Nelnet Bank Privacy Center

Effective Date: November 1, 2020

Effective Date: November 1, 2020

Online Privacy Policy

Continue reading below to learn about our privacy practices that apply to users of our website and app in the U.S..

Nelnet Bank operates the Nelnet Bank mobile app(s) and This Privacy Policy informs you of our policies and procedures regarding the collection, use, and disclosure of personal information we receive from users of the website and mobile app(s). This policy applies to visitors of the website from the U.S. This policy does not apply to information provided to any third-party service provider(s) related to or whose services are incorporated into the website; information you provide to third parties is controlled by their respective privacy policies.

We are committed to providing a useful and enjoyable online experience. This policy explains our collection and use practices regarding consumer information, including how and what we share with our related companies and with unrelated entities. Protecting your privacy is important to Nelnet Bank and our employees. We want you to understand what information we collect and how we use it.

This policy is subject to change from time to time, so be sure to check back occasionally to ensure you’ve read the most current version. It is effective as of the date listed above and applies to our services that link to this policy. Even if you read and/or agreed to a prior privacy statement, you need to review this updated version. We reserve the right at any time, and in our sole discretion, to change or modify this Online Privacy Policy. If any such changes or modifications are made, we will update the “Effective Date” appearing at the top of this web page. These changes or modifications are effective immediately upon posting to the website, and supersede any prior versions of this policy.

This policy governs the privacy policies of this website or the Nelnet Bank mobile app(s) only. Other divisions, affiliates, and subsidiaries of Nelnet Bank list their privacy practices on their respective websites.

We do not sell personal information to third parties. All personal information collected is used by us or our affiliates to perform services, inform you of our products and services, comply with laws or carry out internal functions. If you are a California Resident and you would like to inquire about what type of personal information has been collected about you please email

If you become an inactive user, we will continue to adhere to the privacy policies and practices described in this policy.

  • Our Security Procedures

    We implement reasonable and appropriate physical, procedural, and electronic safeguards to protect your information.

    To access information and send email via the website, you will need a browser that supports the use of Secure Sockets Layer. This encryption technology helps ensure the authenticity of your online sessions and secures data transmitted over the public Internet.

    Nelnet Bank takes careful steps to safeguard customer information. We restrict access to your personal and account information to employees who need to know the information to provide services or product offerings to you, and we regularly train our employees on privacy, information security, and their obligation to protect your information. We maintain reasonable and appropriate physical, electronic, and procedural safeguards to guard your Nonpublic Personal Information (NPI) and Personally Identifiable Information (PII), and we regularly test those safeguards to maintain the appropriate levels of protection.

    You can help safeguard your NPI and PII by taking a few simple precautions. Protect your account numbers, passwords, and customer access numbers. Never disclose confidential information to unknown callers. You should always use a secure browser and current virus detection software, and never open email from unknown sources.

  • Children’s Privacy

    The website is not directed to children under age 13. We do not knowingly collect, maintain, or use PII from children under age 13. If a parent or guardian becomes aware that his or her child has provided us PII without their consent, he or she should contact us using the information in the How to Contact Us section. If we confirm we collected such information, we will take all reasonable measures to delete that information from our system as soon as possible.

  • How to Contact Us

    If you have any questions about this policy, please contact us by email or regular mail at the following address:

    Nelnet Bank
    P.O. Box 82522
    Lincoln, NE 68501-2522
    Phone: 888.446.4190

For Borrowers

Nelnet Bank Borrowers

This Privacy Notice for Nelnet Bank loans details our privacy practices with our affiliates and other third parties, and will help you understand how information is shared and the choices you have regarding your information. Please note that while Nelnet Bank affiliates offer services related to education, including tuition management, payment administration and processing, financial needs assessment, online application and enrollment, and related software regarding student loans, this notice affects only your Nelnet Bank loans. If you have loans or products with other Nelnet affiliates, those affiliates will provide you with their own privacy notice. You should contact those affiliates if you wish to opt out of their sharing practices.

For your Nelnet Bank loans, please complete our online Privacy Options Form to opt out of sharing certain information with our affiliates or nonaffiliated third parties.


State Privacy Information

  • The California Consumer Protection Act (CCPA) provides California Residents with specific rights regarding their personal information. This section describes how we treat your personal information in light of the CCPA. As stated above we do not disclose nonpublic personal information about you to nonaffiliated third parties. We do not sell your personal information, and only use your personal information for the following reasons:

    • Provide consumer services.
    • Comply with the law.
    • Carry out internal functions.

    We do not sell personal information to third parties. All personal information collected is used by us or our affiliates to perform services, comply with laws or carry out internal functions. We will automatically manage accounts with California addresses as if the account holder has directed us not to share with non-affiliates unless it is for these purposes. If you are a California Resident and you would like to inquire about what type of personal information has been collected about you please email

  • We will not disclose nonpublic personal financial information about you other than as permitted by law unless you authorize us to make that disclosure. Your authorization must be in writing or, if you agree, in electronic form. If you wish to authorize us to disclose your nonpublic personal financial information to nonaffiliated third parties, you may notify us at the address found under the “How to Contact Us” section.

Privacy Information for European Union Residents

Effective Date: November 1, 2020

Striving to provide superior customer service, Nelnet Bank places great emphasis on its customers and their privacy rights. In doing so, Nelnet Bank will comply with European Union Privacy Directives, most notably the EU General Data Protection Regulation. By providing our services, we may from time to time collect, store, use, or process your personal data for legitimate business purposes, such as improving our products and services. Nelnet Bank’s processing of your data is necessary for compliance with its contractual and legal obligations. Personal data means any identifier information, such as your name, social security number, identification number, location data, or other online identifiers and factors.

Although your data is generally stored within the United States, an international data transfer may occur if third-party, cloud-based storage companies that Nelnet Bank employs use servers located outside the United States. Nelnet Bank uses appropriate technical and organizational security measures including encryption of personal data and follows various industry standards and best practices to protect your personal data. Additionally, Nelnet Bank requires its vendors and processors to abide by the European Union General Data Protection Regulation and to apply adequate security and technical safeguards. We will not transfer your data to or store your data in countries that have not been awarded an adequacy decision by the European Commission.

For general processing purposes, Nelnet Bank will store your personal data for a period of seven years after your account(s) with Nelnet Bank are closed or paid in full. However, Nelnet Bank may retain such information for longer periods where legally required to do so based on its contract or other legal obligations.

You have the right to withdraw consent for processing at any time. Further, you have the right to request access to and rectification, restriction, or erasure of your personal data. Nelnet Bank will afford you these rights, but it may not be able to do so where the processing is based on its contractual obligations, based on other legitimate interests, or carried out in the public interest. Along with these rights, if you believe that your data has been mishandled in violation of a privacy directive, you have the right to lodge a complaint with the relevant supervisory authority. If you have questions or concerns about our data processing practices, please address such inquiries to our Data Protection Officer.

Contact Details for Privacy and Data-related Inquiries

Data Controller / Data Processor
Nelnet Bank, Inc.
Lauren Chapman
Chief Compliance Officer

Nelnet Bank Privacy Notice

Read our privacy notice, which describes the practices of Nelnet Bank, regarding the sharing of customer information with affiliates and nonaffiliated third-parties.

Review the Nelnet Bank Privacy Notice