Privacy Policy


Complete Student Loans is a product of the Utah Higher Education Assistance Authority.

UHEAA is governed by the Utah Board of Higher Education.

Protecting the privacy of your nonpublic personally identifying information (“Personal Information”) is important to us at the Utah Higher Education Assistance Authority (UHEAA). We respect your right to privacy and recognize our obligation to keep your Personal Information secure and confidential. Personal Information collected and used in connection with our website, and all other sites of UHEAA with authorized links to this Privacy Policy (collectively, the “Site”), is governed by this Privacy Policy. Please review our Privacy Policy. If you have objections to the Privacy Policy, you should immediately discontinue use of the Site and the products and services enabled by the Site. Submitted Personal Information in some cases may be covered by the Privacy Act, the Family Educational Rights and Privacy Act (FERPA), and the Gramm-Leach-Bliley Act. Information about private student loans will not be subject to the federal Freedom of Information Act. A discussion of your rights under these laws can be found at the following links:

Please note that for the purpose of EU data protection laws, UHEAA is a “data controller” (the entity responsible for, and which controls the processing of, your Personal Information collected through the Site).

Personal Information We Collect

As a visitor to this Site, you can engage in many activities without providing any Personal Information. If you choose to provide Personal Information to us, such as by sending a message to an e-mail address on our Site or by filling out a form and submitting it through our Site, we will use that information to respond to your message or to fulfill the stated purpose of the communication.

We collect Personal Information about you for the purpose of conducting our business and pursuing our legitimate interests, including to identify you as our customer, to establish and manage your accounts, to complete your transactions, to provide information to you about our products and services, and to comply with legal and regulatory requirements. The types of nonpublic Personal Information that we may collect includes:

  • Your Social Security Number, name, contact information, birth date, assets, and income.
  • Your transaction history, account balances and payment history.
  • Your credit history and credit scores.

We collect Personal Information about you from sources that include, but are not limited to:

  • Information we receive from you or your representative on applications, promissory notes, forms, and through other communications. For example, when you take out a loan, send us an email, or open an online account on our Site.
  • Information about your transactions with us or others, including lenders, schools, or the U.S. Department of Education. For example, when you make a payment or finish school.
  • Information we receive from consumer credit reporting agencies or public records.
Personal Information We Share

We do not disclose any Personal Information about you, whether you are a current or former customer, to anyone, except as permitted by law. We do not sell or otherwise share your Personal Information with outside marketers.

UHEAA shares your non-public information in the following instances:

  • For our everyday business purposes – such as to process your transactions, maintain your account(s), or report to credit bureaus, etc.;
  • Consistent with student loan industry practice, we share your personal information with industry aggregators for the benefit of students. Such industry aggregators include the National Student Clearinghouse, and the National Student Loan Data System (NSLDS);
  • As required by court order or subpoena, pursuant to state, local, federal or international statute, regulation, or mandate, and in cooperation with law enforcement agencies;
  • For being in compliance with United States Department of Education requirements under the Higher Education Act, UHEAA is required to collect and disclose the Social Security Numbers of applicants for Federal student loans. The primary use of this information is to verify customer identity, determine program eligibility and benefits, permit the servicing of financial aid, and certify attendance and status at an approved higher education institution. Disclosure of your Social Security Number is mandatory for participation in Federal student loan programs under the Higher Education Act. For information on how the Department of Education treats the privacy of Social Security Numbers, please link to the following website to see the Department of Education’s privacy policy:

You have the ability to authorize the disclosure of Personal Information to a third-party or to provide products and services that you request.


To protect your Personal Information from unauthorized access and use, we employ appropriate management, operational and technical security measures that comply with federal law and regulations to ensure the security and confidentiality of your Personal Information. These measures include computer safeguards, access controls, data storage procedures, secured facilities, and periodic testing of safeguards. We restrict access to your Personal Information to only our employees who we have determined have a legitimate business need for the information in order to provide our products and services.

Site Management Data

UHEAA protects the privacy of your Personal Information on our Site using the same standards and care used for all UHEAA communications and transactions.

If you visit our Site to read or download information, we collect and store the following information about your visit:

  • The name of the Internet domain (for example, “” if you use a private Internet access account, or “” if you are connecting from a university’s domain)
  • The IP address (a number that is automatically assigned to your computer when you are using the Internet) from which you access our Site
  • The type of browser and operating system used to access our Site
  • The date and time you access our Site
  • The Internet address of the Web site from which you linked directly to our Site
  • The pages you visit and the information you request

We may also use HTML encoding to record aggregate information about the usage of the Site and whether emails that we send have been accessed or acted upon.

