Biometric Data Policy

This Biometric Policy sets out IDScan.net’s (“IDScan.net”) data practices with respect to biometric data. For details on how we process information other than biometric data, please see our Privacy Policy.

If you have any questions, please contact us at privacy@idscan.net.

By consenting to this Biometric Policy, you acknowledge that you have read this Biometric Policy, and agree to the processing of your biometric data in accordance with its terms.

Section 1 : What is biometric data?

As used in this Biometric Policy, “biometric data” means data regarding an individual’s physical characteristics that can be used to identify the individual, such as fingerprints, voiceprints, facial shape, or scans of hand or face geometry. Biometric data includes “biometric identifiers” and “biometric information” as those terms are defined in the Illinois Biometric Information Privacy Act, 740 ILCS § 14/1, et seq. and other applicable data protection law. 

Section 2 : How we collect biometric data

We may collect biometric information in connection with identity verification services we provide to our customers. As part of this process, we may apply software and algorithms against photos provided by our customers to detect and analyze the general structure of your face and/or body. Some of the resulting data may be considered biometric data. While we may collect information about your appearance, we do not use it to infer race or ethnicity or to analyze or identify your past, present, or future physical or mental health status. 

Section 3 : How we use biometric data

We collect your biometric data to allow our customers to verify your identity. We also use biometric data to improve our software and algorithms and for research, product development, and other internal business purposes. 

We do not intend to sell, lease, trade, share in exchange for anything of value, or otherwise profit from the transaction of your biometric data. 

Section 4 : How we disclose biometric data

We disclose your biometric data in the following circumstances:

• to our service providers in connection with the processing of the biometric data. We contractually prohibit our service providers from retaining, using, or disclosing the biometric data for any purpose other than performing the services for us.
• in connection with, or during negotiations of, any proposed or actual merger, purchase, sale, or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business.
• to comply with the law or defend our rights.

Section 5 : How we store and secure biometric data

We store, transmit, and protect your biometric data using a reasonable standard of care. Such storage and protection from disclosure will be performed in a manner that is the same as or more protective than the manner in which we store, transmit, and protect from disclosure other confidential and sensitive information. We retain and delete your biometric data in accordance with our retention and deletion schedule below. 

How we retain and delete biometric data

Unless we are required to retain your biometric data for a longer period of time to comply with the law or defend our rights, we will retain your biometric data only until the first of the following occurs: (1) the initial purposes for collecting such biometric data have been satisfied; (2) you request deletion; or (3) three years have passed since your last interaction with us. 

Section 6 : Your rights 

You may initially decline to provide us with your biometric data, but this will prevent our customers from verifying your identity. You may withdraw consent at any time for us to process your biometric data, provided that this withdrawal may result in us being unable to fulfill the service requested by you. To withdraw your consent, please contact us at privacy@idscan.net. When you withdraw consent, we will delete your biometric data except where we are required to retain it to comply with the law or to defend our rights.