Privacy Policy

Effective September 2, 2026

The Buxton School Alum Directory is built and run by the Buxton School Alum Association (BSAA) — a volunteer-run association of Buxton alumni, not a formal department of the school. This policy explains what information the directory holds about you, where it comes from, who can see it, and the choices you have. It should be read together with our Cookie Policy, which covers the one cookie the site uses.

1. What we collect

From Buxton School's historical alumni records: your name, class year, and — where the school has it on file — former names, contact and location details.

From you directly: anything you submit through our self-service update form, including preferred name, current city/state/country, employer, title, industry, LinkedIn profile, and (separately) whether you'd like to take part in the BSAA/faculty program that brings alumni to campus to share their expertise with students.

Automatically, when you use the site: the email address you sign in with, a temporary session identifier, and — only when you send a connection request to another alum — your IP address, kept solely to prevent abuse of that feature.

From other alumni: if a classmate flags a possible correction to your listing (for example, an outdated location or a "please mark me deceased" report), that flag and its explanation are logged and reviewed by a BSAA volunteer before anything changes on your record.

What we do not collect: We do not purchase, scrape, or automatically look up information about you from any third-party data broker, people-search service, or AI enrichment tool. Every piece of information in this directory came from Buxton School's own records, from you, or from a reviewed peer correction — nothing else.

2. How we use it

We do not use your information for advertising or marketing, we do not sell it, and we do not share it with data brokers.

3. Who we share it with

The directory is built on a small set of service providers ("sub-processors") that process data on our behalf. We do not use any others, and none of them may use your information for their own purposes.

ProviderWhat it's used for
AirtableStores the underlying alumni database.
NetlifyHosts the website and its server-side functions.
ResendDelivers sign-in and notification emails.
FillOutPowers the self-service profile update and interest forms.
AnthropicPowers an optional natural-language search feature. Only the text of your search query is sent — never your personal record or any other alum's data.

4. What other alumni can see

Signed-in alumni can see: name, class year, status (active/deceased/lost), city/state or city/country, industry and specialty, employer, title, and LinkedIn profile, when provided.

Signed-in alumni cannot see: your email address, phone number, or street address. These are stored only for BSAA's own administrative use and are never sent to another alum's browser.

You can ask that your listing be marked "do not contact," which suppresses the Connect feature for your record while keeping you visible in the directory.

5. The "Connect" feature

When you ask to connect with another alum, we never reveal your email address to them or theirs to you directly — instead, the recipient receives a notification and can choose to reply. To prevent misuse, this feature is rate-limited to 10 requests per day, with a 30-day cooldown before you can message the same person again, and your IP address is logged for that request. That IP log exists solely to investigate abuse and is not used for any other purpose.

6. Your choices

To exercise any of these, email us at the address below. We aim to act on removal or correction requests within 30 days.

7. Data retention

We keep alumni information for as long as it serves as part of Buxton School's ongoing alumni record — similar to how a school or alumni association retains its historical rolls. If you ask us to remove your record, we will do so, retaining only the minimal information needed to honor that request going forward (for example, so we don't inadvertently re-add you from a future school data import).

8. Security

The directory has no passwords to steal: signing in works by emailing yourself a one-time link, which expires after 30 minutes and can only be used once. Once you're signed in, your session is tracked with a cookie that is HttpOnly, Secure, and SameSite=Strict — see our Cookie Policy for full detail — and expires automatically after 8 hours. All traffic to the site is encrypted (HTTPS/TLS), and private fields such as your email, phone, and address are enforced as private on our servers — they are simply never included in what's sent to another alum's browser, not just hidden by the page design.

9. Students and minors

Current Buxton students do not have accounts on this directory and cannot sign in or browse it. The one program that connects alumni with current students — bringing alumni to campus to share their expertise — is coordinated entirely by Buxton faculty and BSAA volunteers; students never interact with alumni through the portal itself.

10. International alumni

The directory and all of its service providers are based in the United States, and your information is processed and stored there regardless of where you live.

11. Changes to this policy

If we change what we collect or how we use it, we'll update this page and revise the effective date above.

12. Contact

Questions about this policy, or requests to update, correct, or remove your information: