Privacy Policy
Effective as of Last Revised Date: April 27, 2020
BenefitEd LLC provides this Website Privacy Policy (“Policy”) to inform you of our policies and procedures regarding the collection, use and disclosure of personal information we receive from users of products and services (individually and collectively, the “Services”) through a website, www.youbenefited.com (the “Website”). We are not responsible for the practices employed by third party websites or services linked to or from our Website, including the information or content contained therein. This Policy does not apply to information you provide to any third party websites related to or whose services are incorporated into the Website; information you provide to third parties shall be controlled by their respective privacy policies. This Policy does not apply to information we collect by other means (including offline) or from other sources other than through this Website.
In this Policy, the terms “we,” “us,” or “our” shall refer to BenefitEd. The terms “you”, “your”, or “User” shall refer to any individual who accepts this Policy or individuals who use our Website or services. This Policy is subject to change from time to time, so be sure to check back occasionally to ensure you have read the most current version.
We reserve the right at any time, and in our sole discretion, to change or modify this Policy. If any such changes or modifications are made, we will update the “Effective Date” appearing at the top of this web page. If we make a material change to this Policy we will provide notice through email or a web banner on our Website. Such changes or modifications shall be effective immediately upon posting to the Website, and supersede any prior versions of this Policy. Your use of the Website or the Services provided through the Website following such changes or modifications shall constitute your acceptance of the Policy as last revised. If you do not agree to these terms then please do not use our Website or Services.
Information We Collect
Why We Collect Information
We collect information so we can identify you as our customer, establish, manage and protect your accounts, complete your transactions, create and offer you products and services you might be interested in, and comply with various legal and regulatory requirements.
Personally Identifying Information
Personally Identifiable Information, as used in this Policy, means any information or set of information that identifies a specific individual. Examples of Personally Identifiable Information that may be requested include first and last name, phone number, email address. We collect this information on the Website to establish an account and allow you to request information from us. At the time of setting up your account, we may further collect information.
Non-Identifying Information
We may collect Non-Identifying Information from your visit or as part of the registration and administration of your account, in order to personalize and improve upon your experience with us.
The Website may use cookies for navigational purposes. A cookie is a small text file placed on your hard drive (not on the Website) by a web page server. Cookies make your Internet experience quicker and more convenient. You are always free to decline our cookies if your browser permits, but some parts of the Website may not work properly if you do. Accepting a cookie from the Website does not give us access to any of your Nonpublic Personal Information or Personally Identifiable Information. You may be able to set up your Web browser to inform you when cookies are created or to prevent cookies from being created.
When you enter the Website, you will pass through our security firewall and we will identify the Internet Protocol (IP) address of your computer or handheld device. The IP address will not identify you personally, but it will let us identify the device you are using. We store IP addresses in case we need to track a connection for security purposes. We may also collect information about the device you are using to access Administrator Services, including what type of device it is, what operating system you’re using, device settings, unique device identifiers, geo-location data, and crash data. Whether we collect some or all of this information often depends on what type of device you are using and its settings. Check the policies of your device manufacturer or software provider to learn more about what information your device makes available to us.
Log Files
Like most websites, our servers utilize log files. Log files store information including internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks. Log files are used to analyze trends, administer the Website, track Users’ movement in the aggregate, and gather broad demographic information for aggregate use. We use log file information at times to help identify you as you browse and to gather broad technical and demographic information on who uses our website.
Web Beacons
Our website contains coding known as Web Beacons that use 1×1 pixel images to capture and transmit the online activity of users on the Website. These Web Beacons typically transmit information about the completion of forms on the Website and other Website activities in order to measure advertising effectiveness and/or store analytics information. In addition, we may use Web Beacons in HTML-based emails. This use allows us to evaluate the effectiveness of our email communications and our marketing campaigns by showing how many emails recipients open.
Google Analytics Advertising Features
We use Google Analytics to collect information about the use of the Website. Google Analytics collects information such as how often users visit the Website, what pages they visit when they do so, and what other sites they used prior to coming to the Website. We use the information we get from Google Analytics only to improve the Website. Google Analytics collects only the IP address assigned to you on the date you visit the Website, rather than your name or other identifying information. We do not combine the information collected through the use of Google Analytics with Personally Identifiable Information. Although Google Analytics plants a permanent cookie on your web browser to identify you as a unique user the next time you visit this site, the cookie cannot be used by anyone but Google. Google’s ability to use and share information collected by Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You can prevent Google Analytics from recognizing you on return visits to this Website by disabling the Google Analytics cookie on your browser. You can also view and change the currently available opt-outs for Google Ads.
We also use the Google AdWords remarketing service to advertise on third party websites (including Google) to previous visitors of our Website. This could be in the form of an advertisement on other websites or on the Google search results page. Third party vendors, including Google, use cookies to serve ads based on someone’s past visits to the Website. Any data collection will be used in accordance with our own privacy policy and Google’s privacy policy. You can set preferences for how Google advertises to you using Google’s Ads Settings. Alternatively, you can opt-out of a third party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page.
Do Not Track Signals
Do Not Track is a feature in your web browser, which enables you to opt-out of the third party tracking of your online activities over time and across third party websites. We do not track users across other websites to provide targeted advertising. We do comply with any web browser’s “do not track” signal or other similar mechanism that indicates a request to disable online tracking of individual users who visit this Website or use our Services. Third parties cannot collect any Personally Identifiable Information from this Website unless you provide it to them directly.
How We Use Your Information
Uses of Information
Certain Non-Identifying Information would be considered a part of your Personally Identifiable Information if it were combined with other identifiers (for example, combining your zip code with your street address) in a way that enables you to be identified. But the same pieces of information are considered Non-Identifying Information when they are taken alone or combined only with other non-identifying information (for example, your viewing preferences). We may combine your Personally Identifiable Information with Non-Identifying Information and aggregate it with information collected from other users to attempt to provide you with a better Website experience and to analyze and understand how our Website and Services are used. We may also use the combined information without aggregating it to serve you specifically, for instance to deliver a product to you according to your preferences or restrictions.
If you supply us with your email address we may let you know by email about other products and services and product enhancements that may be of interest to you. You will have the opportunity to tell us you do not want to receive future messages with each message you receive.
If you wish to change any of your personal information, you may change it by logging into your account, or by contacting us, either through email, by mail, or by telephone as listed in the “How to Contact Us” section below.
What We Share
We do not sell personal information to third parties. All personal information collected is used by us or our affiliates to perform services, comply with laws, or carry out internal functions.
Sometimes the law or other circumstances also require that we disclose Personally Identifiable Information about you to nonaffiliated third parties. Some examples are: when you ask or permit us to do so; in response to subpoenas or court orders; when we suspect fraud or criminal activity; to protect our property and rights or those of a third party; to protect the safety of the public or any person; or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, unethical, or legally actionable activity. BenefitEd does/does not sell, lease, or otherwise disclose Nonpublic Personal Information and/or Personally Identifiable Information collected on its Website to third parties for marketing purposes.
We may employ third party companies and individuals to facilitate our Services, to provide the Services on our behalf, to perform Website-related Services (e.g., without limitation, maintenance services, database management, web analytics and improvement of the Website’s features) to assist us in analyzing how our Website and Services are used, or to perform other services (e.g., without limitation, sending postal mail and email, providing marketing assistance, and providing customer service). These third parties have access to your Nonpublic Personal Information and/or Personally Identifiable Information only to perform these tasks on our behalf; provided, however, that if you are redirected to a site or application maintained by a third party, the privacy policy of such site or application will control the use of any information you provide.
We may sell, transfer or otherwise share some or all of our assets, including your Nonpublic Personal Information and/or Personally Identifiable Information, in connection with a merger, acquisition, reorganization or sale of assets, or in the event of bankruptcy.
In addition, we do utilize social plug-ins from social networking sites that connect our website with the social plug-ins’ platform, so you have a more integrated user experience. These social plug-ins collect information from you when you visit our Website. The type of information and use of this information is governed by each social-plugins’ respective terms of use and privacy policy.
Our Security Procedures
BenefitEd is committed to providing you a useful and enjoyable online experience, and to protecting your Nonpublic Personal Information and Personally Identifiable Information that we maintain. When you access the Website, your information is protected by reasonable and standard security and authentication techniques. We may collect information from your visit in order to personalize and improve upon your experience with us, but all personally identifiable information we collect is maintained securely.
To access information and send email via the Website, you will need a browser that supports the use of Secure Sockets Layer (SSL) technology. This encryption technology helps ensure the authenticity of your online sessions and secures data being transmitted over the public Internet.
BenefitEd takes careful steps to safeguard customer information. We restrict access to your personal and account information to those employees who need to know that information to provide Services to you, and we regularly train our employees on privacy, information security, and their obligation to protect your information. We maintain reasonable and appropriate physical, electronic, and procedural safeguards to guard your Nonpublic Personal Information and Personally Identifiable Information and we regularly test those safeguards to maintain the appropriate levels of protection.
Children’s Privacy
The Website is not directed to children under 13. We do not knowingly collect, maintain or use personally identifiable information from the Website about children under age 13. If a parent or guardian becomes aware that his or her child has provided us with Personally Identifiable Information without their consent, he or she should contact us using the information below (“How to Contact Us”). If we confirm that we have collected such information we will take all reasonable measures to delete that information from our system as soon as reasonably possible.
Hardware and Software Requirements
Enrollment in this electronic service requires that you have a personal computer with appropriate browser software, e-mail software as well as communications access to the Internet. Browser requirements include the most current or previous version of one of the following: Netscape, Internet Explorer, Firefox Mozilla, Safari or Opera. Web pages are best viewed at an 800 x 600 screen resolution (web browser size of 760 x 480), and allowed to be viewed at various resolutions with minimal degradation of content display. Although we will not charge for electronic delivery you may incur charges from Internet Service Providers and local telephone companies. Should you wish to print materials that have been delivered electronically, you must have a printer as well. Some files are available in Adobe Acrobat Format. In order to view this format (.pdf), you will need to have Adobe Acrobat Reader software. Visit Adobe.com to obtain the most current free version of Adobe Reader.
California Resident Disclosure
The California Consumer Protection Act provides California Residents with specific rights regarding their personal information. This section describes how we treat your personal information in light of the CCPA. As stated above, we do not disclose nonpublic personal information about you to nonaffiliated third parties. We do not sell your personal information, and only use your personal information for the following reasons:
- Provide consumer services.
- Comply with the law.
- Carry out internal functions.
Right of Deletion
Consumers have the right to have their information deleted if the information is no longer needed to provide the services they’ve requested. To submit a request to delete all personal information please email AskPrivacy@nelnet.net.
How to Contact Us
If you have any questions about this Policy, please contact us by email or regular mail at the following address:
121 S. 13th STE 201
Lincoln, NE 68508
Support@youbenefited.com
844-358-5707
Last Updated: June 4, 2025
1. About This Privacy Policy
BenefitEd LLC (“BenefitEd”, “we”, “our”, and “us”) respects your concerns about privacy. This Privacy Policy describes the types of personal information we obtain via our websites and online services that link to this Privacy Policy (collectively the “Services”), how we use the information, with whom we share it, and the choices available regarding our use of the information. This Privacy Policy also describes the measures we take to safeguard personal information and how you can contact us about our privacy practices.
Other divisions, affiliates, and subsidiaries of Nelnet, Inc. list their privacy practices on their respective websites. Also, this Privacy Policy applies when we are the “controller” of the information we collect, not the “processor”. For more information about what we mean by “controller” and “processor”, please see our Notice to Our Organization Customer End Users section.
This Privacy Policy also includes information specific to certain categories of users (for example, residents of California)
Please read this Privacy Policy carefully to understand our policies and practices regarding the information we collected and how we use it.
2. Notice to Our Organization Customer End Users
Some data protection laws in various jurisdictions distinguish between “controllers” and “processors” of personal information. While other jurisdictions may use different terminology, the concept typically remains the same. A controller decides why and how to process personal information. A processor—also sometimes called a “service provider”—only processes personal information on behalf of a controller based on the controller’s instructions; the processor does not make decisions about personal information.
We are a processor when we process your personal information on behalf of our organization customers for whom you have a relationship with. However, there are circumstances when we act as a controller, such as, when you:
- Use any of our publicly accessible Services, such as https://youbenefited.com/.
- Interact with us as a representative of an organization that has (or is considering) a business relationship with us (e.g., you are our customer or our supplier).
- Create or use an account offered directly by us (as opposed to an account offered by us through one of our organization customers).
- Register for or attend one of our marketing, learning, or training events or webinars.
- Provide us with feedback about our Services.
- Receive a sales or marketing communication from us, including emails or telephone calls.
- Otherwise, give us consent to process your personal information for our legitimate business purposes.
Under various global privacy laws, it is the controller who is responsible for responding to your privacy inquiries, including any requests to exercise your data protection rights. You may choose to submit such privacy inquiries and requests directly to us, however, if we are the processor with respect to your inquiry or request, we will transfer validated requests and inquiries to the applicable controller, as we cannot respond to such requests or inquiries unless instructed to do so by the controller. We encourage you to direct your inquiries and requests to our organization customers for whom you have a relationship with to ensure your privacy inquiries and requests are processed promptly. Also, we are not responsible for the privacy or security practices of our organization customers, which may differ from those set forth in this Privacy Policy.
