Skip to Content

Privacy Policy

Educational Credit Management Corporation, a nonprofit corporation, values the privacy of our users and the importance of the information they entrust to us. This Online Privacy Policy is part of our Terms of Use and is designed to inform you of our practices and policies as they relate to the collection, use, and disclosure of the information we may gather from you when you visit our website (“Policy”). This Policy is intended to help you understand what personal data we collect, when we share it, and how we store and protect it, as well as how to manage communications from us and exercise other rights you might have to your personal data. By continuing to use this Website, you are agreeing to the terms of this Policy. If you do not agree with any terms or practices described in this Policy or our Terms of Use, please exit from this website.

Introduction
This website www.ecmc.org (“Website”) is owned by Educational Credit Management Corporation (“ECMC”). ECMC is owned by ECMC Group, Inc. (for more information about ECMC Group, please visit www.ecmcgroup.org). ECMC is committed to protecting the privacy and security of your Personal Information (as further defined below). This Policy covers the Website—www.ecmc.org—along with the online forms on this Website used to collect Personal Information. It does not cover third-party sites that are linked to or from the Website. This Policy does not apply to other entities that we do not own or control, nor to persons that are not our employees or otherwise within our control. This Policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

Information We Collect

Data you provide yourself
We collect your Personal Information when you voluntarily provide it to us when you seek access to information, specific resources, or programs. For example, you may choose to give us your name, phone number, address, partial SSN, your account number, email address, other identifying information (“Personal Information”) and other information when you choose to fill out our web forms requesting or accessing information, or when you sign up for an online account. You may also choose to fill out the web form to Request Information, and when you do so, this information will be directed to appropriate staff to respond to your request and may be stored by us. You may always choose whether or not to provide us with this Personal Information for these purposes. However, if you choose not to, it could impede or prevent your ability to access certain parts of our Website.

We may ask for your consent to contact you by phone, text or other means and we will record and save that information if you choose to consent. We may also use this information to help us update our website and to better respond to similar requests. We may share that information with certain third-party service providers we contract with to help us organize information, improve our ability to respond efficiently to your requests, and other business purposes. These third-party vendors are not permitted to share the information we provide to them with anyone other than us.

We do not share your Personal Information with any third party (including our service providers) for marketing purposes. If you believe the Personal Information you provided to us is being misused by a third party for purposes of marketing a product or service, please contact us right away so that we can attempt to rectify the situation.

Cookies and Other Automatic Data Collection Tools
When you interact with our Website, certain information about your use of the site is automatically collected. The tracking technologies employed when you use our Website may be first-party or third-party. Our primary goal in collecting the information described within is to provide you, the user, with a better experience on our Website. By knowing a little about each user, we are able to deliver better service and more relevant content to our Website users and visitors.

Like many websites, we use cookies for a variety of purposes, including improving our Website and serving our Website users better. A “cookie” is a small file that is sent to your browser from a web server and stored on your computer’s hard drive to remember your preferences. We may use cookies to track general information about our users (e.g., pages viewed, time spent on our Website, and the websites visited just before and just after our Website) for statistical and market research purposes. We also use cookies when you fill out a webform in order to help prevent spam, fraud and abuse. This information is collected on an aggregated and anonymous basis.

You have choices with respect to cookies. By activating the appropriate settings on your browser preferences, you may set your browser to reject all cookies. However, if your browser is set to reject cookies or you manually delete cookies, you may have some trouble accessing and using some of the pages and features that are currently on our Website, or that we may put on our sites and tools in the future. Note that browser-management tools for cookies are outside of our control and we cannot guarantee their effectiveness.

For more information on the specific cookies we use, please visit Cookie List for more information.

