Sort of off topic, but I wish every company didn't put these in their privacy policies:

"user information related to the Service may be among the items sold or otherwise transferred"

"The Company may modify or update this Privacy Policy from time to time to reflect the changes in our business and practices, and so you should review this page periodically"

For 70-100k in tuition, one would hope for a less revocable promise of privacy than that, especially from a school.

It would also be nice if these policies had parts that clarify whether the 'anonymized' data they inevitably transfer can reasonably be re-identified later. I'm never sure how to read those, personally.