Ask for a copy, a correction or a deletion, and get an answer within 14 days.
If you sent an inquiry about Duke University admissions, booked a campus visit or used the chat, duke.us.org holds a small file on you. This page lists what you can ask us to do with it, and the form at the bottom sends the request to a person in Durham.
- Reply within
- 14 days
- Cost to you
- None
- Effective
- September 28, 2026
- Write to
- [email protected]
| Record or right | What it means | Why and for how long |
|---|---|---|
| Part 1. What is on file | ||
| 1.01An inquiry | Name, phone, email, mailing address, the kind of inquiry, your message, any specification you gave, and the consent tick. With it, automatically: IP address, browser user-agent, referring URL, the moment the form loaded and the moment it was sent. | Kept 36 months with its email copy, so a question asked a year before you apply still has context. Then deleted. |
| 1.02A chat conversation | The messages both ways, and the name, phone or email you chose to give. A token in your browser lets you return to the thread. | Kept 12 months. Clearing your browser storage removes the token; the transcript on our side stays until the clock runs out or you ask for deletion. |
| 1.03Server logs | Requests to the server: address, time, page, response. | Kept 30 days to spot abuse and faults. |
| 1.04Your cookie choice | Stored in your own browser under site_consent_v2. It is not linked to your name. |
12 months, then the banner asks again. See the cookie statement. |
| 1.05Advertising click identifiers | When you arrive from an ad, the link carries gclid (Google Ads), msclkid (Microsoft Advertising) or fbclid (Meta Ads). Consent Mode v2 keeps ad_storage, ad_user_data, ad_personalization and analytics_storage denied until you allow storage, and sets them back to denied when you decline. | Held by the platform under its own policy. For Microsoft, see the Microsoft privacy statement. We can tell you what we sent; the platform answers for what it keeps. |
| Part 2. What you can ask for | ||
| 2.01Access | A copy of every record above that we can link to you, sent as a plain text or CSV file to the email on file. | CCPA/CPRA and other US state privacy laws give this right; so does GDPR for visitors in Europe. |
| 2.02Correction | A wrong email, a misspelled name, an address that has changed. Tell us the right value and we replace it. | A reply to the wrong address is the most common reason an answer never arrives. |
| 2.03Deletion | We delete the inquiry, its email copy and any chat transcript before the retention clock runs out. | We keep one line recording that a deletion was made and when, so a later request is not processed twice. No content stays. |
| 2.04Opt out of sharing | Decline storage in the banner or send a Global Privacy Control signal. Sec-GPC is honored as an opt-out without asking again. | We do not sell personal data. Sharing for ad measurement stops when the signals are denied. |
| 2.05Portability and objection | For visitors in Europe: a machine-readable copy, and the right to object to processing based on legitimate interest. | Written for GDPR. The file format is the same CSV as an access request. |
| 2.06Equal treatment | Asking changes nothing about how an inquiry, a tour booking or an advising conversation is handled. | A data request is never passed to an admissions reader and has no bearing on any application. |
| Part 3. How it is handled | ||
| 3.01Checking it is you | We write to the email address on the original inquiry and ask you to confirm. We do not ask for a passport, a Social Security number or a student ID. | Sending your file to someone pretending to be you would be worse than not sending it. |
| 3.02Acting for someone else | A parent or authorized agent can file for an applicant. We then confirm with the applicant directly before releasing anything. | Applicants are often adults in their own right, and the file is theirs. |
| 3.03If you disagree | Reply to our answer and a second person reviews it. You may also complain to your state Attorney General, or in California to the California Privacy Protection Agency. | The appeal is answered within the same 14-day window. |
What this form cannot reach
This page covers the records duke.us.org itself keeps. It does not reach an application file, a transcript, a financial aid record or anything held in a school's student system. Those are handled by the offices that hold them, under their own rules, and a request about them should go there. If you are not sure where your record sits, send the request anyway and say so in the notes. We will tell you which office holds it rather than bounce the request.
One request per person is enough. Do not send the same request twice to be safe; it creates two tickets and the second slows the first.
The full list of who receives data, including the hosting and mail providers, is in the privacy policy. The site's terms are in the terms of use.
Form DR-1Data request