NOTICE TO RESIDENTS OF THE EUROPEAN UNION AND UNITED KINGDOM

ID.me is committed to protecting your Personal Information in its role as a Data Controller of the Personal Information we collect from and about our users. This Notice, in conjunction with the general ID.me Privacy Policy, explains how we process, disclose, transfer, and store your Personal Information in accordance with the General Data Protection Regulation (“GDPR”) which establishes the applicable data protections for individuals residing in the European Union (EU) and United Kingdom (UK). For additional information about how ID.me may use your Personal Information, including the third-parties with whom it may be shared, please review the general ID.me Privacy Policy or contact ID.me via our support team.

Your use of ID.me’s Services demonstrates your review and acceptance of the ID.me Terms of Service and Privacy Policy, and shall be understood as consent for ID.me to collect, process, and retain your Personal Information.

1. Purposes of Processing:

We collect and process your personal data for the following purposes:

Identity verification
Community affiliation verification (e.g., status as a student, veteran, etc.)
Detect and prevent identity theft and fraud on the ID.me platform

2. Types of Personal Information ID.me Collect:

We may collect the following types of Personal Information, additional details may be found in the general ID.me Privacy Policy:

First and last name
Date of birth
Social security number and/or other government issued identification numbers
Email address
Phone number
Mailing address
Photographic images (e.g., copy of qualifying government issued identification card)
Biometric data (e.g., facial geometry)
Community affiliations (e.g., Military, First Responder, Student, Veteran, etc.)
Educational degrees
Professional certifications
Preferences

3. Lawful Basis for Processing:

We rely on the following legal bases for processing your Personal Information, additional details may be found in the general ID.me Privacy Policy:

You consent to the processing of your personal data for one or more specific purposes.
ID.me maintains a legitimate interest in the processing of the Personal Information of individuals who use, or have previously used, the ID.me platform for verification of identity or group affiliation in order to detect and prevent fraud and identity theft.

4. International Data Transfers:

ID.me is based in the United States, all data processing and storage shall occur within the United States. ID.me may transfer your Personal Information to carefully selected service providers, business partners, and other third parties for the purposes described in the ID.meID.me Privacy Policy:

Whenever we transfer your personal information, we look at the risks to your information and rely on safeguards like standard contractual clauses, where applicable, to ensure your rights are protected. If we share personal information with a third party, we will require them to protect your personal information appropriately.

5. Data Retention:

We will retain your personal data and account history for up to 3 years following account closure. For additional details regarding ID.me’s retention of your Biometric Information, please review the Biometric Information Privacy Policy:

6. Your Rights:

Under GDPR, you have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Erase your data under certain circumstances
Restrict or object to processing
Data portability

In order to exercise these rights you must submit a verified request via your ID.me Account, for additional questions or concerns please contact our support team.

7. Withdrawal of Consent:

You have the right to withdraw your consent at any time by closing your ID.me account. If you withdraw consent, it will not affect our processing performed before its withdrawal. ID.me will continue to retain certain Personal Information in account with the terms disclosed in our general Privacy Policy, as required for legal and compliance purposes as well as for the prevention and detection of fraud on the ID.me platform.

8. Complaints:

ID.me takes your concerns and rights very seriously. However, if you believe that we have not responded in an appropriate manner to your complaints or concerns, or if you believe your rights have been infringed, you have the right to lodge a complaint with the relevant supervisory authority.

9. Contact Us:

If you have any questions or concerns about your personal data or this notice, please contact our Data Protection Officer at privacy@id.me.

Corporate Address.
ID.me, Inc. 8280 Greensboro Drive, Suite 800 McLean, VA 22102

For Users and Customers.
Member Service Inquiries may be directed to our support team.

GDPR Notice