Service and take special care in deciding what Personal Information You provide us.

We cannot guarantee that transmissions of Your Personal Information will be fully secure and that third parties will never be able to defeat our security measures or the security measures of our partners. We assume no liability for disclosure of your information due to transmission errors, third-party access, or causes beyond our control.

Any Personal Information collected through the Service is stored and processed in the United States. If You use our Service outside of the United States, You consent to have Your Personal Information transferred to the United States.

DATA RETENTION POLICY, MANAGING YOUR INFORMATION

We will retain Your information for as long as You use the Service and for a reasonable time thereafter. We may maintain anonymized or aggregated data, including usage data, for analytics purposes. We may retain and use Your information as necessary to comply with Our legal obligations, resolve disputes, enforce Our agreements, and/or for the period required by laws in applicable jurisdictions. Please note that some or all of the information We have collected may be required for transactions on the Service to function properly.

LINKS TO OTHER WEBSITES OR APPLICATIONS

The Service may contain links to or may forward users to other websites or apps that We may not own or operate and to which this Privacy Policy does not apply. The links from the Service do not imply that We endorse or have reviewed these websites or apps. The policies and procedures We describe here do not apply to these websites or apps. We neither can control nor are We responsible for the privacy practices or content of these websites or apps. We suggest contacting these websites or app providers directly for information on their privacy policies. Nonetheless, We seek to protect the integrity of our Service, and welcome any feedback about these linked websites and mobile applications.

TARGETED ADVERTISING

In some jurisdictions, ARRT, and certain third parties operating on or through the Service, may engage in advertising targeted to your interests based on Personal Information that We or those third parties obtain or infer from your activities across non-affiliated websites, applications, or services to predict your preferences or interests (also known as “Targeted Advertising”). This form of advertising includes various third parties and service providers engaged in the processing of Personal Information in connection with advertising. These parties may be able to identify you across sites, devices, and over time.

The parties that control the processing of Personal Information for Targeted Advertising purposes may create or leverage information derived from automatic collection, third party collection, or collection from you. (See How We Collect Personal Information section above.) In some cases, these parties may also develop and assess aspects of your activity on the Service to determine whether you are a type of person to whom a company wants to advertise, and determine whether and how ads you see are effective. These third parties may augment your profile with demographic and other Personal Information, and may track whether you view, interact with, or how often you have seen an ad, and whether you purchased advertised goods or services or took an action.

We generally use Targeted Advertising for the purpose of marketing our Service and third-party goods and services, and to send marketing communications.

YOUR CHOICES REGARDING YOUR INFORMATION

You have choices regarding our collection, processing, and sharing of your Personal Information.

Changing Your Information – You may request to review, update, or have deleted any Personal Information collected from You through the Service. Please contact Us:

By sending ARRT a request in your Message Center account on the ARRT website,
By email at PrivacyRights@arrt.org, or
By sending a letter through the U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155 ATTN: Privacy Policy.”

In the letter, ask Us to review, update, or delete Your Personal Information. Provide information that is sufficient, in the ARRT’s sole and absolute discretion, to verify that the Personal Information that You are requesting to change is associated with You. However, We reserve the right to retain Personal Information as necessary for our business purposes and to comply with federal and state laws.

Withdrawing Consent - If You are an individual residing in the EU, and You provided Your consent for any particular processing of Your Personal Information, You have the right to withdraw Your consent to our processing of Your Personal Information any time by requesting that Your Personal Information be deleted. See further information under the section EU Privacy Rights below. This deletion is permanent, and Your Personal Information cannot be reinstated. You also agree that You are no longer authorized to use ARRT’s intellectual property, such as its certification mark and other designations. To proceed with this request, Please contact Us:

By sending ARRT a request in your Message Center account on the ARRT website,
By email at PrivacyRights@arrt.org, or
By sending a letter through the U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155 ATTN: Privacy Policy.”

Opt-Outs Available from Our Partners - Some of our partners allow users to opt out of their collection of Personal Information. You may opt out of third-party services directly via the third party. For example, to opt out of Google’s analytic and marketing services, visit Google Analytics Terms of Use, the Google Policy, or Google Analytics Opt-out.

