KHEAA Privacy Policy

KHEAA’s website uses “cookie” technology. Cookies are text a website stores on a user’s computer to monitor a user’s activity within a specific website. Cookies do not reveal personal information about the user. Cookies help KHEAA understand which parts of the website are most popular, where visitors are going, and how long they spend there.

KHEAA collects certain technical information when you access our website, including your Internet Protocol (IP) address, browser type and language, operating system, device identifiers, hardware model, referring and exit URLs, date and time of access, and other server log information. We may also collect device-specific information such as mobile network information, unique device identifiers, and device sensor data.

KHEAA collects information about how you interact with our website, including the pages you visit, the links you click, the website you visited before arriving at our site, and the website you visit after leaving our site. This information is used to analyze trends, improve user experience, and optimize our services.

When permitted by your device settings, we may collect information about your approximate location using technologies such as GPS, Wi‑Fi access points, cellular network location, browser services, or sensor data.

KHEAA may use information collected through tracking technologies to provide marketing communications across digital platforms, including social media and advertising networks.

KHEAA has implemented numerous security measures to protect users’ personal information. Only authorized employees trained in proper handling of user personal information are given access to the information and only for the purpose of carrying out KHEAA’s mission.

Data sent to KHEAA by users is collected using Secure Socket Layer (SSL) technology to ensure only KHEAA receives the information sent by the user. Special software programs monitor traffic on KHEAA’s website to identify unauthorized attempts to upload or change information or cause damage to KHEAA’s website. These programs do not collect personally identifying information about you, but they do collect information that enables KHEAA to identify someone attempting to tamper with its website.

KHEAA does not knowingly obtain information from children under age 13. KHEAA will remove from its files any information collected on a child under age 13 upon request by any parent or guardian of the child.

KHEAA collects only the information needed to give its users the utmost quality service. KHEAA collects a limited amount of information about you not available publicly - "nonpublic personal information." This information is collected, either directly or indirectly, so KHEAA may deliver financial services you have requested. KHEAA is required by federal and state law to collect some information for purposes of processing applications for student financial aid.

KHEAA collects certain technical information when you access our website, including your Internet Protocol (IP) address, browser type and language, operating system, device identifiers, hardware model, referring and exit URLs, date and time of access, and other server log information. We may also collect device-specific information such as mobile network information, unique device identifiers, and device sensor data.

KHEAA collects information about applicant account balances, amounts borrowed and payment history to monitor an applicant’s overall account relationship with KHEAA. It may be necessary to collect other facts concerning your financial aid usage.

KHEAA collects financial information about you from consumer reporting agencies to process loan applications, monitor your account relationship and collect outstanding loans.

KHEAA collects information, such as your name, mailing address, email address and telephone number, to send you information or contact you about your accounts.

KHEAA collects financial information, such as your income, assets you own or liabilities you owe, to process your application and determine the level of student financial aid that can be offered to you.

KHEAA receives nonpublic personal information about you from the following additional sources:

• Promissory notes, applications, correspondence, communications or other forms (including the Free Application for Federal Student Aid).
• Transactions with KHEAA or others (such as your school, guarantor, lenders and holders of student loans, organizations providing services to lenders and holders of student loans, the U.S. Department of Education (USDE), state and federal officials, their agents, information clearinghouses that serve the financial aid industry, and any of the above entity’s agents) or in any manner authorized by your applications or promissory notes and applicable law.
• Consumer reporting agencies.
• Individuals or organizations in the course of processing your student financial aid, disbursing your student financial aid, servicing your student financial aid, locating you, collecting or enforcing a claim of KHEAA, or providing a benefit.

KHEAA uses cookies, pixel tags, web beacons, local storage, and similar tracking technologies to collect and store information about your use of our website. These technologies help us:

• Remember user preferences
• Measure website traffic
• Analyze visitor behavior
• Improve site functionality
• Deliver relevant marketing content

KHEAA may use third-party analytics providers, such as Google Analytics, to help us understand how visitors use our website. These providers may use cookies and similar technologies to collect information about your use of the site. You may opt out of Google Analytics by visiting: https://tools.google.com/dlpage/gaoptout.

