Verifid Privacy Policy

Last Updated: 31/10/2025

Verifid Limited (“Verifid”, “we”, “our”, “us”) is committed to protecting your personal data and ensuring transparency in how we collect, use, store, and share it. This Privacy Policy outlines the data practices across our mobile applications, website, APIs, and related services (together, the “Platform”).

1. Who We Are

Verifid is a UK-based digital identity platform that enables users to build a reusable, verified identity profile. We provide secure onboarding, referencing, rent reporting, credit enhancement, and insurance brokerage services, helping users take control of their identity and access key financial products more easily.

We are registered with the UK’s Information Commissioner’s Office (ICO) and operate in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

2. The Data We Collect

We collect both personally identifiable information (“Personal Data”) and non-personally identifiable data, depending on how you interact with our services.

2.1 Identity Data

• Full legal name

• Date of birth

• Gender and nationality

• National Insurance number (where applicable)

• Government-issued identity document details (passport, driving licence, visa)

2.2 Contact Data

• Email address

• Mobile phone number

• Current and previous residential addresses

2.3 Verification Data

• ID document images

• A still image of your face (captured via device camera)

• Liveness verification information

• Proof of address (e.g., utility bills, bank statements)

2.4 Financial and Tenancy Data

• Employment and income details

• Rent payment history

• Bank account information (with user consent)

• Tenancy agreements and letting agent references

2.5 Device and Technical Data

• IP address

• Device model, OS, browser, and settings

• Login timestamps and activity logs

• Location data (if permitted)

• Crash reports and diagnostics

2.6 Usage Data

• Features used within the app

• Interaction history (e.g., applications submitted, verification stages)

• Referral sources and campaign identifiers

3. How We Use Your Data

We only process your data where we have a valid legal basis. We use your data to:

• Verify your identity and validate ID documents

• Compare face photos to submitted ID for anti-fraud checks

• Enable referencing and suitability checks for rental applications

• Facilitate rent reporting and submit updates to credit reference agencies

• Generate insurance quotes and support policy issuance

• Recommend appropriate financial products (e.g., credit cards, loans)

• Provide you with downloadable identity credentials

• Improve our services, security, and fraud detection systems

• Comply with our legal, regulatory, and contractual obligations

4. Face Image Data (Facial Verification)

We collect a still image of your face during onboarding to ensure that the individual submitting the ID document is the same person.

4.1 Purposes of Use

• Manual or automated face match verification

• Liveness checks to confirm a real person is present

• Fraud prevention (e.g., reuse detection, spoofing mitigation)

We do not:

• Store or use Apple Face ID data

• Collect or store biometric templates (e.g., facial geometry)

• Analyse facial expressions or emotions

4.2 Data Handling and Security

• Face images are encrypted at rest and in transit using AES-256+ standards

• Only authorised personnel have access to the data

• Stored securely on UK-based servers in ISO27001-certified data centres

4.3 Retention

• Face images are retained for no longer than 90 days, or until verification is complete — whichever comes first

• Images are permanently deleted after this period unless further retention is required by law

• You may request early deletion of your face image at any time via in-app settings or by emailing [email protected]

4.4 Third-Party Sharing

• Verifid does not share your facial image data with any third parties

• All face matching and fraud checks are performed in-house

4.5 Transparency

This face image processing is clearly disclosed during the onboarding flow, and your explicit consent is sought where required.

5. Legal Bases for Processing

We rely on one or more of the following legal bases:

• Consent – for optional services (e.g., rent reporting, financial product recommendations)

• Contractual necessity – to deliver our core services, including referencing and ID verification

• Legitimate interest – for fraud prevention, platform improvement, and analytics

• Legal obligation – for anti-money laundering (AML), know your customer (KYC), or financial conduct regulations

6. Sharing Your Information

We only share your data with trusted partners when:

• You have explicitly authorised it (e.g., applying for a rental property, opting in to insurance quotes)

• It is necessary for delivering services (e.g., payment processing, cloud storage)

• We are legally required to do so (e.g., under a court order or FCA investigation)

We do not:

• Sell your personal data

• Share your face image data with any external parties

• Use your data for unsolicited advertising

7. Data Retention

We follow a strict retention policy:

• Verification data: Deleted within 90 days after verification is completed

• Referencing data: Retained up to 6 years to meet legal obligations

• Rent reporting data: Held while you are opted into the service

• Account data: Retained for the duration of your account + 12 months

Data may be anonymised and used for aggregated reporting and benchmarking.

8. Your Rights

You have the right to:

• Request access to your data

• Correct incomplete or inaccurate data

• Withdraw consent at any time

• Request deletion (subject to lawful retention requirements)

• Object to specific processing activities

• File a complaint with the ICO (Information Commissioner’s Office): www.ico.org.uk

You can exercise your rights by contacting us at: [email protected]

9. Security Measures

We take data security seriously:

• AES-256 encryption

• SSL/TLS for all data in transit

• Multi-factor authentication for staff systems

• Regular penetration testing by third-party security firms

• Data minimisation, pseudonymisation, and audit trails

10. International Transfers

Verifid processes and stores all personal data in the UK or EEA. If any data is transferred outside of this region, we ensure appropriate safeguards (e.g. SCCs, adequacy decisions) are in place.

11. Children’s Privacy

Our services are intended for users aged 18 and over. We do not knowingly collect or process data of children under 18.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in technology, law, or our service offering. You will be notified of material updates via the app or email, and the most current version will always be available at verifid.uk/privacy-policy

13. Contact Us

Verifid Limited
162 Narborough Road, Leicester, LE3 0BW
Email: [email protected]
Registered in England and Wales
Company Number: 13951491
ICO Registration: