Privacy Policy of Verifid Limited

1. Information We Collect

We may collect and process the following types of personal information:

• Personal Identification Information: Information that identifies you as an individual, such as your name, date of birth, address, email address, phone number, and other unique identifiers.
• Verification Data: Data used to verify your identity, including government-issued identification documents (such as passports and driver’s licenses), photos, biometric data (such as fingerprints and facial recognition data), and any other documents or data required for identity verification.
• Financial Information: Payment details, bank account numbers, transaction histories, and open banking data (if you choose to link your financial accounts).
• Usage Data: Information about your interactions with our services, including IP addresses, device information, browser type, operating system, access times, and page views.
• Cookies and Tracking Data: We use cookies, beacons, tags, and similar tracking technologies to enhance user experience, understand how our services are being used, and provide personalized content.
• Location Data: Information about your location derived from your IP address or mobile device GPS when you use location-enabled services.

2. How We Use Your Information

We use your personal information for the following purposes:

• Identity Verification: To verify your identity using third-party verification providers (e.g., Jumio, Onfido, Trulioo) and our internal systems to prevent fraud and ensure compliance with legal and regulatory requirements.
• Service Provision: To create and manage your account, process transactions, provide customer support, and deliver our services to you.
• Communication: To send you service-related communications, such as confirmations, updates, support messages, and marketing communications, if you have opted in to receive them.
• Security: To protect your account and our services from unauthorized access, fraud, abuse, or other harmful activities.
• Compliance and Legal Obligations: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• Analytics and Improvements: To analyze usage patterns, improve our services, develop new features, and enhance user experience through research and development.
• Marketing and Advertising: To provide you with information about products, services, and promotions that we believe may be of interest to you, subject to your preferences and consent.

3. Sharing Your Information

We may share your personal information with the following parties:

• Service Providers: Third-party vendors and service providers that perform functions on our behalf, such as identity verification providers, cloud storage providers, payment processors, and customer support services.
• Business Partners: Partners we collaborate with, including financial institutions, insurance companies, estate agents, and other service providers, to offer additional services to you.
• Legal Authorities: Law enforcement agencies, regulators, and other governmental bodies when required by law, court order, or to protect our rights, safety, and property.
• Consent-Based Sharing: With your consent or as permitted by you when you choose to share your information (e.g., through QR code sharing or direct interactions with third parties).
• Affiliates and Subsidiaries: Our affiliated companies or subsidiaries, subject to this privacy policy, to improve our services and provide seamless user experiences.

4. Data Security and Storage

We implement various technical, administrative, and physical measures to protect your personal information from unauthorized access, loss, misuse, or disclosure, including:

• Encryption: All data is encrypted both in transit and at rest using advanced encryption standards (e.g., AES-256), ensuring that your information remains secure.
• Biometric Authentication: Secure login using biometric data, such as fingerprint or facial recognition, through trusted authentication methods.
• Secure Storage: Your data is stored on secure servers protected by AWS Key Management, SSL/TLS encryption from Let’s Encrypt, and other industry-standard security practices.
• Access Controls: Restricted access to personal data, with roles-based permissions ensuring that only authorized personnel have access to sensitive data.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store certain information about your interactions with our services. Cookies help us:

• Improve Functionality: Enhance the performance and functionality of our services.
• Personalize Experience: Provide personalized content and remember your preferences.
• Analyze Usage: Understand how users interact with our services and monitor the performance of our marketing campaigns.

You can control the use of cookies through your browser settings. Please note that disabling cookies may affect the functionality of our services.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: The right to request access to the personal information we hold about you.
• Correction: The right to request that we correct any inaccuracies in your personal information.
• Deletion: The right to request that we delete your personal information, subject to certain exceptions.
• Restriction: The right to request restrictions on how we process your personal information.
• Objection: The right to object to our processing of your
• Objection: The right to object to our processing of your personal information in certain circumstances.
• Portability: The right to request a copy of your personal data in a commonly used and machine-readable format.

To exercise any of these rights, please contact us at [email protected].

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The retention period may vary depending on the type of information and the context in which it was collected:

• Personal Identification Information: Retained for the duration of your account's active status and for a period thereafter as required by law or our internal policies.
• Verification Data: Retained for the time necessary to complete the verification process, after which it is securely encrypted or deleted.
• Financial Information: Retained for as long as necessary to process payments, handle refunds, and comply with accounting and tax regulations.
• Usage Data: Retained for analysis and service improvement purposes, typically for no longer than two years.
• Cookies and Tracking Data: Retained as per the cookie expiration period or until you delete them from your browser settings.

8. International Data Transfers

We may transfer your personal information to countries outside of your country of residence, including countries that may not provide the same level of data protection. In such cases, we will ensure that appropriate safeguards are in place, such as the use of standard contractual clauses approved by relevant authorities, to protect your personal information.

9. Children’s Privacy

Our services are not intended for individuals under the age of 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information promptly. If you believe we have collected information from a child under 13, please contact us at [email protected].

10. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or other reasons. We will notify you of any significant changes through our website or other communication channels. Please review this policy periodically for any updates.

11. Contact Us

If you have any questions, concerns, or complaints about this privacy policy or our data practices, please contact us at:

12. Codes and Regulatory Compliance

We comply with various data protection laws and regulations, including:

• GDPR: General Data Protection Regulation (applies to data subjects in the EU).
• CCPA: California Consumer Privacy Act (applies to California residents).
• PECR: Privacy and Electronic Communications Regulations (applies to electronic communications in the UK).
• DPA: Data Protection Act 2018 (applies to data subjects in the UK).
• AES-256: Advanced Encryption Standard with a 256-bit key (industry-standard encryption for data security).
• SSL/TLS: Secure Sockets Layer/Transport Layer Security (protocols for secure communication over a computer network).