Targeted Advertising - You may opt out or withdraw your consent to Targeted Advertising by contacting us:

By sending ARRT a request in your Message Center account on the ARRT website,
By email at PrivacyRights@arrt.org, or
By sending a letter through the U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155 ATTN: Privacy Policy.”

In some cases, you may be able to opt-out by submitting requests to third party partners, including for the vendors listed below:

Please note that to the extent advertising technology is integrated into the Service, You may still receive advertisements even if You opt out of tailored advertising. In that case, the ads will just not be tailored to Your interests. Also, We do not control any of the opt-out links above, and are not responsible for any choices You make using these mechanisms or the continued availability or accuracy of these mechanisms.

VERIFICATION OF RIGHTS REQUESTS

If You submit a request, We typically must verify Your identity to ensure that You have the right to make that request, reduce fraud, and to ensure the security of Personal Information. If an agent is submitting the request on your behalf, We reserve the right to validate the agent’s authority to act on Your behalf.

We may require that You match Personal Information We have on file in order to adequately verify Your identity. If You have an account, We may require that You log into the account to submit the request as part of the verification process. We may not grant access to certain Personal Information to You if prohibited by law.

INFORMATION COLLECTED FROM OTHER WEBSITES AND MOBILE APPLICATIONS, AND DO NOT TRACK POLICY

Your browser or device may offer You a “Do Not Track” option, which allows You to signal to operators of websites, web applications, mobile applications, and services (including behavioral advertising services) that You do not wish such operators to track certain of Your online activities over time and/or across different websites or applications. Our Service does not support Do Not Track requests at this time, which means that We, or our analytics providers or other third parties with which We are working, may collect Personal Information about Your online activity both during and after Your use of the Service.

CHILDREN

Our Service is not intended for children under 16 years of age. We do not knowingly collect Personal Information from an individual under age 16. If You are under the age of 16, please do not submit any Personal Information through the Service. If You have reason to believe that We may have accidentally received Personal Information from an individual under age 16, Please contact Us:

By sending ARRT a request in your Message Center account on the ARRT website,
By email at PrivacyRights@arrt.org, or
By sending a letter through the U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155 ATTN: Privacy Policy.”

YOUR CALIFORNIA PRIVACY RIGHTS

Section 1798.83 of the California Civil Code permits California residents to request from a business, with whom the California resident has an established business relationship:

Certain information about the types of Personal Information the business has shared with third parties for those third parties’ direct marketing purposes
And the names and addresses of the third parties with whom the business has shared such information during the immediately preceding calendar year.

California residents may make one request each year by contacting Us:

By sending ARRT a request in your Message Center account on the ARRT website,
By email at PrivacyRights@arrt.org, or
By sending a letter through the U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155 ATTN: Privacy Policy.”

YOUR NEVADA PRIVACY RIGHTS

The Nevada Revised Statutes (NRS 603A.300 et seq.) permit a Nevada consumer to direct an operator of an Internet website or online service to refrain from making any sale of any covered information the operator has collected or will collect about that consumer. You may submit a request pursuant to this directive by contacting us:

By sending ARRT a request in your Message Center account on the ARRT website,
By email at PrivacyRights@arrt.org, or
By sending a letter through the U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155 ATTN: Privacy Policy.”

We will provide further information about how We verify the authenticity of the request and Your identity.

EUROPEAN PRIVACY RIGHTS

This section applies only to individuals located in the EEA, UK, Switzerland, and other countries (excluding the U.S.) where individuals have a right to the information or to exercise rights in Personal Information as specified below (“Non-U.S. Individuals”). Non-U.S. Individuals may have the following rights. Please review our verification requirements. (See Verification of Rights Requests section below.) Applicable law may provide exceptions and limitations to all rights.

Access - You may have a right to access the Personal Information We process.
Rectification - You may correct any Personal Information that You believe is inaccurate.
Deletion/Erasure - You may request that We delete Your Personal Information. We may delete Your data entirely, or We may anonymize or aggregate Your information such that it no longer reasonably identifies You.
Data Export/Portability - You may request that We send you a copy of Your Personal Information in a common portable format of Our choice.
Restriction - You may request that We restrict the processing of Personal Information to what is necessary for a lawful basis.
Objection - You may have the right under applicable law to object to any processing of Personal Information based on Our legitimate interests. We may not cease or limit processing based solely on that objection, and We may continue processing where Our interests in processing are appropriately balanced against individuals’ privacy interests. In addition to the general objection right, You may have the right to object to processing:

for profiling purposes;
for direct marketing purposes (We will cease processing upon Your objection); and
involving automated decision-making with legal or similarly significant effects (if any).