If you have questions, please see the “How to Contact Us” section below for further information.
3. Information We Obtain
The types of personal information we may collect include:
- Contact information, such as name, email and postal address, and phone number;
- User credentials, such as username and password; and account information and preferences, such as email preferences and paperless registration;
- Payment data, such as student loan account number, bank account number and routing number;
- Identifiers, such as Social Security number or other government-issued identifier;
- Demographic information, such as date of birth; and other characteristics such as gender or marital status;
- Device data and online activity information, as described in the Automated Information Collection section below.
- Documents and uploaded content, including any materials you submit to us, such as letters, forms, notices, or supporting documents related to your account;
- Employment and Education Information, including résumé or job application details, education history, and related background information if you apply for a position with us or interact with our services in a professional capacity.
- Sensory and communication data, such as audio recordings (e.g., customer service calls), chat transcripts, emails, or other content you provide through our services.
- Information provided by third-parties, such as personal information about you from third party data providers or publicly available sources for anti-money laundering, background check or similar screening purposes, to protect our business and to comply with legal and regulatory obligations
Information You Provide Directly to Us
Personal information that you provide directly to us will be apparent from the context in which you provide it, for example:
- Filling Out Forms: If you fill out a form on our sites, you may provide your name, contact details (postal address, email address and telephone number) and other information requested by the form, such as the reason for your inquiry.
Signing Up for Communication: If you sign up to receive electronic marketing communications from us, you may be asked to provide your name, email address and other contact information. - Logging Into Accounts: When you log into an account, while we obtain your login credentials, your information may be otherwise collected by the third-party that operates the account portal and may be subject to that third party’s own privacy policies, if made available. Once you log in, additional information about you will be included in the portal, such as your name, work email address, phone number, time zone, and postal address, if applicable.
- Signing Up for Service Features: If you sign up to a feature in connection with one of our Services, you may be asked to provide your name and contact information and other information necessary to access the feature.
Each form in connection with our Services varies in the information required and collected. In most cases, an asterisk (*) indicates the required information on a form. You may choose to provide additional information within fields that are not required
In addition, you may choose to submit personal information to us if you attend an event that we or one of our affiliates or partners has organized or if you otherwise communicate with us on social media or by sending us an email.
While the personal information you choose to provide is voluntary, providing certain personal information may be necessary to offer you the relevant product or service. If you choose not to provide certain information, this may affect our ability to provide you with certain products or services.
Automated Information Collection
In addition, when you interact with the Services, or open or view our emails, we may obtain certain information using various automated technologies, such as cookies, web server logs, web beacons, and other technologies (collectively, “Cookies”). The types of Cookies used on our Services may include:
- Browser Cookies: a small text file unique to your device. They can either be session-based (in other words, lasting while your browser is open) or persistent (in other words, lasting until you delete them or they expire).
- Local Stored Objects: stored on your device or browser to provide the Services.
- Web beacons: also known as an Internet tag, pixel tag or clear GIF, are small pieces of code placed on a website or within the body of an email for the purpose of tracking activity on websites, or when emails are opened or accessed, and are often used in combination with cookies.
- Software Development Kits: bits of computer code used by app developers to enable or enhance various features of an app. For example, an app developer may include an SDK within an app that enables advertisements to be shown, data to be collected, and related services or analytics to be performed in connection with the app.
- Session Replay Software. Third-party services that can record users’ interactions such as users’ clicks, cursor movements and page scrolls.
We use these technologies to collect information about your equipment, browsing actions, and usage patterns. The information we obtain in this manner may include your IP address, identifiers associated with your devices, web browser characteristics, device characteristics, language preferences, referring/exit pages, clickstream data and dates and times of visits to the Services. These technologies help us:
- Remember your information so you will not have to re-enter it;
- Understand how you use and interact with the Services and with our electronic communications with you such as our emails;
- Tailor the Services around your preferences;
- Measure the usability of the Services and the effectiveness of our communications; and
- Otherwise manage and enhance the Services and our other services, and help ensure they are working properly.
Your browser may tell you how to be notified when you receive certain types of cookies or how to restrict or disable certain types of cookies. Please note, however, that certain features of the Services may not work without use of cookies.
Depending on where you are located and the type of Services you are engaging with, we use a consent management platform for you to manage your preferences for web-based Cookies.
