California Consumer Privacy Notice

Last Updated: June 4, 2025 

This California Consumer Privacy Notice supplements the Privacy Policy and applies solely to personal information collected about certain U.S. consumers, such as visitors to the publicly-accessible areas of our website, business partners and job applicants. This California Consumer Privacy Notice does not apply to personal information collected about our personnel. 

This California Consumer Privacy Notice uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”). 

This California Consumer Privacy Notice does not apply to information we collect, process or disclose pursuant to laws such as the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act and their implementing regulations or other California financial privacy laws, such as the California Financial Information Privacy Act. Please see the California Consumer Privacy Rights section for information about how you can opt-out of the sale or sharing of your personal information. 

Non-Accountholders: If you do not have an account with us, and if we do not otherwise have contact information on file about you, then there is no reasonable method by which we can verify your identity to the level of certainty required by the CCPA. The reason for this is that we do not link information we may collect about non-accountholders (e.g., IP addresses, device identifiers or other information collected through automated means) to named actual persons. Accordingly, if you do not have an account with us and if we do not otherwise have contact information on file about you, and you request access to, correction of, or deletion of your personal information, we will not be able to process your request at this time. 

Notice of Collection and Use of Personal Information 

We may collect (and may have collected during the 12-month period prior to the Last Updated date of this California Consumer Privacy Notice) the following categories of personal information about you: 

• Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers, and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, IP address, email address, account name, Social Security number, driver’s license number, passport number, and other similar identifiers 

• Additional Data Subject to Cal. Civ. Code § 1798.80: signature, or description, state identification card number, bank account number, credit card number, debit card number, or other financial information, education information, medical information and health insurance information 

• Protected Classifications: characteristics of protected classifications under California or federal law, such as race, color, national origin, religion, age, sex, gender, marital status, medical condition, disability, citizenship status, and military and veteran status 

• Online Activity: Internet and other electronic network activity information, including, but not limited to, information regarding your interaction with websites, applications or advertisements 

• Sensory Information: audio, electronic, visual, and similar information 

• Employment Information: professional or employment-related information such as résumé information, occupation details, education details, certifications and professional associations, historical compensation details, previous employment details, emergency contact information, and pre-employment screening and background check information, including criminal records information 

• Education Information: education information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99) 

• Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. 

We may use (and may have used during the 12-month period prior to the Last Updated date of this California Consumer Privacy Notice) your personal information for the purposes described in the Privacy Policy and for the following business purposes: 

• Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytics services, providing storage, or providing similar services; 

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance; 

• Helping to ensure security and integrity; 

• Undertaking activities to verify or maintain the quality or safety of our services or devices and to improve, upgrade, or enhance them; 

• Debugging to identify and repair errors; 

• Undertaking internal research for technological development and demonstration; 

• Managing career opportunities with us; and 

• Managing our relationships with current or prospective partners, corporate customers and vendors and other business partner personnel. 

• Providing advertising and marketing services; 

• Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with us 

We do not collect or process sensitive personal information for purposes of inferring characteristics about consumers. 

To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law. 

Retention of Personal Information 

We will retain your personal information as described in the Retention of Personal Information section of our Privacy Policy. 

Sources of Personal Information 

During the 12-month period prior to the Last Updated date of this California Consumer Privacy Notice we may have obtained personal information about you from the following categories of sources: 

• Directly from you, such as when you contact us 

• Your devices, such as when you use our online services 

• Our affiliates 

• Vendors who provide services on our behalf 

• Our business partners 

• Data analytics providers 

• Recruiting and talent agencies 

• Job references, such as your employers 

• Data brokers, such as credit bureaus, credit reporting service providers, background check services and other data brokers and resellers that provide personal information 

• Online advertising services 

Sale or Sharing of Personal Information 

We may disclose your personal information by allowing certain third parties (such as online advertising services) to collect personal information via automated technologies on our websites and apps for cross-context behavioral advertising purposes. Under California law, these kinds of disclosures may be considered a “sale” when the personal information is exchanged for non-monetary consideration, or “sharing” when the personal information is disclosed for cross-context behavioral advertising purposes. You have the right to opt out of these types of disclosures of your information, as detailed below in the “California Consumer Privacy Rights” section.  We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Last Updated date of this California Consumer Privacy Notice) the following categories of personal information about you to online advertising services: 

• Identifiers 

• Commercial Information 

• Online Activity 

• Inferences 

We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age. 

Disclosure of Personal Information 

During the 12-month period prior to the Last Updated date of this California Consumer Privacy Notice, we may have disclosed the following categories of personal information about you for a business purpose to the following categories of third parties: 

Category of Personal Information	Categories of Third Parties
Identifiers	Our affiliates  Vendors who provide services on our behalf  Our business partners  Data brokers, such as credit bureaus, credit reporting service providers, background check services  Data analytics providers  Professional Services Organizations such as auditors and law firms  Online advertising services
Additional Data Subject to Cal. Civ. Code § 1798.80	Our affiliates  Vendors who provide services on our behalf  Data brokers, such as credit bureaus, credit reporting service providers, background check services  Professional Services Organizations such as auditors and law firms
Online Activity	Our affiliates  Vendors who provide services on our behalf  Our business partners  Online advertising services  Professional Services Organizations such as auditors and law firms
Protected Classifications	Our affiliates  Vendors who provide services on our behalf  Professional Services Organizations such as auditors and law firms  Data brokers, such as background check services
Employment Information	Our affiliates  Vendors who provide services on our behalf  Recruiting and talent agencies  Job references, such as your employers  Data brokers, such as credit bureaus, credit reporting service providers, background check services  Professional Services Organizations such as auditors and law firms
Education Information	Our affiliates  Vendors who provide services on our behalf  Our business partners  Professional Services Organizations such as auditors and law firms
Inferences	Our affiliates  Vendors who provide services on our behalf  Professional Services Organizations such as auditors and law firms
Sensory Information	Our affiliates  Vendors who provide services on our behalf  Professional Services Organizations such as auditors and law firms

In addition to the categories of third parties identified above, during the 12-month period prior to the Last Updated date of this California Consumer Privacy Notice, we may have disclosed personal information about you to government entities and third parties in connection with actual or proposed corporate transactions, such as mergers, acquisitions or divestitures. 

California Consumer Privacy Rights 

You have certain choices regarding your personal information, as described below. 

• Access: You have the right to request, twice in a 12-month period, that we disclose to you the categories of personal information collected about you, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information collected about you. 

• Correction: You have the right to request that we correct the personal information we maintain about you, if that information is inaccurate. 

• Deletion: You have the right to request that we delete certain personal information we have collected from you. 

• Opt-Out of Sale or Sharing: You have the right to opt-out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes. 

How to Submit a Request 

Access, Correction, Deletion: To submit an access, correction, or deletion request, or to submit a request as an authorized agent on behalf of someone else, please call 866-441-4637 or email AskPrivacy@nelnet.net. 

Opt-out of Sale or Sharing: You can opt-out of the sale or sharing of your personal information associated with a browser or device by broadcasting the Global Privacy Control (GPC) signal. Certain browsers and browser extensions support the GPC which sends a signal to the websites you visit indicating your choice to opt out from certain types of data processing, including the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising purposes. If you want to use GPC, you can download and enable it via a participating browser or browser extension. More information about downloading GPC and supported browser can be found at https://globalprivacycontrol.org/. When we detect a GPC signal, we will automatically process the signal in a frictionless manner so as to respect your choices indicated by the GPC setting. Please note that your choices will apply only to the browser or device you are using when broadcasting the GPC signal to us. If you would like to opt out of the sale or sharing of your personal information associated with a different browser or device, please use the GPC signal on that browser or device to broadcast an opt-out request.  

Browse to the “Your Privacy Choices” link at the bottom of our relevant Services to choose your preferences. 

For questions or concerns about our privacy policies and practices, please contact us at AskPrivacy@nelnet.net. 

Verifying Requests: To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your deletion or correction request. If you have an account with us, we may verify your identity by requiring you to sign in to your account. If you do not have an account with us and you request access to, correction of or deletion of your personal information, we may require you to verify your email address or phone number in our records and/or provide any of the following information: 

• Full name and surname 

• State of residence 

• Physical address 

• Telephone number 

• Nature of your relationship with our company (website visitor/job) Applicant/Employee/Former Employee/Contractor/Business Partner Personnel) 

• Email address 

In addition, if you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request. 

Additional Information: If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.