Biometric Data Policy

This Biometric Policy sets out IDScan.net’s (“IDScan.net”) data practices with respect to biometric data. For details on how we process information other than biometric data, please see our Privacy Policy. If you have any questions, please contact us at privacy@idscan.net.

By providing your consent to our collection, use, or disclosure of your biometric data, you acknowledge that you have read this Biometric Policy, and agree to our processing of your biometric data as described herein and in accordance with applicable law.

Section 1 : What is biometric data?

As used in this Biometric Policy, “biometric data” means data regarding an individual’s physical characteristics that can be used to identify the individual, such as fingerprints, voiceprints, facial shape, or scans of hand or face geometry. Biometric data includes “biometric identifiers” and “biometric information” as those terms are defined in the Illinois Biometric Information Privacy Act, 740 ILCS § 14/1, et seq. and other applicable data protection law.

Section 2 : How we collect biometric data

We may collect biometric information in connection with identity verification services we provide to our customers. As part of this process, we may apply software and algorithms against photos provided by our customers to detect and analyze the general structure of your face and/or body. Some of the resulting data may be considered biometric data. While we may collect information about your appearance, we do not use it to infer race or ethnicity or to analyze or identify your past, present, or future physical or mental health status.

Section 3 : How we use biometric data

We collect your biometric data to allow our customers to verify your identity. We also use biometric data to improve our software and algorithms and for research, product development, and other internal business purposes. 

We do not sell, lease, trade, share in exchange for anything of value, or otherwise profit from the transaction of your biometric data.

Section 4 : How we disclose biometric data

We disclose your biometric data in the following circumstances:

• to our service providers in connection with the processing of the biometric data. We contractually prohibit our service providers from retaining, using, or disclosing the biometric data for any purpose other than performing the services for us.
• to the customer on whose behalf we collected the biometric data, including to provide identity verification, authentication, fraud prevention, and related services requested by that customer.
• in connection with, or during negotiations of, any proposed or actual merger, purchase, sale, or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business.
• to comply with the law or defend our rights.

Section 5 : How we store and secure biometric data

We store, transmit, and protect your biometric data using a reasonable standard of care. Such storage and protection from disclosure will be performed in a manner that is the same as or more protective than the manner in which we store, transmit, and protect from disclosure other confidential and sensitive information. These safeguards may include, as appropriate, physical and digital security measures, encryption, access controls, password authorization, system logging and auditing, and other administrative, technical, and physical controls.

How we retain and delete biometric data

Unless we are required to retain your biometric data for a longer period of time to comply with the law or defend our rights, we will retain your biometric data only until the first of the following occurs: (1) the initial purposes for collecting such biometric data have been satisfied; or (2) three years have passed since your last interaction with us. 

Where Texas law applies, we will permanently destroy biometric identifiers within a reasonable time, and in any event no later than one year after the purpose for collecting the biometric identifier has expired, unless the biometric identifier is used in connection with an instrument or document that applicable law requires us to retain for a longer period, in which case we will destroy the biometric identifier within a reasonable time and no later than one year after that legal retention requirement ends.

Section 6 : Your rights 

You may initially decline to provide us with your biometric data, but this will prevent our customers from verifying your identity. You may withdraw consent at any time for us to process your biometric data, provided that this withdrawal may result in us being unable to fulfill the service requested by you. To withdraw your consent, please contact us at privacy@idscan.net. When you withdraw consent, we will delete your biometric data except where we are required or permitted to retain it by law or where retention is reasonably necessary to establish, exercise, or defend legal claims. 

Depending on your jurisdiction and the circumstances of the processing, you may have the right to request deletion of your biometric data. We will review and respond to such requests in accordance with applicable law.

Changes to this Policy

We reserve the right to revise and reissue this Biometric Policy at any time. Any changes will be effective immediately upon posting of the revised Biometric Policy. Your continued use of our Service indicates your consent to the Biometric Policy then posted. If the changes are material, we may provide additional notice to you, such as through email or prominent notice on the Service.