Other Online Services and Third-Party Features
For your convenience and information, the Services may contain links to, or integrations with, other websites, platforms, or services that include third-party features such as apps, tools, widgets and plug-ins.
However, these online services and third-party features operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, is subject to the privacy policies of these parties, which we strongly suggest you review. To the extent any linked online services or third-party features are not owned or controlled by us we are not responsible for these third parties’ information practices.
4. How We Use Information
Legitimate Business Purposes
We may use the information we gather for the following legitimate business purposes:
- Provide and manage our services, including establishing and servicing accounts, processing transactions, and managing our business relationships.
- Authenticate identity and authorize access to our platforms and services.
- Communicate with you, including responding to inquiries, providing support, sending service-related messages, and offering promotions or other marketing communications.
- Personalize your experience, such as tailoring content, offers, and interactions to your preferences, and measuring the effectiveness of our marketing efforts.
- Operate and improve our business and services, including developing new products, analyzing usage trends, evaluating the performance of communications and campaigns, and conducting accounting, auditing, and other internal operations.
- Perform data analytics and research, including market and financial analysis, customer insights, and the deidentification, anonymization or aggregation of personal information.
- Enhance security and prevent misuse, such as protecting our services, users, and systems from fraud, abuse, unauthorized access, and other harmful activity.
- Diagnose and address technical issues, support IT operations, and ensure system reliability and continuity.
- Maintain business records and conduct internal administrative functions.
- Comply with legal and regulatory obligations, enforce our policies and terms, and respond to law enforcement or regulatory inquiries.
When we deidentify, aggregate, or anonymize data for purposes such as analytics, research, product development, and to improve our services, we endeavor to maintain and use the data in a deidentified, anonymized, or aggregated form such that it cannot reasonably be used to reidentify individuals, except as permitted by applicable law.
Third-Party Analytics
We may use third-party analytics services in connection with our Services, such as:
- Google Analytics
- Pendo
- Fullstory
- Factors.AI
- Pardot
- Hubspot
We may also use third-party session replay and screen capture services that record users’ interactions with our site, such as:
- Hotjar
- Microsoft Clarity
The service providers that administer these services use automated technologies such as Cookies to help us analyze your use of the Services. For more information, see our “Automated Information Collection” section above. The information we obtain through our Services may be disclosed to or collected directly by these service providers. To learn more about these service providers, please consult their respective privacy policies. For example, we use Google Analytics for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites here: https://tools.google.com/dlpage/gaoptout?hl=en.
In connection with our Services, we may obtain information about your online activities to provide you with advertising about services tailored to your interests. You may also see our ads on other websites because we use third-party advertising services as described below. Through such advertising services, we can target our messaging to users considering demographic data, users’ inferred interests and browsing context. These services track your online activities over time and across multiple websites by collecting information through automated means, including with cookies, web server logs, web beacons and other similar technologies. The advertising services use this information to show you ads that may be tailored to your individual interests. The information that advertising services may collect includes data about your visits to websites that serve our advertisements, such as the pages or ads you view and the actions you take on the websites. This data collection takes place both in connection with our Services and on third-party websites that participate in these advertising services. This process also helps us track the effectiveness of our marketing efforts. For more information about your choices regarding these marketing and advertising services, see our Your Rights and Choices section below.
The Services otherwise are not designed to respond to “do not track” signals received from browsers.
Third-Party CAPTCHA Services
We may use third-party CAPTCHA services in connection with the Services, such as Google reCAPTCHA. The information we obtain through the CAPTCHA services may be disclosed to or collected directly by these services. To learn more about Google reCAPTCHA, please visit Google’s Privacy Policy and Terms of Use.
5. How We Disclose Information
We may disclose the information we obtain about you with affiliates and subsidiaries. We also disclose personal information with affiliated and non-affiliated third-party vendors to perform certain services on our behalf, such as website hosting, data analytics, payment processing, sending communications (e.g., via email), and other services.
In addition, sometimes the law or other circumstances require that we may disclose information about you. Some examples include the following:
If we are required to do so by law or legal process (such as a court order or subpoena);
- In response to requests by government agencies, such as law enforcement authorities;
- To establish, exercise or defend our legal rights;
- To protect, defend or enforce our policies, terms or agreements;
- When we believe disclosure is necessary or appropriate to address security or to prevent physical or other harm or financial loss;
- In connection with an investigation of suspected or actual illegal activity; or
- Otherwise with your consent.
We also reserve the right to transfer information we have about you in the event we sell or transfer all or a portion of our business or assets (such as in the event of a merger, acquisition, joint venture, consolidation, restructuring, divestiture, dissolution liquidation or other corporate change), including during any due diligence process.
6. Your Rights and Choices
We may have certain rights and choices regarding how we collect, use, disclose and otherwise process your personal information.
Communications Choices. You can tell us at any time not to send you marketing communications by email by clicking on the unsubscribe link in the marketing emails you receive from us or by sending an “opt out” request to the address indicated on the email.
Marketing and Advertising. Depending on where you reside, you may have the right to opt out of the sale of your personal information or sharing or processing of your personal data for targeted advertising. You can exercise your opt-out rights by navigating to the “Your Privacy Choices” link in connection with the relevant Services. For more information, visit our Automated Information Collection section.
Depending on where you reside, you may also use the Global Privacy Control (“GPC”) through a supported browser to signal certain of opt-out preferences across our relevant Services. Please see the “Additional Jurisdiction-Specific Information” section below for more details.
You can limit use of your information for interest-based advertising by:
- Browser settings. Blocking third-party cookies in your browser settings.
- Privacy browsers/plug-ins. By using privacy browsers or ad-blocking browser plug-ins that let you block tracking technologies.
- Platform settings. We may use third-party advertising services, which offer opt-out features that let you opt-out of use of your information for internet-based advertising, such as the following:
Third-Party Advertising Services Weblink for more information Google Ads https://adssettings.google.com/ Meta https://www.facebook.com/about/ads LinkedIn https://www.linkedin.com/legal/privacy-policy Microsoft https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads TikTok https://www.tiktok.com/legal/privacy-policy-us?lang=en - Interest-based advertising. To learn how to opt out of ad network interest-based advertising, please visit www.aboutads.info/choices, http://www.networkadvertising.org/choices, and http://preferences-mgr.truste.com.
Access, Correction, Deletion and Other Rights. Depending on where you reside, you may have the right to request access to, or correction or deletion of, your personal information. For more information, see the Additional Jurisdiction-Specific Information section.
Other Choices. You can edit or remove certain information in your user account with our relevant Services.
7. How We Protect Personal Information
We maintain administrative, technical safeguards designed to protect the personal information we obtain against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.
8. Children’s Privacy
We recognize the importance of protecting children’s online privacy. We do not knowingly collect personal information online from children under the age of 13.
9. Data Transfers
Personal information we collect may be stored and processed in the region in which it is collected, in the United States, and in any other region where we maintain major operations. We take steps to help ensure that the personal information we collect under this Privacy Policy is stored and processed in accordance with this Privacy Policy regardless of where the data is located. Such personal information may be transferred to our offices and servers and our authorized third-party service providers.
10. Retention of Personal Information
To the extent required by applicable law, we keep the personal information for the period reasonably necessary to achieve the purposes described in our Privacy Policy, plus a reasonable period to comply with the applicable statute of limitations or if otherwise required under applicable law, unless a shorter retention period is required by applicable law.
11. Additional Jurisdiction-Specific Information
If you are a California resident, please refer to our California Consumer Privacy Notice.
12. HIPAA Notice
We do not intentionally collect Protected Health Information (“PHI”), as it is not required for the use of our Services. Users should not upload PHI in connection with our Services unless explicitly agreed to in writing. If you believe PHI may have been inadvertently uploaded, please contact us as specified in the How to Contact Us section below.
13. Changes To This Privacy Policy
We may update this Privacy Policy from time to time and without prior notice to you to reflect changes in our privacy practices. We will indicate at the top of the notice when it was most recently updated. The Privacy Policy is effective as of the date listed above and applies to our services that link to this Privacy Policy. These changes or modifications supersede any prior versions of this Privacy Policy.
14. How To Contact Us
If you have any questions about this Privacy Policy, please contact us by email at AskPrivacy@nelnet.net or write us, using the contact information below:
Depending on the situation, we may be the “processor” in connection with your privacy request or inquiry. Please see the “Notice to Our Organization Customer End Users” section for more information about what we mean by “processor”. In these situations, we follow the instructions of our organization customers, and they control how your personal information is used. If you have privacy questions or want to exercise your rights regarding data we process on their behalf, you should contact that organization directly. We will support them in responding to your request, but we cannot make decisions about your data without their guidance.
If you’re unsure who to contact, feel free to reach out to us, and we can help direct you to the appropriate party.