This information is primarily collected for statistical analysis and technical improvement to the Site. Our computer system uses software programs to create summary statistics, which may be used for such purposes as assessing what information is of most and least interest, determining technical design specifications, and identifying system performance or problem areas. In certain circumstances, however, we may take additional steps to identify you based on this information and we may share this information, including your identity, with other government or law enforcement agencies.

Information is obtained by UHEAA via session cookies to enhance the delivery of products, services, and information on our Site. A cookie is a small file that UHEAA transfers to your computer hard drive. Cookies enable us to ensure that only your web browser may exchange information regarding your account with UHEAA’s servers, and to automatically terminate an online session if you forget to log out. UHEAA’s use of session cookies enables you to avoid being asked to provide the same information repeatedly while you navigate our Site. Session cookies are temporary files that are erased when you close all web browsers. You can set your browser to notify you before accepting a cookie, so that you can decide whether to accept or reject the cookie.

UHEAA also uses persistent cookies for your online protection, as part of our Site’s authentication technology. Persistent cookies assist UHEAA in verifying your identity when you attempt to log into your account. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you do so, please note that certain Site features may not function properly.

For Site security purposes and to ensure that our Site remains available to all users, our system employs software programs to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise causes damage. When you use this Site, you expressly consent to such monitoring and are advised that if such monitoring reveals evidence of possible abuse or criminal activity, such evidence may be provided to appropriate law enforcement officials. Unauthorized attempts to upload or change information on this server are strictly prohibited and may be punishable by law, including the Computer Fraud and Abuse Act of 1986 and the National Information Infrastructure Protection Act of 1996.


Consistent with the Children’s Online Privacy Protection Act (COPPA), UHEAA will not knowingly collect or retain information submitted by children under the age of 13. If we learn that we unknowingly collected personally identifying information from children under 13 years of age, we will immediately take all reasonable measures to delete the information from our computer systems and all other data systems.

How to Contact UHEAA

If you have any questions, concerns, or if you desire additional information regarding the UHEAA Privacy Policy, please contact us using the form on the UHEAA Contact Us page.

Retention of Personal Information

We retain your Personal Information for as long as you remain our customer and thereafter only for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or allowed by law, including to fulfill a legal obligation.

External Links and Third Party Websites

You may find advertising or other content on our Site that link to the websites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. Such external links and websites are operated by third parties. We do not control the content or links that appear on these websites and are not responsible for the practices employed by websites linked to or from our Site. In addition, these websites or services, including their content and links, may be constantly changing. These websites and services may have their own privacy policies and customer service policies. Once you have left our Site, we cannot be responsible for the protection and privacy of Personal Information you provide on other websites. Browsing and interaction on any other website, including websites which have a link to our Site, is subject to that website’s own terms and privacy policy. You should exercise caution and review the privacy policy of any website you visit.

“Do Not Track” Disclosure

Certain web browsers may allow you to enable a “do not track” option that sends signals to the websites you visit indicating that you do not want your online activities tracked. This is different than blocking cookies as browsers with the “do not track” option selected may still accept cookies. We currently do not honor “do not track” signals. If we do so in the future, we will update this Privacy Policy accordingly.

Site visitors from outside the United States

UHEAA is located, and this Site is hosted, in the United States. If you are using the Site from outside the United States, please be aware that any Personal Information you share with us will be stored and processed in the United States where we locate and operate our servers and databases. By voluntarily sharing your Personal Information with us, you understand that your Personal Information will be stored and processed in the United States.

Your Rights

Individuals in the European Economic Area (“EEA”) have certain data subject rights that may be subject to limitations and restrictions. These rights include the right to: (i) request access to and rectification or erasure of their Personal Information; (ii) obtain restriction of processing or object to processing of their Personal Information; and (iii) ask for a copy of their Personal Information to be provided to them or a third party in a machine readable format. If you wish to exercise one of the above-mentioned rights, please send us your request to the contact details set out below. Individuals in the EEA also have the right to lodge a complaint about the processing of their Personal Information with their local data protection authority.

California Civil Code Section § 1798.83 permits users of our Site that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, you may contact us as described below.

How to Contact UHEAA

If you have any questions, concerns, or if you desire additional information regarding the UHEAA Privacy Policy, please contact us using the form on the UHEAA Contact Us page.

Changes to Our Privacy Policy

We reserve the right to modify our Privacy Policy at any time. We will notify you if we make changes to our Privacy Policy that significantly impact how we collect, use or protect your personal information through indications on this Privacy Policy.

UHEAA Privacy Policy was last updated on July 16, 2018.