Umbraco is our third-party website hosting servicer, and as part of its hosting services it automatically logs certain information in its server log, such as error logging, along with a few other things. Umbraco may share this aggregated information with us and with other certain trusted third-parties who assist us in operating our website or conducting our business, and who agree to keep the information confidential. This information helps us to track users’ movements around our site, to understand trends, and to test updates on various types of browsers and devices. We may also use cookies to collect information that tracks your use of our Website and enables us to customize our services. We may use this data in the aggregate to better understand the needs and interests of visitors to our Website and provide more relevant content.

We also use third-party analytics vendors to collect information about the use of our site, including:

  • Google Analytics: Google Analytics is a third-party analytics provider, which collects information about the use of our site. Google Analytics records things like the time of visit, pages visited, type of device accessing the site, referring site details, the length of your visit, the type of web browser and operating system, document downloads, network location and IP address, clicks on videos and external websites, flash version, screen resolution, and screen color processing ability, along with a few other things. Google Analytics, however, does not identify individual users. Google Analytics use cookies on your web browser to identify you as a unique user the next time you visit this site. You can learn more about how google uses cookies here. We use the reports provided by Google Analytics to help us understand website traffic and usage. You may read more about what methods and technologies are used by Google Analytics here. The information generated by Google Analytics is transmitted and stored by Google and will be subject to Google’s privacy policy found here, which you may read more about at https://policies.google.com/technologies/partner-sites. You may also opt out of Google Analytics tracking software by installing and using the browser plugin found here.
  • Matamo: Matamo is a web analytics service that tracks and generates information about the use of our website, including things like your time of visit, pages visited, type of device accessing the site, referring site details, the length of your visit, the type of web browser and operating system, document downloads, network location and IP address, clicks on videos and external websites, screen resolution, and screen color processing ability, along with a few other things. Matamo uses this information to help evaluate your use of our website and internet usage to help us. The information generated by Matamo is governed by its privacy policy, which can be found here. You may opt out of Matamo Analytics there and find more information on opting out here.
  • Google Tag Manager: We use Google Tag Manager, a tag management system offered by Google, Inc. to manage tags used for tracking and analytics on websites (including, for example, Google Analytics). Tags are small code elements that, among other things, are used to measure traffic and visitor behavior and to test and optimize websites. Google Tag Manager (“GTM”) only implements tags and does not itself process user’s personal data. The GTM triggers other tags, which, in turn, may collect data under certain circumstances. You may read more about GTM here. GTM’s privacy practices can be found here.

We also use reCAPTCHA on our website. ReCAPTCHA is a tool ECMC uses to protect its website from spam software and malicious bots. ReCAPTCHA tracks and collects certain personal information from users of our website and compares that information to what it knows about non-human activity, using an algorithm to decide whether you are a real person or not. Examples of things reCAPTCHA collects are your IP address, your browsing history, operating system information, cookies, mouse and keyboard behavior, data and language settings, JavaScript objects and screen resolution, but this list is not exhaustive. This information is generally transferred to Google to determine whether you are a real person. You can read about what data is collected by Google and what this data is used for at https://policies.google.com/privacy. You may also find additional information related to reCAPTCHA and Google’s privacy policy, by hovering over the reCAPTCHA badge which will provide links to more information.

We also use Google Tag Manager, a tag management system offered by Google, Inc. to manage tags used for tracking and analytics on websites (including, for example, Google Analytics). Tags are small code elements that, among other things, are used to measure traffic and visitor behavior and to test and optimize websites. Google Tag Manager (“GTM”) only implements tags and does not itself process user’s personal data. The GTM triggers other tags, which, in turn, may collect data under certain circumstances. You may read more about GTM here. GTM’s privacy practices can be found here.

Our information collection practices on our Website will continue to operate as described in this Privacy Policy regardless of any “Do Not Track” signals that may be sent by certain browsers. Because these features are not yet uniform, we are not currently set up to respond to any “Do Not Track” signals. For more information about “Do Not Track” signals, please visit https://allaboutdnt.com/.