Regulator Contact - You have the right to file a complaint with regulators about Our processing of Personal Information. To do so, please contact Your local data protection or consumer protection authority.

LEGAL BASES FOR PROCESSING YOUR INFORMATION (For Users in EU)

Performance of a Contract

The use of Your Personal Information may be necessary to perform the agreement You have with Us to provide You with certification and registration, provide credential verification services to the public and to third parties, and to respond to Your requests.

Legitimate Interests

We use Your Personal Information for our legitimate interests. We rely on our legitimate interest to obtain and maintain Personal Information about an individual’s professional and educational qualifications for those who wish to become certified and registered with us; to deliver our professional credentials verification services to third parties; to administer, analyze, and improve our services and the content on the Service; to operate our business, including through the use of service providers and subcontractors (who may have access to Your data – see further information under the section How Your Personal Information is Disclosed); to send You notifications about our services; to archive, keep records, and perform statistical and analytical activities; or to use Your Personal Information for administrative, fraud detection, audit, training, security, or legal purposes.

Consent

Where other lawful bases are not available for the processing of Your Personal Information, We may rely on Your consent as the legal basis for the collection and use of Your personal data. You are free to withdraw Your consent at any time, subject to the Your Choices Regarding Your Personal Information section below and the preceding Legal Bases for Processing Your Personal Information in this section. Information about Your health or medical condition will only be processed with Your consent.

Compliance with Legal Obligations

We may use Your Personal Information to comply with legal obligations to which We are subject, including compliance with a legal process such as a subpoena.

Performance of a Task Carried Out in the Public Interest

We use Your Personal Information to perform tasks in the public interest, namely to track and make publicly available certification and registration status for professionals who obtained our credentials, including information on credential revocation and professional sanctions against such individuals, and to provide verification of credential information on individuals certified and registered with Us to regulatory and other public authorities and other educational and professional institutions.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Please review this Privacy Policy periodically, and especially before You provide any Personal Information. This Privacy Policy was made effective on the date indicated at the top of this page.

HOW TO CONTACT US

For any enquiries or complaints relating to the use of Your Personal Information or this Privacy Policy, please feel free to contact Us:

By sending ARRT a request in your Message Center account on the ARRT website,
By email at PrivacyRights@arrt.org, or
By sending a letter through the U.S. Postal Service to “ARRT, 1255 Northland Drive, St. Paul, MN 55120-1155 ATTN: Privacy Policy.”

Consumer Health Data Privacy Policy

Personal Information that is linked (or reasonably linkable) to a consumer that identifies the consumer's past, present, or future physical or mental health status is considered “Consumer Health Data” as defined under Washington State’s My Health My Data Act (“MHMDA”) and similar laws.

CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT

We collect the following categories of Consumer Health Data for the following purposes:

Categories of Consumer Health Data Collected	The purposes of collecting, using and sharing	How Consumer Health Data will be used or processed
Individual health conditions, treatment, diseases, or diagnosis Social, psychological, behavioral, and medical interventions	We use Paradigm Testing to assist in evaluating requests for test accommodations in accordance with the Americans with Disabilities Act (ADA)	If You require accommodations, You will send ABII an application containing a request for ADA accommodations. We will then contact Paradigm to procure an identification code, which We will mail to You, in conjunction with a letter instructing You to create a Paradigm account, and to use the code which identifies You. When You then request ADA accommodations from Paradigm, You will provide to them: Personal Information, including Your contact information; medical information related to the nature of Your mental or physical impairment and the ways in which it limits Your major life activities; information related to the ways in which Your mental or physical impairment impacts Your ability to test under standard conditions; information related to any treatments, medications, devices, or auxiliary aids You commonly use, or plan to use while taking Your exam; information related to Your history with classroom, workplace, and testing accommodations; and an explanation for the necessity of the accommodations You are requesting, and their appropriateness relative to Your impairment. Paradigm Testing will then make their recommendation as to what, if any, special accommodations You should receive. After Paradigm Testing makes a recommendation, it will transmit Your name and the recommendation to ABII, which will make the final decision regarding which accommodations are appropriate. All information that You provide to Paradigm Testing is subject to its privacy policy.
Biometric data, including facial photos, and voice recordings	Identity verification in connection with exams; social media sharing and connections; customer service; video and audio meeting recordings	We use facial photos to verify identity in connection with exams and share this information with Our exam vendor. We operate social media accounts and share photos, text, and recordings as is typical for social media platforms. We occasionally ask consumers to share photos with Us for use on Our social media accounts. We use voice recordings for the purposes for which they are provided, such as responding to customer service requests. We record certain audio or video meetings for the purpose for which the meeting is occurring, including hearings regarding potential ethics violations.
Any information that we or our respective processor processes to associate or identify You with data described above that is derived or extrapolated from non-health information (such as proxy, derivative, inferred, or emergent data by any means, including algorithms or machine learning), also referred to as “Inference Data.”	Site Analytics	See How Your Personal Information is Disclosed section above.

SHARING OF CONSUMER HEALTH DATA

Categories of Consumer Health Data we Share

We may share the following categories of Consumer Health Data with third parties and specific affiliates:

Individual health conditions, treatment, diseases, or diagnosis
Social, psychological, behavioral, and medical interventions
Biometric data
Any information that We process (or Our respective processor processes) to associate or identify You with data described above that is derived or extrapolated from non-health information (such as proxy, derivative, inferred, or emergent data by any means, including algorithms or machine learning), also referred to as “Inference Data.”

Categories of Third Parties with Which we Share

We may share Consumer Health Data with the following categories of third-party recipients: See Third Party Service Providers and Business Partners list in How Your Personal Information is Disclosed section above.

Specific Affiliates with Which we Share

We may share Consumer Health Data with the following Affiliates: None.

CONSUMER HEALTH DATA PRIVACY RIGHTS

Your Rights

Under the Washington State MHMDA and similar laws, residents and natural persons whose Consumer Health Data is collected in certain states may have the following rights, subject to verification, exceptions, and limitations:

Right to Confirm/Access/Know: Up to twice annually, You have the right to (a) confirm whether We are collecting, sharing, or selling Your Consumer Health Data, and (b) access such data, including a list of all third parties and affiliates with whom We have shared or sold the consumer health data and an active email address or other online mechanism that You may use to contact these third parties.
Right to Delete: You have the right to request deletion of the Consumer Health Data held by Us and Our affiliates, processors, contractors, and other third parties.
Right to Withdraw your Consent/Opt-Out: You may withdraw any consent You have provided at any time. The consequence of you withdrawing consent might be that We cannot perform certain services for You, such as location-based services, personalizing or making relevant certain types of advertising, or other services conditioned on Your consent or choice not to opt-out.
Right to Non-Discrimination: You have the right to not to receive discriminatory treatment as a result of your exercise of rights conferred by the MHMDA and similar laws.

How to Exercise your Rights

You may submit requests as follows (please Our review verification requirements below).

You may send an email to PrivacyRights@arrt.org with Your email address, phone number or address on file, along with Your request.
If You have any questions or wish to appeal any refusal to take action in response to a MHMDA rights request, contact Us at PrivacyRights@arrt.org. We will respond to any request to appeal within the period required by law.

Washington Residents: If Your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General.
Nevada Residents: If your appeal is unsuccessful, You can raise a concern or lodge a complaint with the State of Nevada Attorney General.

Verification of Consumer Health Data Rights Requests

If You submit a request, We typically must verify Your identity to ensure that You have the right to make that request, reduce fraud, and to ensure the security of Consumer Health Data. If an agent is submitting the request on Your behalf, We reserve the right to validate the agent’s authority to act on Your behalf.

We may require that You match Consumer Health Data We have on file in order to adequately verify Your identity. If You have an account, We may require that You log into the account to submit the request as part of the verification process. We may not grant access to certain Consumer Health Data to You if prohibited by law.