Privacy Policy

Privacy Policy

The Center for Research Libraries (CRL) is committed to respecting and protecting the privacy of our community. The following discloses our information collection, use, storage and practices in place to ensure the security of this data.

This privacy policy applies to CRL websites, domains, services, applications and products. It does not apply to third party websites to which we may provide hyperlinks. Inclusion of links to other websites is not an endorsement or a guarantee of their privacy policy.

Information collection

CRL collects the following personal data from our users:

  • Personal data that an individual user may voluntarily and knowingly provide as a result of creating a user account, registering for an event, submitting a form or subscribing to an email list or newsletter. The data may include name, address, email, phone number, job title, professional role, subject specialties / interests and institutional affiliation.

  • The above personal data about users from publicly available sources in order to facilitate participation in CRL committees, programs, team works, and professional role-based communications.

  • User-generated information needed to deliver online interactive features such as favorite resource lists, saved searches, comments, reviews, and other online posted data.

  • Activity data that is passively collected via cookies and web logging during user visits to a CRL website. This data may include IP address, device type, browser type and version, operating system, pages viewed and length of time on each page, and errors encountered.

In addition, CRL may require users to register for an account in order to use certain services. We do not require you to register to use all of our services and web contents. However, registered users from active member institutions may gain access to features and contents that are available to CRL member community only.

Purpose and use

CRL collects, stores and uses personal information that users provide to us and information we collect about users to better serve users during their engagement and interaction with CRL. Any information collected on a website in the domain will be used only to provide or improve CRL services. Personal data will be used only for such purposes as distributing information on CRL activities, updating CRL’s membership contacts, and responding to questions or comments.

CRL uses activity data passively collected via cookies and web logs only to improve constituents’ online experience by informing future website design and presentation decisions. This information is not used to identify any specific user or track a specific user’s behaviour on the websites.

Information sharing

CRL will never sell or rent personal data to third parties. CRL sometimes shares data with technology suppliers. For example, CRL shares data with Google Analytics to obtain insight into how visitors use its websites. For privacy reasons, only aggregated statistical data is gathered by Google Analytics, and it does not include individual IP addresses or other individually identifiable information.

Data protection

CRL takes seriously the trust its community places in us.  CRL has implemented industry-standard security safeguards to protect the personal data it collects. All personal data actively or passively collected by CRL is stored on secure servers located in the United States. Whenever possible all user account information is additionally encrypted using SSL technology while in transit. CRL utilizes appropriate technical and administrative procedures to prevent unauthorized access or disclosure, to maintain data accuracy, and to ensure the appropriate use of the information. Personal and account information is only accessible to certain qualified employees of CRL.

Data retention

The need to retain data varies, depending upon the type of data. Data from event registrations, program participations, and web logs will be deleted when there is no longer a business need. Data provided during a subscription to an email list or newsletter is retained as long as membership on the list or receipt of the newsletter is desired. Data collected via Google Analytics is retained for 26 months.


A cookie is a text string that a website stores on a visitor’s computer. CRL’s websites employ cookies in various ways:

  • Via CRL’s use of Google Analytics, a web analytics service by Google. This service sets a cookie to evaluate an individual’s use of the website and then compiles aggregate reports for CRL describing activity on the site.

  • CRL uses cookies for session management on individual websites and to enable single sign on, or SSO, across multiple websites (after a user is signed in on one host, the recorded credentials will grant the user access to other CRL hosts automatically).

  • Cookies may also be used to temporarily store miscellaneous user preferences or session-specific data for performance optimization.

Visitors to CRL websites who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using CRL websites.Features, such as site logins, may not function properly without the aid of cookies.

Personal data rights and access

Users have the right to request access to, correction of, or removal of their personal data. To make such a request, users are asked to send an email to WebSystems@crl.eduThis e-mail address is being protected from spambots. You need JavaScript enabled to view it .  Users may also opt-out of receiving certain communications from CRL and unsubscribe from CRL-hosted email lists or newsletters.  To unsubscribe from email lists or newsletters, simply follow the directions at the bottom of emails from these sourcesThis e-mail address is being protected from spambots. You need JavaScript enabled to view it .