Payment Card Privacy Statement

Cardholder privacy is important to the University of Alabama at Birmingham (UAB).  To better protect the privacy of cardholder data, UAB provides this privacy statement explaining the security and handling practices of cardholder data in the processing of payment card transactions.  This privacy statement shall be made available at any point where personally identifiable cardholder data may be requested by a UAB PCI Entity (merchant). 

This privacy statement applies to all cardholder data collected by or submitted to a UAB PCI Entity, or on a UAB-maintained website.  UAB PCI Entities and UAB websites will only collect personally identifiable information and cardholder data voluntarily provided by cardholders and customers, and will only use that information for the specific purposes for which it was provided.  UAB will keep this information strictly confidential, and will not disclose, sell, or lease the information to third parties unless required by law, or with the written permission of the cardholder. 

As with most websites used for payment card transaction services, UAB web servers collect web session data used to analyze site trends and gather broad demographic data.  UAB reserves the right to collect certain technical information of customers such as operating system, IP address, web browser software, and URL data through the use of cookies or other technology not linked to personally identifiable information or cardholder data. 

UAB-maintained websites may have links to other third party sites used for payment card transactions.  These third party sites may collect cardholder data and personally identifiable information through the use of forms or cookies, or from the customer's web browser.  Cardholders and customers are strongly encouraged to review the privacy policies of all third party websites outside the control of UAB for their procedures for collecting, utilizing, and disclosing cardholder data. 

UAB has made significant investment in security measures employed to protect cardholder data under its control.  Access to acquired cardholder data and personally identifiable information is limited to only those personnel for whom there is an established business need to access that data. 

For questions, comments, or concerns regarding this privacy statement, or UAB procedures for securely processing, storing, or transmitting cardholder data, please contact the AskIT Help Desk at (205) 996-5555.  UAB reserves the right to amend this privacy statement at any time, and will post this privacy statement and any updates at http://main.uab.edu/Sites/it/policies/payment-card-privacy/.

Last modified on October 24, 2012