A private student loan company called my ex-boyfriend's father. He was never associated with my loan in any capacity and I don't know how this company (Sally Mae) got this contact information. Is this allowed? What can I do?