Privacy Policy

KHESLC's website uses "cookie" technology. Cookies are text a website stores on a user's computer to monitor a user's activity within a specific website. Cookies do not reveal personal information about the user. Cookies help KHESLC understand which parts of the website are most popular, where visitors are going, and how long they spend there.

Users browse KHESLC's website anonymously, and personal information is not collected. KHESLC gathers and analyzes data regarding usage of the website, including domain name, number of hits to the site, pages visited and time and length of a user's session. The data helps KHESLC analyze and upgrade the content, appearance and utility of the site and track visitors' use of the sites for internal market research or other business purposes.

KHESLC has implemented numerous security measures to protect users' personal information. Only authorized employees trained in proper handling of user personal information are given access to the information and only for the purpose of carrying out KHESLC's mission.

Data sent to KHESLC by users is collected using Secure Socket Layer (SSL) technology to ensure only KHESLC receives the information sent by the user. Special software programs monitor traffic on KHESLC's website to identify unauthorized attempts to upload or change information or cause damage to KHESLC's website. These programs do not collect personally identifying information about you, but they do collect information that enables KHESLC to identify someone attempting to tamper with its website.

KHESLC does not knowingly obtain information from children under age 13. KHESLC will remove from its files any information collected on a child under age 13 upon request by any parent or guardian of the child.

KHESLC collects only the information needed to give its users the utmost quality service. KHESLC collects a limited amount of information about you not available publicly - "nonpublic personal information." This information is collected, either directly or indirectly, so KHESLC may deliver financial services you have requested. KHESLC is required by federal and state law to collect some information for purposes of processing applications for student financial aid.

KHESLC collects information about applicant account balances, amounts borrowed and payment history to monitor an applicant's overall account relationship with KHESLC. It may be necessary to collect other facts concerning your financial aid usage.

KHESLC collects financial information about you from consumer reporting agencies to process loan applications, monitor your account relationship and collect outstanding loans.

KHESLC collects information, such as your name, mailing address, email address and telephone number, to send you information or contact you about your accounts.

KHESLC collects financial information, such as your income, assets you own or liabilities you owe, to process your application and determine the level of student financial aid that can be offered to you.

KHESLC receives nonpublic personal information about you from the following additional sources:

• Promissory notes, applications, correspondence, communications or other forms (including the Free Application for Federal Student Aid).
• Transactions with KHESLC or others (such as your school, guarantor, lenders and holders of student loans, organizations providing services to lenders and holders of student loans, the U.S. Department of Education [USDE], state and federal officials, their agents, information clearinghouses that serve the financial aid industry, and any of the above entity's agents) or in any manner authorized by your applications or promissory notes and applicable law.
• Consumer reporting agencies.
• Individuals or organizations in the course of processing your student financial aid, disbursing your student financial aid, servicing your student financial aid, locating you, collecting or enforcing a claim of KHESLC, or providing a benefit.

KHESLC does not sell any information about you to non-affiliated third parties.

Disclosure of information about you may be necessary in the delivery of KHESLC's services to users in the following circumstances:

• When KHESLC is required by local, state, federal or international law to disclose user information.
• When KHESLC needs to provide the information to its business partners that perform services for users. These partners are given only the information needed to perform that particular service.
• When users have authorized the disclosure of such information.

KHESLC requires disclosure of Social Security numbers to report the status of and to collect your account if your loan is serviced by KHEAA, to report to the Internal Revenue Service the interest you have paid on your student loan, and to report student aid information to the USDE National Student Loan Data System.

USDE requires disclosure of individuals' Social Security numbers on applications and other student aid documents.

KHESLC will respond to emails containing suggestions, concerns and comments by using the same email address provided to KHESLC. KHESLC will not sell or forward your address to any non-affiliated third parties without your permission. KHESLC will use email addresses only for the purpose of sending KHESLC materials. You can always opt out of receiving future emails from KHESLC.

You should be on the alert for individuals seeking to obtain personal information through illegitimate means. One such means is commonly referred to as "phishing." In a common type of phishing scam, individuals receive emails that appear to come from their financial institution. The email may look authentic, right down to the use of the institution's logo and marketing slogans. The emails often describe a situation that requires immediate attention and then warn the account will be terminated unless the email recipients verify their account information immediately by clicking on a provided link. The link will take the email recipient to a screen that asks for account information. While it may appear to be a page sponsored by a legitimate financial institution, the information will actually go to the con artist who sent the email. You should never respond to such requests. KHESLC will never ask you to verify account information online. Do not be intimidated by emails that warn of dire consequences for not following their instructions. Please call KHESLC if you receive any such email purporting to be from KHESLC.

The USDE Office of the Inspector General (OIG) and Federal Student Aid (FSA) have opened a new website to combat identity theft. The website, http://www.ed.gov/misused offers tips to prevent and report identity theft. An email address, oig.hotline@ed.gov, and telephone hotline, 1-800-MISUSED, have also been established to report cases or suspicion of identity theft.

KHESLC reserves the right, at its discretion, to change, modify, add or remove portions of this Privacy Policy at any time. Users should check this page for any changes to the Privacy Policy. Your continued use of KHESLC's website following any changes to this Privacy Policy indicates your acceptance of those changes.

KHESLC is required to act in compliance with policies, rules and statutes that govern the programs cited herein. Notwithstanding any information contained in KHESLC's website, such policies, rules and statutes shall control.

Any questions, concerns, or requests for additional information concerning KHESLC's website Privacy Policy should be directed:

• By email to legal@kheaa.com
• By phone at 1-800-928-8926
• By mail to KHESLC Website Information, Attn: Legal Department, PO Box 24266, Louisville, KY 40224-0266