Girl sitting on grandparents lap

KAPT Privacy Policy

Our Privacy Commitment

The Kentucky Higher Education Assistance Authority (KHEAA) is strongly committed to providing excellent service, including protecting the privacy of your personal information from disclosure to unauthorized parties. “Personal information” means any information by which you can be personally identified and includes, but is not limited to, your name, address, telephone number, e-mail address, driver’s license, and Social Security number. (A domain name or Internet Protocol address is not considered personal information.) KHEAA has adopted and implemented a privacy policy to protect individually identifying account and personal information of visitors to


KHEAA’s website uses “cookie” technology. Cookies are text a website stores on a user’s computer to monitor a user’s activity within a specific website. Cookies do not reveal personal information about the user. Cookies help KHEAA understand which parts of the website are most popular, where visitors are going, and how long they spend there.


Users browse KHEAA’s website anonymously, and personal information is not collected. KHEAA gathers and analyzes data regarding usage of the website, including domain name, number of hits to the site, pages visited, and time and length of a user’s session. The data helps KHEAA analyze and upgrade the content, appearance, and utility of the site and track visitors’ use of the sites for internal market research or other business purposes.

Data Security

KHEAA has implemented numerous security measures to protect users’ personal information. Only authorized employees trained in proper handling of user personal information are given access to the information and only for the purpose of carrying out KHEAA’s mission.

Data sent to KHEAA by users is collected using Secure Socket Layer (SSL) technology to ensure only KHEAA receives the information sent by the user. Special software programs monitor traffic on KHEAA’s website to identify unauthorized attempts to upload or change information or cause damage to KHEAA’s website. These programs do not collect personally identifying information about you, but they do collect information that enables KHEAA to identify someone attempting to tamper with its website.

Children’s Online Privacy Protection Rule

KHEAA does not knowingly obtain information from children under age 13. KHEAA will remove from its files any information collected on a child under age 13 upon request by any parent or guardian of the child.

Information KHEAA Collects About You From Other Sources

KHEAA collects only the information needed to give its users the utmost quality service. KHEAA collects a limited amount of information about you not available publicly—"nonpublic personal information.” This information is collected, either directly or indirectly, so KHEAA may deliver financial services you have requested. KHEAA is required by federal and state law to collect some information for purposes of processing applications for student financial aid.

KHEAA collects information about applicant account balances, amounts borrowed, and payment history to monitor an applicant’s overall account relationship with KHEAA. It may be necessary to collect other facts concerning your financial aid usage

KHEAA collects financial information about you from consumer reporting agencies to process loan applications, monitor your account relationship, and collect outstanding loans.

KHEAA collects information, such as your name, mailing address, e-mail address, and telephone number, to send you information or contact you about your accounts.

KHEAA collects financial information, such as your income, assets you own, or liabilities you owe, to process your application and determine the level of student financial aid that can be offered to you.

KHEAA receives nonpublic personal information about you from the following additional sources:

Information Sharing and Selling

KHEAA does not sell any information about you to non-affiliated third parties.

Disclosure of information about you may be necessary in the delivery of KHEAA’s services to users in the following circumstances:

KHEAA requires disclosure of Social Security numbers to report the status of and to collect your account if your loan is serviced by KHEAA, to report to the Internal Revenue Service the interest you have paid on your student loan, and to report student aid information to the USDE National Student Loan Data System.

USDE requires disclosure of individuals' Social Security numbers on applications and other student aid documents.

Sending an E-mail to KHEAA

KHEAA will respond to e-mails containing suggestions, concerns, and comments by using the same e-mail address provided to KHEAA. KHEAA will not sell or forward your address to any non-affiliated third parties without your permission. KHEAA will use e-mail addresses only for the purpose of sending KHEAA materials. You can always opt out of receiving future e-mails from KHEAA.

Internet Scams and Identity Theft Prevention

You should be on the alert for individuals seeking to obtain personal information through illegitimate means. One such means is commonly referred to as “phishing.” In a common type of phishing scam, individuals receive e-mails that appear to come from their financial institution. The e-mail may look authentic, right down to the use of the institution’s logo and marketing slogans. The e-mails often describe a situation that requires immediate attention and then warn the account will be terminated unless the e-mail recipients verify their account information immediately by clicking on a provided link. The link will take the e-mail recipient to a screen that asks for account information. While it may appear to be a page sponsored by a legitimate financial institution, the information will actually go to the con artist who sent the e-mail. You should never respond to such requests. KHEAA will never ask you to verify account information online. Do not be intimidated by e-mails that warn of dire consequences for not following their instructions. Please call KHEAA if you receive any such e-mail purporting to be from KHEAA.

The USDE Office of the Inspector General (OIG) and Federal Student Aid (FSA) have opened a new website to combat identity theft. The website,, offers tips to prevent and report identity theft. An e-mail address,, and telephone hotline, 1-800-MISUSED, have also been established to report cases or suspicion of identity theft.


KHEAA reserves the right, at its discretion, to change, modify, add, or remove portions of this Privacy Policy at any time. Users should check this page for any changes to the Privacy Policy. Your continued use of KHEAA’s website following any changes to this Privacy Policy indicates your acceptance of those changes.

KHEAA is required to act in compliance with policies, rules, and statutes that govern the programs cited herein. Notwithstanding any information contained in KHEAA’s website, such policies, rules and statutes shall control.

Contact Information

Any questions, concerns, or requests for additional information concerning KHEAA’s website Privacy Policy should be directed: