Your right under the CCPA and other state privacy laws to opt out of the sale and sharing of your personal information for cross-context behavioral advertising.
Jump to any section. Section 4 explains how to opt out — you can use GPC, our cookie banner, the form, or email.
We do not sell or share your personal information for money. This Do Not Sell or Share My Personal Information notice (the “Notice”) supplements our Online Privacy Policy and applies to the website privatestudentloanaid.com, operated by Private Student Loan Aid (also referred to in this Notice as “PSLA,” “Company,” “we,” “us,” or “our”).
This Notice describes your right to opt out of the “sale” or “sharing” of your personal information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), and analogous rights under the privacy laws of other U.S. states, and how to exercise those rights.
Capitalized terms not defined in this Notice have the meanings given to them in our Privacy Policy.
PSLA does not sell your personal information for monetary consideration. We have never sold personal information, we do not currently sell information, and we do not intend to do so in the future. We do not sell or share the personal information of consumers of any age, including consumers under sixteen (16).
However, certain data-flows that occur on our Sites in connection with online advertising, conversion measurement, audience-building, retargeting, and analytics may fall within the broad statutory definitions of a “sale” (any disclosure of personal information for monetary or other valuable consideration) or “sharing” (any disclosure of personal information for cross-context behavioral advertising) under the CCPA and similar state laws. Out of an abundance of caution and to maximize consumer choice, we treat the following data-flows as potentially subject to your opt-out right and we give you the controls described in Section 4:
The categories of personal information that may be subject to a “sale” or “sharing” for cross-context behavioral advertising under the CCPA are limited to:
We do not sell or share, for cross-context behavioral advertising, the following: Social Security Numbers, full government-issued ID numbers, financial-account numbers, the contents of your communications with us, or other sensitive personal information.
You may exercise your right to opt out of the “sale” or “sharing” of your personal information in any of the following ways. We honor opt-out requests free of charge and we will not discriminate against you for exercising this right.
Our Sites recognize and honor the Global Privacy Control (GPC) signal as a valid opt-out of “sale” and “sharing” for the device and browser from which the signal is sent, for jurisdictions where GPC is recognized as a valid opt-out mechanism (including California, Colorado, Connecticut, and certain other states). To enable GPC, install a GPC-compatible browser or extension (a list of options is available at globalprivacycontrol.org). When your browser sends a GPC signal to our Sites, we will treat it as a request to opt out of sale and sharing for that browser, and we will not require any further action from you for that browser.
Because GPC is a browser-level signal and is not always associated with an identified consumer, GPC opt-out applies on a per-browser/per-device basis. If you use multiple browsers or devices, you should enable GPC on each, or submit a verified consumer request as described in Sections 4.2 through 4.5 to apply the opt-out to your identified personal information across all channels.
Our Sites display a Cookie-Consent banner the first time you visit. You may reopen it at any time by selecting here or in the footer of any page. Through that banner you may reject or limit the use of advertising and analytics Tracking Technologies. Disabling those categories operates as an opt-out of “sale” and “sharing” for the device and browser on which you make the selection. Your preferences are stored locally and on our servers and will persist until you change your selection.
Use the form below to submit a verified consumer request. This form is used only to process your privacy request — it does not enroll you in any service, does not sign you up for marketing, and the information you provide here is used solely to locate your records and respond.
Fields marked * are required. We use this information only to verify your identity and locate your records.
If you prefer not to use the form, you may submit the same request by either of these methods:
To help us locate your records and respond promptly, please include in your request: (a) your first and last name; (b) the email address(es) and telephone number(s) you have used to interact with us; (c) your state of residence; (d) a clear statement of the right you wish to exercise (for example, “I request that PSLA opt me out of the sale and sharing of my personal information,” or “I request that PSLA limit the use of my sensitive personal information”); and (e) any other information that would help us match your request to records we hold.
You may use an authorized agent to submit an opt-out request on your behalf. The agent must provide us with: (a) written authorization signed by the consumer designating the agent and authorizing the request; (b) information sufficient to verify the agent’s identity (for example, government-issued ID); and (c) information sufficient for us to verify the consumer’s identity, unless the agent provides power-of-attorney under California Probate Code § 4000 et seq.. We may require the consumer to verify their identity directly with us or to confirm with us that they have given the agent permission to submit the request.
California residents have the right under CCPA § 1798.121 to direct us to limit our use and disclosure of sensitive personal information (such as Social Security Number, government-issued ID, financial-account information, and the contents of your communications) to those purposes necessary to perform the services you have requested, plus a narrow set of additional purposes permitted by regulation (including fraud prevention, security, and quality assurance).
As explained in Section 11 of our Privacy Policy, we already limit our use and disclosure of sensitive personal information to those statutorily permitted purposes. We do not use sensitive personal information to infer characteristics about you for advertising, and we do not disclose sensitive personal information to third parties for cross-context behavioral advertising. To submit a formal request to limit, use the form in Section 4.3 or the methods in Section 4.4.
California residents have the right to opt out of the sale and sharing of personal information, the right to limit use of sensitive personal information, and the right not to be discriminated against for exercising any of these rights. We honor GPC as an opt-out signal. We will respond to verified requests within forty-five (45) days, with one possible forty-five-day extension upon written notice. Where we deny a request, we will explain the legal basis for the denial.
If you are a resident of Colorado (CPA), Connecticut (CTDPA), or another state that recognizes universal opt-out mechanisms, you may opt out of the sale of personal data and targeted advertising by enabling GPC or another recognized universal opt-out mechanism in your browser. We honor those signals as required by applicable law. You may also submit a verified consumer request using the form in Section 4.3, and you may appeal a denial of your request within sixty (60) days of receiving our response.
If you are a resident of Virginia (VCDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Tennessee (TIPA), Indiana (INCDPA), Delaware (DPDPA), New Hampshire, New Jersey, Minnesota, Maryland (MODPA), Rhode Island, Kentucky, Nebraska (or another U.S. state with a comprehensive consumer-privacy law), you may have the right to opt out of the sale of personal data, of targeted advertising, and of certain profiling that produces legal or similarly significant effects. To exercise these rights, follow the procedures in Section 4. Where the applicable law provides for an appeal of our decision, you may appeal by replying to our response within sixty (60) days. If your appeal is denied, you may contact your state attorney general.
Under Nevada Revised Statutes § 603A.340, Nevada residents may submit a verified request to opt out of any future sale of certain “covered information” (as defined under Nevada law). Although we do not sell covered information for monetary consideration, we honor verified Nevada opt-out requests. Please submit your request using the form in Section 4.3 or the methods in Section 4.4.
Florida residents who qualify under the Florida Digital Bill of Rights may have additional rights regarding sensitive data and the operation of certain large-platform processors. To exercise any Florida-specific rights, follow the procedures in Section 4.
We do not knowingly collect “consumer health data” as defined under the Washington My Health My Data Act. If you believe you have provided such information and wish to limit its use, contact us using the methods in Section 4.
Our services are directed to U.S. residents in the 48 states we serve. We do not market services in the European Union, European Economic Area, United Kingdom, or Switzerland. If you are a resident of one of those regions and choose to interact with our Sites, you may have additional rights under the General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection (FADP), and the EU ePrivacy Directive, including the right to object to processing of your personal data for direct marketing (which encompasses any form of profiling related to such direct marketing). To exercise those rights, contact us using the methods in Section 4. You also have the right to lodge a complaint with your competent supervisory authority.
To protect the security and privacy of your personal information, we may verify your identity before responding to an opt-out, limit-sensitive-PI, or other consumer-rights request. Verification methods may include:
For opt-out requests that do not require sensitive disclosures (such as GPC-based opt-outs or simple email-list suppression), we apply a lower verification standard. For requests that involve disclosure, deletion, or correction of personal information, we apply a higher verification standard. We will not require additional information from you beyond what is necessary to verify the request.
We will acknowledge your verified request within ten (10) business days of receipt, and we will respond substantively within forty-five (45) days, with one possible forty-five-day extension upon written notice if reasonably necessary. For GPC and on-site cookie-banner opt-outs, the opt-out takes effect immediately at the browser level and we have no separate notification obligation.
If we cannot reasonably verify your identity or the authority of your authorized agent, we will respond to inform you of the reason and the additional information we need. Where we deny a request in whole or in part, we will explain the legal basis for the denial and your right to appeal (where applicable).
We will not discriminate against you for exercising any of the rights described in this Notice. We will not deny you services, charge you a different price, provide a different level or quality of service, or suggest that you will receive a different price or quality of service because you exercised an opt-out or other consumer right. We do not currently offer financial incentives in exchange for personal information.
We maintain records of consumer rights requests we receive and of the actions we took in response, in accordance with the recordkeeping requirements of applicable state law (generally a minimum of twenty-four (24) months). These records may be used to demonstrate compliance with applicable consumer-privacy laws and to defend against any related claim. The records are stored consistent with the safeguards described in Section 9 of our Privacy Policy.
In addition to the right to opt out of the sale or sharing of your personal information, you may have additional rights under applicable law, including the right to know what personal information we have collected about you, the right to access a copy of that information, the right to correct inaccurate information, the right to request deletion (subject to legal exceptions), and the right to data portability. For a full description of these rights and how to exercise them, please see Section 13 of our Privacy Policy.
We may update this Notice from time to time. The “Last Updated” date at the top of this page indicates when this Notice was last revised. Material changes will be communicated by posting a prominent notice on the Sites and, where required by law, by direct notice to you.
If you have questions about this Notice or wish to submit a consumer-rights request, please contact us using one of the following methods:
If you have a complaint that we have not resolved to your satisfaction, you may contact your state attorney general or the appropriate supervisory authority for your jurisdiction.
