Privacy Policy


Our Privacy Commitment

We are strongly committed to providing excellent service, including protecting the privacy of your personal information from disclosure to unauthorized parties. "Personal information" means any information by which you can be personally identified and includes, but is not limited to, your name, address, telephone number, e‐mail address, driver's license and Social Security number. (A domain name or Internet Protocol address is not considered personal information.) We have adopted and implemented a privacy policy to protect individually identifying account and personal information of visitors to our websites.


Our websites use cookies, which are stored on your computer to monitor your activity within a specific website. Cookies do not reveal personal information. They do help us understand which parts of the website are most popular, where visitors are going and how long they spend there.


Users browse our websites anonymously, and personal information is not collected. We gather and analyze data regarding usage of the websites, including domain name, number of hits to the site, pages visited, and time and length of a user's session. The data helps us analyze and upgrade the content, appearance and utility of our sites and track visitors' use for internal market research or other business purposes.

Data Security

We have implemented numerous security measures to protect users' personal information. Only authorized employees trained in proper handling of user personal information are given access to the information and only for the purpose of carrying out our mission.
Data sent to us by users is collected using Secure Socket Layer (SSL) technology to ensure that only we receive the information. Special software programs monitor traffic on our websites to identify unauthorized attempts to upload or change information or cause damage to our sites. These programs do not collect personally identifying information about you, but they do collect information that enables us to identify someone attempting to tamper with our websites.

Children's Online Privacy Protection Rule

We do not knowingly obtain information from children under age 13. We will remove from its files any information collected on a child under age 13 upon request by the parent or guardian of the child.

Information We Collect About You from Other Sources

We collect only the information needed to give our users the utmost quality service. KHEAA collects a limited amount of information about you not available publicly — "nonpublic personal information." This information is collected, either directly or indirectly, so we can deliver financial services you have requested. We are required by federal and state law to collect some information for purposes of processing applications for student financial aid.
We collect information about applicant account balances, amounts borrowed and payment history to monitor an applicant's overall account relationship with us. It may be necessary to collect other facts concerning your financial aid usage.
We collect financial information about you from consumer reporting agencies to process loan applications, monitor your account relationship and collect outstanding loans.
We collect information, such as your name, mailing address, e‐mail address and telephone number, to send you information or contact you about your accounts.
We collect financial information, such as your income, assets you own or liabilities you owe, to process your application and determine the level of student financial aid that can be offered to you.
We receive nonpublic personal information about you from the following additional sources:
  • Promissory notes, applications, correspondence, communications or other forms (including the Free Application for Federal Student Aid).
  • Transactions with us or others (such as your school, guarantor, lenders and holders of student loans, organizations providing services to lenders and holders of student loans, the U.S. Department of Education [ED], state and federal officials, their agents, information clearinghouses that serve the financial aid industry and any of the above entities' agents) or in any manner authorized by your applications or promissory notes and applicable law.
  • Consumer reporting agencies.
  • Individuals or organizations in the course of processing your student financial aid, disbursing your student financial aid, servicing your student financial aid, locating you, collecting or enforcing a claim we have against you or providing a benefit.

Information Sharing and Selling

We do not sell any information about you to non-affiliated third parties.
Disclosure of information about you may be necessary in the delivery of our services to users in the following circumstances:
  • When we are required by local, state, federal or international law to disclose user information.
  • When we need to provide the information to our business partners that perform services for users. These partners are given only the information needed to perform that particular service.
  • When users have authorized the disclosure of such information.
We require disclosure of Social Security numbers to report the status of and to collect your account if we service your loan, to report to the Internal Revenue Service the interest you have paid on your student loan and to report student aid information to the ED National Student Loan Data System.
ED requires disclosure of individuals’ Social Security numbers on applications and other student aid documents.

Sending Us an E-mail

We will respond to e‐mails containing suggestions, concerns and comments by using the same e‐mail address you provide to us. We will not sell or forward your address to any non-affiliated third parties without your permission. We will use e‐mail addresses only for the purpose of sending our materials. You can always opt out of receiving future e‐mails from us.

Internet Scams and Identity Theft Prevention

You should be on the alert for individuals seeking to obtain personal information through illegitimate means. One such means is commonly referred to as “phishing.” In a common type of phishing scam, individuals receive e‐mails that appear to come from their financial institution. The e‐mail may look authentic, right down to the use of the institution’s logo and marketing slogans. The e‐mails often describe a situation that requires immediate attention and then warn the account will be terminated unless the e‐mail recipients verify their account information immediately by clicking on a provided link. The link will take the e‐mail recipient to a screen that asks for account information. While it may appear to be a page sponsored by a legitimate financial institution, the information will actually go to the con artist who sent the e‐mail. You should never respond to such requests. We will never ask you to verify account information online. Do not be intimidated by e‐mails that warn of dire consequences for not following their instructions. Please call us if you receive any such e‐mail.
The ED Office of the Inspector General and Federal Student Aid has a website to combat identity theft. The website,, offers tips to prevent and report identity theft. An e‐mail address,, and telephone hotline, 1-800-MISUSED1-800-MISUSED, have also been established to report cases or suspicion of identity theft.


We reserve the right, at our discretion, to change, modify, add or remove portions of this Privacy Policy at any time. Users should check this page for any changes to the Privacy Policy. Your continued use of our websites following any changes to this Privacy Policy indicates your acceptance of those changes.
We are required to act in compliance with policies, rules and statutes that govern the programs cited herein. Notwithstanding any information contained in our websites, such policies, rules and statutes shall control.

Contact Information

Any questions, concerns, or requests for additional information concerning our website Privacy Policy should be directed:
  • By e‐mail to
  • By phone at 1-800-928-89261-800-928-8926
  • By mail to Website Information, Attn: Legal Department, P.O. Box 798, Frankfort KY 40602–0798