How We Use Your Information
We strive to tell you about the specific purpose for which your Personal Information is collected at the time of collection. Generally, we use the Personal Information you provide to provide you with information or services that you request or that we believe will be beneficial to you. We may also use your Personal Information to:

  • provide you information or services that you request from us;
  • authenticate your identity and authorize access;
  • for our student loan borrowers, we may use and share information as permitted or required by your loan documents and governing law and regulations;
  • customize the content you see on our Website;
  • facilitate your use of our Website or manage your preferences;
  • analyze the use of our Website to improve our Website and services;
  • identify and protect against fraudulent transactions and other misuses of our Website;
  • to fulfill any other purpose for which you provide it; and
  • to enforce our Terms of Use.

Sharing Practices
We will not knowingly sell, share, or trade Personal Information about our Website visitors to any third party for marketing purposes without your consent. We may share your information with our employees, agents, and affiliates with a business need to know. We may also, as described above, share your Personal Information with our third-party service providers to process or use it for us based on our instructions and for no other purposes; and with third-party partners that collaborate with us to host events. We do not allow third-party advertising companies or ad networks to display advertisements on our Website.

In addition to what we have stated in other sections of this Policy, we may share your information with our employees and agents; third-party service providers, including credit-card payment processors performing services on our behalf; our affiliated entities in order to provide services to you, and as required by law.

Social Media Features and Links
Our Website may contain links to other websites, including some third-party social media sites and/or websites that provide you with additional venues in which you can learn about or discuss the activities of ECMC. Please note, unless otherwise indicated, that we have no affiliation with any of these other websites that you may visit. These third-party websites are governed by their own terms of use and privacy policies, which you should read and become familiar with. We are not responsible for the security or privacy of any information collected by other websites or other services or any other content or information on these other websites. You should exercise caution and read the third-party privacy policies to understand how that third party collects, processes, shares and/or stores your information.

Disclosures Required by Law
We may disclose your information to third parties when required by law, including when we have a good faith belief that such action is necessary to (i) protect the legal rights and security of our company, affiliates, or business partners; (ii) respond to an audit or to investigate a complaint; or (iii) comply with applicable law, court order, subpoena, request for cooperation by a governmental entity, or other legal process or investigation.

Your Choices
You may choose to:

  • Not provide Personal Information, although that may result in your inability to obtain or use certain services or to use certain features of our Website; and
  • Delete or decline cookies by changing your browser settings, although if you do so, some of the features of our Website services may not function properly.
  • You may have other choices and rights described below in Your Rights and Choices.

Storage of Personal Information
We take commercially reasonable precautions to protect the Personal Information we collect from our Website users and visitors. To prevent unauthorized access, maintain data accuracy, and verify the appropriate use of information, we have put in place physical, administrative, and technical safeguards to protect your Personal Information from unauthorized access, alteration, use or disclosure. We may also allow our service providers to store and access your Personal Information as described in this notice, subject to contractual provisions with us. While we do our best to protect your information, no security measures are perfect or impenetrable and thus the transmission of information sent over the Internet, whether by email or by using our online system and Website, is not completely secure against interception. As a result, although we utilize such measures, we cannot guarantee you against interception, loss, misuse, or alteration of your information and you provide such Personal Information to us at your own risk. You should take care how you handle and disclose your Personal Information.

Retention Period
We will retain information regarding you, including any Personal Information, until it is no longer needed to fulfill the purpose(s) for which it was collected, or as otherwise required or permitted by law. After such time, we will either delete or deidentify your Personal Information or, if this is not possible, we will securely store your Personal Information until deletion is possible. We may dispose of any Personal Information in our discretion without notice, subject to applicable law.

Links to Third-Party Websites
This Website may contain links to other websites, including third-party social media sites and/or websites that provide you with additional ways to discuss the activities of ECMC or ECMC Group. Although these websites may have privacy policies, all of these websites and their privacy policies are independent of our Website and this Policy. Unless otherwise indicated, we have no control or affiliation with any of these linked websites of social media. These are governed by their own terms of use and privacy statement which you should read carefully before proceeding. We are not responsible for the security or privacy of any information collected by other websites, social media sites, or any other content or information found on these other websites. You should exercise caution and read the third-party privacy policies carefully to understand how these third parties collect, process, share, and store your information.

Your Rights and Choices

Rights
Where applicable under local law, in addition to your choices listed above, you may have certain rights regarding your Personal Information. Depending on which jurisdiction you live in and the type of information processed or collected online, you may have some or all of the following rights: to request information about the processing of your information, to request a copy of your information, to object to the use of your information, to request the deletion or restriction of your information, to access your information, to request to correct or update your information, to request to opt out of “sales” or “sharing” of personal information (as these terms are defined under applicable law) in certain circumstances. The exact scope of these rights vary by state, however. You can exercise these choices by contacting us to request assistance.

Limitations
Your request and choices above, however, may be limited, depending on where you live, the type of information collected, and applicable law. There are several exceptions where we may not have an obligation to fulfill your request. For example, if you ask us to delete information which we are permitted (or, in some cases, required) by law to keep, or have compelling legitimate interests to keep your information, your request may not be fulfilled. There may be other situations in which we will be unable to complete your request, depending on your particular circumstances, jurisdiction, and request.

Appeals
Where applicable under local law, you may also contact us to appeal any decision we make relating to your request to exercise your rights. Your email should be labeled "Notice of Appeal" and fully describe your concerns or disagreement and include any documentation necessary to validate the claims you are making. We will reasonably investigate the appeal based on the information and documentation you have provided. Following the investigation, we will reach a determination of your appeal, which may include modifying or upholding the original decision in accordance with applicable law.

California Privacy
If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure, if any, of your Personal Information to a third party for the third party’s direct marketing purposes. It is our practice, however, to not knowingly share or sell any Personal Information to third parties for marketing purposes. If you have further questions or think a third party is misusing your information collected on this Website, please contact us at the contact information at the end of this policy.

International Users
If you are visiting this site from outside of the United States, your connection may be made through and to servers located in the United States. Your entries and information placed through our Website may be fully processed in and from the United States, and all information you provide may be processed and maintained in our web servers and internal systems located within the United States. The data protection and other laws of the United States and other countries might not be as comprehensive as those in your country, but please be assured that we take steps to ensure that your privacy is protected. By using our services, however, you understand that your information may be transferred to our facilities and those third parties with whom we share it as described in this Policy. By using this site, you authorize the export of your personal information to the United States and its storage and use as specified above when you provide such information to us. This Policy and our legal obligations are subject to the laws of the United States, regardless of the location of any user.

Protection of Children's Privacy
We appreciate the importance of protecting children’s privacy, particularly in an online environment. Our Website is not intended for, nor designed to attract children under the age of 13 (or other equivalent minimum age depending on your particular jurisdiction). It is our policy to never knowingly collect or maintain personal information about any person under the age of 13. If you are under 13, please do not use or provide any information on this Website or provide any personal information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will promptly delete that information. If you believe we might have information from or about a child under 13, please contact us immediately so that we may promptly address the issue. Minors between the ages of 13 and 18 should only use the Website in conjunction with your parent, legal guardian, or other responsible adult.

Changes to Our Privacy Policy
From time to time, we may update our Privacy Policy to reflect changes in our practices and services. If we make material changes in the way we collect, use or share personal information, we will notify you by prominently posting notice of the changes on our Website. The date the policy was last revised is identified at bottom of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this Policy to check for any changes.

Contact Us
If you wish to contact us about:

  • this Website or this Policy;
  • provide feedback or comments;
  • access or correct the Personal Information you believe we have; or
  • any other reason concerning our information practices,

please contact us at one of the methods below:

ECMC
Attn: Legal/Privacy policy inquiry
111 Washington Avenue South
Suite 1400
Minneapolis, MN 55401
privacy@ecmc.org
1-800-276-0366, opt. 3

Last updated: March 30, 2026

Contact Us

Prefer Support by Phone or Email?

Start