Committed to protecting and respecting your privacy

Privacy Policy.

This Policy explains when and why we collect personal information about individuals who visit our website, express an interest in or sign up to use our services, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

At Identity Technology Ltd (“Identitech”), we are committed to protecting and respecting your privacy.

We may change this Policy from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our service, you’re agreeing to the terms of this Policy.

Any questions regarding this Policy and our privacy practices should be sent to [email protected] or by writing to Identity Technology Ltd C/O Hamilton Rose Tax, Greville Court, 1665 High Street, Knowle, England, B93 0LL.

Who we are

Identitech provides software services for our customers to securely and efficiently conduct identification and Know Your Customer (KYC) checks in order to comply with certain pieces of UK legislation, including the Money Laundering Regulations 2017.

The type of personal information we collect

We currently collect and process the following information:

Personal identifiers, contacts and characteristics (such as name, date of birth, and contact details)
Copies of identity documents submitted to our service, which may include:
- Evidence of address – such as utility bills or bank statements (for an address or KYC check)
- Photographic evidence of identity – such as copies of a UK driving license or UK Passport (for photo ID validation purposes)
- Facial identity – which will include a photograph taken by an app within our service (for photo ID validation purposes)
Responses from third party checks carried out as part of our KYC service, which may include:
- Credit reference information
- Electoral Roll validation
- Relevant information from the UK’s National Identity Register
- Any relevant information from the National Change of Address alert file
- Information indicating whether you are a Politically Exposed Person or a person of the HM Treasury Sanctions list

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

To provide services which verify your identity and confirm that you are able to access various financial services, with the ultimate aim of preventing financial crime
To handle a request for information from you, a customer or a third party representing you
To deal with a complaint you have made to us

We also receive personal information indirectly, in the following scenarios:

Your personal information is contained in reports we receive from the parties we work with to complete our checks
A complainant, customer or other third party refers to you in their correspondence
We undertake personal or corporate credit reference agency searches as part of the checks we carry out as part of our service. Checks undertaken on individuals may leave a footprint on the individual’s credit file.

We use the information that you have given us in order to carry out checks of various registers and lists in order to fulfil KYC requirements.

Who has access to your information?

We use data processors who are third parties who provide some services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.

For these purposes, we will share your personal information with:

GB Group plc (“GBG”) – this company receives your personal data as they assist us in delivering the checks provided by our service. You can review their privacy policy at – https://www.gbgplc.com/en/legal-and-regulatory/privacy-policy/

We will not share your information with any third parties for the purposes of direct marketing.

Under the General Data Protection Regulation (GDPR), the lawful basis we rely on for processing this information is:

We have a legitimate interest in carrying out various searches and checks to assist our customers in fulfilling their KYC requirements.

How we store your personal information

Your information is securely stored on cloud-based servers at a location in London, UK.

The length of time that we need to keep the following personal information (the Retention Period) is specified by our customers in our contract with them. For specific information about how long we will keep your data, please contact [email protected]. Once the Retention Period has expired, we will dispose of your information by deleting all data from any database and destroying appropriate backups of such data. The information we will keep includes:

Personal identifiers, contacts and characteristics (such as name, date of birth, and contact details)
Copies of identity documents submitted to our service, which may include:
- Evidence of address – such as utility bills or bank statements
- Photographic evidence of identity – such as copies of a UK driving license or UK Passport (only for 31 days)
- Facial identity – which will include a photograph taken by an app within our service (only for 31 days)
The results of checks carried out by third parties, which may include:
- Credit reference information
- Electoral Roll validation
- Relevant information from the UK’s National Identity Register
- Any relevant information from the National Change of Address alert file
- Information indicating whether you are a Politically Exposed Person or a person of the HM Treasury Sanctions list

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at [email protected] or by writing to Identity Technology Ltd C/O Hamilton Rose Tax, Greville Court, 1665 High Street, Knowle, England, B93 0LL if you wish to make a request.

Use of ‘cookies’ and electronic tracking

Typical web resources require acceptance or rejection of non-essential cookies. The purpose of this document is to provide some context as to what essential cookies provided by the Identitech platform will consist of. It is important to note that Identity Technology Ltd (trading as Identitech) does not intend on using cookies for non-essential purposes.

The Identitech solution is designed to help organisations properly vet their customers/clients identity, and as part of maintaining the system and process integrity, we need to ensure that the system is not being mis-used. As part of this, within our terms and conditions, an end-user will be required to accept them to use the system. We will be including cookies related to Hotjar and Google Analytics. Neither of these cookies will track and record any personal input, and IP addresses will be anonymised. They will however, monitor how the system is used, and report on any usage that appears to be out of the ordinary.

As no personal data is recorded, we will not be using this information for any marketing purposes, it is simply to ensure that there is no circumvention of our solution’s security controls and flow/usage.

We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. We do not transfer any personal information to Google Analytics. Google’s privacy policy is available at: https://www.google.com/policies/privacy/.

We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

For further details, please see the ‘about Hotjar’ section of Hotjar’s support site at https://help.hotjar.com/hc/en-us/categories/115001323967-About-Hotjar

Collecting Domain Information

Like most commercial web sites, we automatically log all traffic coming to and from our website. Part of this data includes the collection of domain information. This data enables us to become more familiar with which customers visit our site, how often they visit, and what sections of the site are most active. We use this information to make informed decisions on improving the information and navigation of our site. Any tools or services we use for these purposes will not have access to any personally identifiable information.

We may disclose aggregate statistics about visitors to our site to other third parties. However, any such disclosure will not include any personally identifiable information from any of our visitors.

Links to other websites

Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.

Children (16 or Under)

Our websites do not target and are not intended to attract children under the age of 16. Identitech does not knowingly solicit personal information from or about children under the age of 16 or send them requests for personal information.

Transferring your information outside of Europe

As part of the services offered to you through this website, the information which you provide to us may be transferred to countries outside the European Union (“EU”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.

If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at [email protected] Identity Technology Ltd C/O Hamilton Rose Tax, Greville Court, 1665 High Street, Knowle, England, B93 0LL.