Privacy Policy

Minnesota Partnership for Achievement – Privacy Policy

Effective Date: 07/31/2025
Last Updated: 07/31/2025

1. Introduction

Welcome! This Privacy Policy explains how the Minnesota Partnership for Achievement (“we,” “us,” “our”) collects, uses, discloses, and protects personal information of individuals in Minnesota in compliance with the Minnesota Consumer Data Privacy Act (MCDPA).

2. Controller & Contact

We are the data controller under MCDPA. Our Chief Privacy Officer is:

  • Name: Cristine Trooien

  • Contact: cristine.trooien@minnesotaachievement.org

You may contact our CPO for privacy questions or complaints.

3. Data We Collect

We collect only personal data that is adequate, relevant, and reasonably necessary for specified purposes. Categories may include:

  • Identifiers (e.g. name, email)

  • Professional or demographic data

  • Usage and analytics data

We do not collect sensitive data—such as race, health, biometrics, minors’ data (unless under COPPA rules)—without express consent.

4. Purpose of Processing

Data is collected for clearly defined purposes such as:

  • Providing information and services

  • Website analytics and improvements

  • Communications and updates
    Processing for any additional purposes will only occur with your consent or if compatible with original purposes.

5. Data Minimization & Retention

We limit data collection to what is necessary to fulfill stated purposes. We retain personal data only as long as necessary and in compliance with applicable laws.

6. Security

We maintain reasonable administrative, technical, and physical safeguards, including a documented data inventory to protect the confidentiality, integrity, and accessibility of personal data.

7. Disclosure, Sale & Profiling

  • We do not sell personal data or use data for targeted advertising or profiling.

  • Should we do so in the future, you will have a clear and easy opt‑out mechanism, separate from this policy, to decline such processing.

8. Consumer Rights

Minnesota residents have the following rights at no charge (twice per year max unless requests are excessive):

  • Access their personal data

  • Correction of inaccurate data

  • Deletion of data, where not required to be retained

  • Correction & challenge profiling decisions, including the right to request reasons, data used, future steps to influence outcome, and reevaluation of decisions based on corrected data

  • Withdrawal of consent, with no discrimination for exercising rights.

We respond to rights requests within 45 days, and if needed, may extend another 45 days with notice. If a request is denied, we will provide a clear appeal process and notification of the right to appeal to the Minnesota Attorney General.

9. Material Changes & Notifications

Any material change to this Privacy Policy will be communicated electronically to affected individuals. You will have the opportunity to withdraw consent for materially changed processing. We also will post updates to this policy and include the effective date.

10. Service Providers (Processors)

We engage third‑party service providers under written agreements requiring them to:

  • Process data only per our instructions

  • Maintain confidentiality

  • Delete or return data upon request

  • Allow oversight and compliance audits
    These contracts ensure they support us in meeting our MCDPA obligations.

11. Nondiscrimination

We will not discriminate against individuals for exercising their MCDPA rights (e.g. access, deletion, opt‑out) in terms of pricing or service accessibility.

12. Limits & Exemptions

Certain organizations or data categories may be exempt (e.g. small businesses, HIPAA, GLBA entities). However, we voluntarily apply these principles even if exemptions may apply.


Additional Resources

For more information on the MCDPA and consumer rights:
Minnesota Attorney General’s MCDPA guide (Minnesota Attorney General)