Complete Student Loans is a product of the Utah Higher Education Assistance Authority.
UHEAA is governed by the Utah State Board of Regents.
Please note that for the purpose of EU data protection laws, UHEAA is a “data controller” (the entity responsible for, and which controls the processing of, your Personal Information collected through the Site).
Personal Information We Collect
As a visitor to this Site, you can engage in many activities without providing any Personal Information. If you choose to provide Personal Information to us, such as by sending a message to an e-mail address on our Site or by filling out a form and submitting it through our Site, we will use that information to respond to your message or to fulfill the stated purpose of the communication.
We collect Personal Information about you for the purpose of conducting our business and pursuing our legitimate interests, including to identify you as our customer, to establish and manage your accounts, to complete your transactions, to provide information to you about our products and services, and to comply with legal and regulatory requirements. The types of nonpublic Personal Information that we may collect includes:
- Your Social Security Number, name, contact information, birth date, assets, and income.
- Your transaction history, account balances and payment history.
- Your credit history and credit scores.
We collect Personal Information about you from sources that include, but are not limited to:
- Information we receive from you or your representative on applications, promissory notes, forms, and through other communications. For example, when you take out a loan, send us an email, or open an online account on our Site.
- Information about your transactions with us or others, including lenders, schools, or the U.S. Department of Education. For example, when you make a payment or finish school.
- Information we receive from consumer credit reporting agencies or public records.
Personal Information We Share
We do not disclose any Personal Information about you, whether you are a current or former customer, to anyone, except as permitted by law. We do not sell or otherwise share your Personal Information with outside marketers.
UHEAA shares your non-public information in the following instances:
- For our everyday business purposes – such as to process your transactions, maintain your account(s), or report to credit bureaus, etc.;
- Consistent with student loan industry practice, we share your personal information with industry aggregators for the benefit of students. Such industry aggregators include the National Student Clearinghouse, and the National Student Loan Data System (NSLDS);
- As required by court order or subpoena, pursuant to state, local, federal or international statute, regulation, or mandate, and in cooperation with law enforcement agencies;
You have the ability to authorize the disclosure of Personal Information to a third-party or to provide products and services that you request.
To protect your Personal Information from unauthorized access and use, we employ appropriate management, operational and technical security measures that comply with federal law and regulations to ensure the security and confidentiality of your Personal Information. These measures include computer safeguards, access controls, data storage procedures, secured facilities, and periodic testing of safeguards. We restrict access to your Personal Information to only our employees who we have determined have a legitimate business need for the information in order to provide our products and services.
Site Management Data
UHEAA protects the privacy of your Personal Information on our Site using the same standards and care used for all UHEAA communications and transactions.
If you visit our Site to read or download information, we collect and store the following information about your visit:
- The name of the Internet domain (for example, “xcompany.com” if you use a private Internet access account, or “yourschool.edu” if you are connecting from a university’s domain)
- The IP address (a number that is automatically assigned to your computer when you are using the Internet) from which you access our Site
- The type of browser and operating system used to access our Site
- The date and time you access our Site
- The Internet address of the Web site from which you linked directly to our Site
- The pages you visit and the information you request
We may also use HTML encoding to record aggregate information about the usage of the Site and whether emails that we send have been accessed or acted upon.
This information is primarily collected for statistical analysis and technical improvement to the Site. Our computer system uses software programs to create summary statistics, which may be used for such purposes as assessing what information is of most and least interest, determining technical design specifications, and identifying system performance or problem areas. In certain circumstances, however, we may take additional steps to identify you based on this information and we may share this information, including your identity, with other government or law enforcement agencies.
Information is obtained by UHEAA via session cookies to enhance the delivery of products, services, and information on our Site. A cookie is a small file that UHEAA transfers to your computer hard drive. Cookies enable us to ensure that only your web browser may exchange information regarding your account with UHEAA’s servers, and to automatically terminate an online session if you forget to log out. UHEAA’s use of session cookies enables you to avoid being asked to provide the same information repeatedly while you navigate our Site. Session cookies are temporary files that are erased when you close all web browsers. You can set your browser to notify you before accepting a cookie, so that you can decide whether to accept or reject the cookie.
For Site security purposes and to ensure that our Site remains available to all users, our system employs software programs to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise causes damage. When you use this Site, you expressly consent to such monitoring and are advised that if such monitoring reveals evidence of possible abuse or criminal activity, such evidence may be provided to appropriate law enforcement officials. Unauthorized attempts to upload or change information on this server are strictly prohibited and may be punishable by law, including the Computer Fraud and Abuse Act of 1986 and the National Information Infrastructure Protection Act of 1996.
Consistent with the Children’s Online Privacy Protection Act (COPPA), UHEAA will not knowingly collect or retain information submitted by children under the age of 13. If we learn that we unknowingly collected personally identifying information from children under 13 years of age, we will immediately take all reasonable measures to delete the information from our computer systems and all other data systems.
How to Contact UHEAA
Retention of Personal Information
External Links and Third Party Websites
“Do Not Track” Disclosure
Site visitors from outside the United States
UHEAA is located, and this Site is hosted, in the United States. If you are using the Site from outside the United States, please be aware that any Personal Information you share with us will be stored and processed in the United States where we locate and operate our servers and databases. By voluntarily sharing your Personal Information with us, you understand that your Personal Information will be stored and processed in the United States.
Individuals in the European Economic Area (“EEA”) have certain data subject rights that may be subject to limitations and restrictions. These rights include the right to: (i) request access to and rectification or erasure of their Personal Information; (ii) obtain restriction of processing or object to processing of their Personal Information; and (iii) ask for a copy of their Personal Information to be provided to them or a third party in a machine readable format. If you wish to exercise one of the above-mentioned rights, please send us your request to the contact details set out below. Individuals in the EEA also have the right to lodge a complaint about the processing of their Personal Information with their local data protection authority.
California Civil Code Section § 1798.83 permits users of our Site that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, you may contact us as described below.
How to Contact UHEAA