Our Privacy Commitment
KHEAA’s website uses “cookie” technology. Cookies are text a website stores on a user’s computer to monitor a user’s activity within a specific website. Cookies do not reveal personal information about the user. Cookies help KHEAA understand which parts of the website are most popular, where visitors are going, and how long they spend there.
Users browse KHEAA’s website anonymously, and personal information is not collected. KHEAA gathers and analyzes data regarding usage of the website, including domain name, number of hits to the site, pages visited, and time and length of a user’s session. The data helps KHEAA analyze and upgrade the content, appearance, and utility of the site and track visitors’ use of the sites for internal market research or other business purposes.
KHEAA has implemented numerous security measures to protect users’ personal information. Only authorized employees trained in proper handling of user personal information are given access to the information and only for the purpose of carrying out KHEAA’s mission.
Data sent to KHEAA by users is collected using Secure Socket Layer (SSL) technology to ensure only KHEAA receives the information sent by the user. Special software programs monitor traffic on KHEAA’s website to identify unauthorized attempts to upload or change information or cause damage to KHEAA’s website. These programs do not collect personally identifying information about you, but they do collect information that enables KHEAA to identify someone attempting to tamper with its website.
Children’s Online Privacy Protection Rule
KHEAA does not knowingly obtain information from children under age 13. KHEAA will remove from its files any information collected on a child under age 13 upon request by any parent or guardian of the child.
Information KHEAA Collects About You From Other Sources
KHEAA collects only the information needed to give its users the utmost quality service. KHEAA collects a limited amount of information about you not available publicly—"nonpublic personal information.” This information is collected, either directly or indirectly, so KHEAA may deliver financial services you have requested. KHEAA is required by federal and state law to collect some information for purposes of processing applications for student financial aid.
KHEAA collects information about applicant account balances, amounts borrowed, and payment history to monitor an applicant’s overall account relationship with KHEAA. It may be necessary to collect other facts concerning your financial aid usage
KHEAA collects financial information about you from consumer reporting agencies to process loan applications, monitor your account relationship, and collect outstanding loans.
KHEAA collects information, such as your name, mailing address, e-mail address, and telephone number, to send you information or contact you about your accounts.
KHEAA collects financial information, such as your income, assets you own, or liabilities you owe, to process your application and determine the level of student financial aid that can be offered to you.
KHEAA receives nonpublic personal information about you from the following additional sources:
- Promissory notes, applications, correspondence, communications, or other forms (including the Free Application for Federal Student Aid).
- Transactions with KHEAA or others (such as your school, guarantor, lenders and holders of student loans, organizations providing services to lenders and holders of student loans, the U.S. Department of Education [USDE], state and federal officials, their agents, information clearinghouses that serve the financial aid industry, and any of the above entity’s agents) or in any manner authorized by your applications or promissory notes and applicable law.
- Consumer reporting agencies.
- Individuals or organizations in the course of processing your student financial aid, disbursing your student financial aid, servicing your student financial aid, locating you, collecting or enforcing a claim of KHEAA, or providing a benefit.
Information Sharing and Selling
KHEAA does not sell any information about you to non-affiliated third parties.
Disclosure of information about you may be necessary in the delivery of KHEAA’s services to users in the following circumstances:
- When KHEAA is required by local, state, federal, or international law to disclose user information.
- When KHEAA needs to provide the information to its business partners that perform services for users. These partners are given only the information needed to perform that particular service.
- When users have authorized the disclosure of such information.
KHEAA requires disclosure of Social Security numbers to report the status of and to collect your account if your loan is serviced by KHEAA, to report to the Internal Revenue Service the interest you have paid on your student loan, and to report student aid information to the USDE National Student Loan Data System.
USDE requires disclosure of individuals' Social Security numbers on applications and other student aid documents.
Sending an E-mail to KHEAA
KHEAA will respond to e-mails containing suggestions, concerns, and comments by using the same e-mail address provided to KHEAA. KHEAA will not sell or forward your address to any non-affiliated third parties without your permission. KHEAA will use e-mail addresses only for the purpose of sending KHEAA materials. You can always opt out of receiving future e-mails from KHEAA.
Internet Scams and Identity Theft Prevention
You should be on the alert for individuals seeking to obtain personal information through illegitimate means. One such means is commonly referred to as “phishing.” In a common type of phishing scam, individuals receive e-mails that appear to come from their financial institution. The e-mail may look authentic, right down to the use of the institution’s logo and marketing slogans. The e-mails often describe a situation that requires immediate attention and then warn the account will be terminated unless the e-mail recipients verify their account information immediately by clicking on a provided link. The link will take the e-mail recipient to a screen that asks for account information. While it may appear to be a page sponsored by a legitimate financial institution, the information will actually go to the con artist who sent the e-mail. You should never respond to such requests. KHEAA will never ask you to verify account information online. Do not be intimidated by e-mails that warn of dire consequences for not following their instructions. Please call KHEAA if you receive any such e-mail purporting to be from KHEAA.
The USDE Office of the Inspector General (OIG) and Federal Student Aid (FSA) have opened a new website to combat identity theft. The website, http://www.ed.gov/misused, offers tips to prevent and report identity theft. An e-mail address, firstname.lastname@example.org, and telephone hotline, 1-800-MISUSED, have also been established to report cases or suspicion of identity theft.
KHEAA is required to act in compliance with policies, rules, and statutes that govern the programs cited herein. Notwithstanding any information contained in KHEAA’s website, such policies, rules and statutes shall control.
- By e-mail to email@example.com
- By phone at 1-800-928-8926
- By mail to KHEAA Website Information, Attn: Legal Department, P.O. Box 798, Frankfort, KY 40601