Canada Applicant Privacy Notice

Last Updated: October 19, 2026

This Canada Applicant Privacy Notice supplements, and applies in addition to, the Nelnet Applicant Privacy Notice and the Nelnet Privacy Policy. It applies to individuals in Canada who create a candidate account, apply for a position, or are otherwise considered for employment or engagement with Nelnet. To the extent of any inconsistency with the Applicant Privacy Notice or the Privacy Policy, this Notice prevails.

Terms not defined in this Notice have the meaning given to them in the Applicant Privacy Notice.

We collect, use, and disclose your personal information with your consent, except where applicable law permits or requires us to do so without consent. Your consent may be expressed or implied depending on the sensitivity of the information and the purpose for which it is used. By submitting an application, you consent to our collection, use, and disclosure of the personal information in it for the purposes described in the Applicant Privacy Notice.

We obtain your express consent before we conduct a background verification, contact the references you identify, or collect sensitive personal information.

You may withdraw your consent at any time, subject to legal and contractual restrictions, by contacting our Privacy Officer using the information below. If you withdraw your consent, we may no longer be able to consider you for a position, and we may retain your personal information in accordance with our records retention practices and to meet our legal obligations.

We and our service providers may access, store, and otherwise process your personal information outside Canada, including in the United States and other foreign jurisdictions where we, our affiliates, or our service providers operate. For applicants in Quebec, this includes processing outside Quebec.

While your personal information is outside Canada, it is subject to the laws of the jurisdiction in which it is held, and may be accessed by the courts, law enforcement, and other government authorities of that jurisdiction.

You may obtain written information about our policies and practices with respect to service providers outside Canada by contacting our Privacy Officer using the information below.

The following additional information applies to applicants in Quebec.

Person in charge of the protection of personal information. Nelnet’s Privacy Officer is responsible for the protection of personal information and can be reached using the contact information below.

Assessment before communicating information outside Quebec. Before we communicate your personal information outside Quebec, we conduct an assessment of privacy-related factors to confirm that the information will receive adequate protection, and where appropriate we put a written agreement in place with the recipient.

Decisions based exclusively on automated processing. Every application, interview, and assessment at Nelnet is reviewed by a person before a final hiring decision is made, so we do not expect to render decisions about your application based exclusively on automated processing. If we do, we will inform you no later than the time we inform you of the decision, and at your request we will tell you:

• the personal information used to render the decision;
• the reasons and the principal factors and parameters that led to the decision; and
• that you are entitled to have the personal information used to render the decision corrected.

You may also submit observations to a member of our personnel who is in a position to review the decision. Our Notice of Use of Artificial Intelligence and Automated Tools in Hiring describes these tools in more detail.

Portability. You may request that the computerized personal information you provided to us be communicated to you, or to any person or body authorized by law to collect it, in a structured, commonly used technological format.

De-indexing and ceasing dissemination. You may request that we cease disseminating your personal information, or that a hyperlink giving access to it be de-indexed, where the dissemination contravenes the law or a court order.

Biometrics. We do not use biometric characteristics or measurements to identify or verify the identity of applicants. If that changes, we will inform you, obtain your express consent, and disclose the creation of any biometric database to the Commission d’accès à l’information as required by law.

Response times. We respond to requests to access or correct personal information within 30 days of receiving the request.

Where we conduct a criminal record check or credit check, we do so only where it is relevant to the position, permitted by applicable law, and with your express consent. Federal and provincial human rights legislation limits how we may consider criminal record information in hiring, and we consider it only where the record has a genuine connection to the requirements of the position.

Our Notice of Use of Artificial Intelligence and Automated Tools in Hiring describes how we may use artificial intelligence and other automated tools in recruiting, and the rights available in connection with their use. Applicants in Quebec should also see the Quebec section above.

In addition to the rights described in the Applicant Privacy Notice, you may request access to, or a copy of, the personal information we hold about you, and ask us to correct information that is inaccurate, incomplete, or out of date. We respond to these requests within the timeframes required by applicable law. We may request information to verify your identity before acting on your request.

These rights are not absolute. Applicable law may allow or require us to decline to provide some or all of the personal information we hold about you. Where we cannot provide access, we will explain why, subject to any legal or regulatory restrictions.

Complaints. If you are not satisfied with our response, you may make a complaint to the Office of the Privacy Commissioner of Canada at www.priv.gc.ca, or to the regulator in your province, including the Commission d’accès à l’information du Québec, the Office of the Information and Privacy Commissioner of Alberta, or the Office of the Information and Privacy Commissioner for British Columbia.

Please contact our Nelnet Canada Privacy Officer with any questions, comments, or complaints about this Notice, or about how we and our service providers (including service providers outside of Canada) handle your personal information, by email at [email protected].