KHEAA may work with third-party advertising partners to deliver advertisements on our behalf across the internet. These partners may use cookies, web beacons, and similar technologies to collect information about your interactions with our website and other websites to provide you with targeted advertising.

To learn more about interest-based advertising or to opt out, please visit: https://theNAI.org/how-to-opt-out/.

KHEAA does not sell any information about you to non-affiliated third parties.

Disclosure of information about you may be necessary in the delivery of KHEAA’s services to users in the following circumstances:

• When we are required by local, state, federal or international law to disclose user information.
• When we need to provide the information to our business partners that perform services for users. These partners are given only the information needed to perform that particular service.
• When users have authorized the disclosure of such information.

KHEAA requires disclosure of Social Security numbers to report the status of and to collect your account if we service your loan, to report to the Internal Revenue Service the interest you have paid on your student loan, and to report student aid information to the USDE National Student Loan Data System.

USDE requires disclosure of individuals’ Social Security numbers on applications and other student aid documents.

KHEAA will respond to emails containing suggestions, concerns, and comments by using the same email address provided to KHEAA. KHEAA will not sell or forward your address to any non-affiliated third parties without your permission. KHEAA will use email addresses only for the purpose of sending KHEAA materials. You can always opt out of receiving future emails from KHEAA.

You should be on the alert for individuals seeking to obtain personal information through illegitimate means. One such means is commonly referred to as “phishing.” In a common type of phishing scam, individuals receive emails that appear to come from their financial institution. The email may look authentic, right down to the use of the institution’s logo and marketing slogans. The emails often describe a situation that requires immediate attention and then warn the account will be terminated unless the email recipients verify their account information immediately by clicking on a provided link. The link will take the email recipient to a screen that asks for account information. While it may appear to be a page sponsored by a legitimate financial institution, the information will actually go to the con artist who sent the email. You should never respond to such requests. KHEAA will never ask you to verify account information online. Do not be intimidated by emails that warn of dire consequences for not following their instructions. Please call KHEAA if you receive any such email purporting to be from KHEAA.

The USDE Office of the Inspector General (OIG) has a secure online portal for reporting fraud, waste, and abuse. The website, https://oig.ed.gov/oig-hotline also offers tips to prevent identity theft. You can reach a hotline analyst at 1-800-MISUSED (1-800-647-8733) to report cases or suspicion of identity theft.

KHEAA reserves the right, at its discretion, to change, modify, add, or remove portions of this Privacy Policy at any time. Users should check this page for any changes to the Privacy Policy. Your continued use of KHEAA’s website following any changes to this Privacy Policy indicates your acceptance of those changes.

KHEAA is required to act in compliance with policies, rules, and statutes that govern the programs cited herein. Notwithstanding any information contained in KHEAA’s website, such policies, rules and statutes shall control.

KHEAA’s website does not currently respond to “Do Not Track” browser signals or other mechanisms that provide users the ability to exercise choice regarding the collection of personally identifiable information about online activities over time and across third-party websites.

PLEASE READ THESE TERMS AND CONDITIONS CAREFULLY. BY ACCESSING THIS SITE AND ANY PAGES THEREOF, YOU AGREE TO BE BOUND BY THE TERMS AND CONDITIONS BELOW. IF YOU DO NOT AGREE TO THE TERMS AND CONDITIONS BELOW, DO NOT ACCESS THIS SITE, OR ANY PAGES THEREOF. THIS POLICY MAY CHANGE FROM TIME TO TIME, YOUR CONTINUED USE OF THE WEBSITE AFTER WE MAKE CHANGES IS DEEMED AN ACCEPTANCE OF THESE CHANGES, SO PLEASE CHECK THE POLICY PERIODICALLY FOR UPDATES.

Any questions, concerns, or requests for additional information concerning KHEAA’s website Privacy Policy should be directed:

• By email to legaldivision@kheaa.com
• By phone at 1-800-928-8926
• By mail to KHEAA Website Information,
  
  Attn: Legal Department, PO Box 798, Frankfort, KY 40602-0798