Privacy policy
Plain version: we collect your name, your email, and your phone number if you choose to give it, and we use it to talk to you about rush. With your permission, and only with it, we also run analytics cookies to see which pages and posts bring people here. We never sell any of it, and one email gets it deleted.
Last updated August 24, 2026.
Who runs this site
This site belongs to Sigma Upsilon Mu (SUM), a registered student organization at California State University, Fullerton. It is run by the chapter's student executive board. When this page says "we", it means that board.
You can reach us at csufsigmaupsilonmu@gmail.com. Our campus is at 800 N State College Blvd, Fullerton, CA 92831.
What you give us
Two kinds of information exist here. What you type into a form, which is the important kind. And, only if you accept the cookie banner, analytics about how the site is used; that kind is covered in its own section below, and none of it runs until you say yes.
The quiz
Your answers to the five questions, then your name, email, phone number, and how you heard about us. From your answers the site works out which of the four pillars you scored highest on and roughly where you are in your degree, and it records which page you started the quiz from. That is stored alongside your contact details so we know who we are talking to when we follow up.
The direct form
The short form under the quiz, for people who would rather skip it, takes your name, your email, your phone number if you want to give it, and optionally how you heard about us.
Event RSVPs
The RSVP forms on the events calendar take your name, your email, your phone number if you want to give it, and which event you are coming to.
What we never ask for here
No student ID, no GPA, no home address, no payment details, no documents. Nothing on this site takes money, and nothing on this site asks you to upload anything.
Where it goes
Every form on this site submits to Netlify Forms. Netlify is the company that hosts the site, and it stores submissions for us in our account.
From there the information goes into GoHighLevel (GHL), the contact system the board uses to run the rush list. GHL is where we keep track of who has applied, who has been invited to what, and who has asked to be left alone.
Netlify and GHL are outside companies handling this information on our behalf. They have their own privacy policies and their own security. No other service stores or processes what you send through a form; the analytics services described below never receive your form answers.
What we use it for
To answer you, to invite you to rush events, to send reminders and deadlines, and to tell you what happens next in the process. That is the whole list.
We do not sell your information, rent it, trade it, or hand it to another club, a sponsor, or a recruiter. We don't spam and we never sell your contact information.
Taking the quiz does not make you a member and does not commit you to anything. It puts you on our list so we can talk to you.
Text messages
The quiz asks for your phone number because texting is how rush actually gets coordinated. On the other forms it is optional: leave it blank and they still work, and you will still hear from us by email.
If you do give us your number, expect texts from the board. We use GoHighLevel to send messages to everyone on the rush list at once, so a text you get may have gone to a group rather than just to you. They cover things like event reminders, where to find our table, deadlines, and next steps after you apply.
Message and data rates may apply, and how often we text changes with the recruiting calendar. It is busiest in the first weeks of the semester and quiet outside of it.
Reply STOP to any text and we take you off the texting list. Reply HELP if you need a hand, or email csufsigmaupsilonmu@gmail.com and ask us to stop, which works just as well. Stopping texts does not remove you from the rush list; if you want your information deleted entirely, see below.
We do not text you about anything other than SUM, and we never give your number to anyone else to text you.
Cookies, analytics and tracking
This site uses analytics, and it asks first. On your first visit a banner offers the choice. Until you accept, no analytics run, no tracking cookie is set, and nothing loads from an analytics company's server; the site's content security policy enforces that allowlist rather than just promising it. Decline and every page works exactly the same, just untracked.
If you accept, these are the services that run. Some may be switched on later than others; your one choice on the banner covers all of them.
- GoHighLevel tracking records page views and form fills on this site, so the board can see which pages and events actually bring people in. If you later give us your contact details, it can connect your visits to your contact record. HighLevel's privacy policy.
- Meta pixel measures whether our Instagram and Facebook posts and ads bring visitors here, and lets us show follow-ups to people who visited. Meta receives your visit under its own privacy policy.
- Google Analytics counts visits and shows us how people move through the site. It uses Google Analytics 4, which does not store your full IP address. Google processes it under its own privacy policy.
You can change your mind at any time: the Cookies link in the footer of every page reopens the choice. If your browser sends the Global Privacy Control signal, we treat it as a standing decline: no banner, no tracking, nothing to opt out of.
Two places are never tracked no matter what you chose: the member log-in page and the members area. Members did not sign in to become analytics subjects.
Separate from analytics, the site keeps a few small flags in your browser's own storage: your cookie choice itself, one so the opening animation plays only once per visit, one so a dismissed prompt stays dismissed, and, for signed-in members, the sign-in session. Those stay in your browser and are never sent to an analytics company.
Who can see it
The current executive board, and the members the board puts on recruitment. Not the whole chapter, not alumni, not anyone outside SUM.
Staff at Netlify and GoHighLevel can technically reach data held on their systems, because that is how hosted services work. Nobody else has access.
The board changes every year. When officers hand over, access to these accounts hands over with the role and the outgoing officer's access is removed.
How long we keep it, and how to be deleted
We keep what you send through the rush cycle you applied to, and after that for as long as you are on our contact list, because people often rush a semester or two later than they first reach out.
You can ask us at any time to tell you what we hold about you, to correct it, or to delete it. Email csufsigmaupsilonmu@gmail.com from the address you signed up with, say what you want, and we will remove it from both Netlify and GoHighLevel. We aim to have it done within 30 days.
Being straight with you about why: California's consumer privacy law is written for for-profit businesses above revenue and volume thresholds that a student chapter does not come close to, so we are not going to dress this up as a legal right we are granting you. We do it because it is the decent way to treat someone who trusted us with their number.
Security, honestly
What is true: the site is served over HTTPS, the forms post to Netlify, and the only third-party code that can run is the short list of analytics services you consent to, enforced by the site's content security policy. Netlify and GoHighLevel are commercial services with their own security teams. Access to those accounts is limited to board members who need it.
What is also true: this is run by students, the officers change every year, and we are not a security operation. We are not going to tell you your information is perfectly safe, because nobody can promise that. If something goes wrong with data you gave us, we will tell the people affected.
Please do not send anything sensitive through these forms. A name, an email, and a phone number is all we need.
The members area
The log in and members pages are invite-only and meant for initiated members. Member records are not collected through any of the public forms on this site, and nothing you submit as a prospect appears there.
Member records shown behind the log in (roster, family tree, announcements) are stored with Supabase, an outside database service, and are readable only by signed-in members. Sign-in links go only to emails the board has put on the roster. Analytics never run behind the log in.
Children
This site is for university students and the people around them. It is not directed at children under 13, and we do not knowingly collect anything from them. If you think a child under 13 has sent us their details, email the board and we will delete it.
SUM and the university
Sigma Upsilon Mu is a registered student organization at California State University, Fullerton. This site is run by the organization, not by the university. Its content is ours and does not represent the views of CSUF, and the university is not responsible for what we collect or how we handle it.
Changes to this page
If we start collecting something new, send it somewhere new, or add anything that tracks you, we update this page in the same change and move the date at the top. Where the change is significant, we will say so on the site rather than quietly editing this text.
Questions about any of it go to csufsigmaupsilonmu@gmail.com.