Berbix helps online platforms validate your identity online.
Berbix is an identity verification and fraud deterrence company
headquartered in the United States. Images of your photo ID and your
selfie will be securely processed and stored by Berbix on our
customers’ behalf. Only a limited number of individuals will have
access to review any user-submitted data.
Berbix does not sell any user-submitted data.
Our customers set data retention policies and specify how long to keep
data before it is permanently deleted from our systems. Berbix uses
Google Cloud Platform to store your data which is encrypted both in
transit and at rest. Berbix maintains a robust security policy, has
completed a SOC 2 examination, and undergoes regular security
penetration testing by external auditors.
Cette politique de confidentialité est aussi disponible en français (PDF).
Berbix Inc. (“Berbix,” “we,” “our,” or “us”) is committed to protecting your privacy.
Berbix provides web and/or mobile software and services to vet and verify the identities and credentials of individuals (the “Service”) which are deployed on the third party sites belonging to our customers (“Customers”).
This Privacy Policy explains how we collect, use, and disclose data that identifies or is associated with you (“personal information”) when you visit our website (berbix.com) (“Site”) or use the Service (collectively, our “Berbix Services”).
This Privacy Policy applies to the information we collect from visitors to our Site (“Visitor Data”), information we collect about our customers (“Customer Data”), and the information we collect from our users when the user interacts with the Service on one of our Customers’ websites (“User Data”).
Before accessing or using our Berbix Services, please ensure that you have read and understood our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Website Terms of Use (governing your use of the Site) and User Terms of Service (governing your use of the Service).
With the exception of certain categories of User Data (as detailed in section 2 below), Berbix is the controller responsible for the personal information we hold about you. If you have a question about this Privacy Policy or how we use information collected about you, we encourage you to contact us using the details set out in section 10 below.
We collect personal information when you voluntarily submit information to us. This can include information you provide to us when you register for a Customer account, fill in a form, respond to surveys, sign up for our mailing list, or otherwise communicate with us or provide information to Berbix.
If you choose not to provide personal information, we will not be able to provide you the Service or respond to or fulfil your other requests.
The table below sets out the categories of personal information we collect about you and how we use that information. The table also lists the legal basis which we rely on to process the personal information.
Category of information | How we use it | Legal basis for processing |
---|---|---|
Contact information and basic personal details. Such as your name, phone number, physical address, email address. | We use this information to operate, maintain and provide to you the features and functionality of the Service. | The processing is necessary for the performance of a contract and to take steps prior to entering into a contract (namely the SaaS Services Agreement between Customer and Berbix). |
We use this information to communicate directly with you to respond to your queries (for example, support requests) and to send Service-related emails (for example, account verification, change or updates to features of the Service, or technical and security notices). | This processing is necessary for our legitimate interests, namely, administering the Service and communicating with you in connection with the Service. | |
We use this information to send you news, alerts and marketing communications in accordance with your preferences. | We will only process your personal information in this way to the extent you have given us consent to do so. | |
Payment and transaction information. Payment information, such as the credit or debit card details; transaction information such as the Service purchased, date and time of the transaction. | We use this information to facilitate transactions. Note we use a third party payment provider that collects your credit or debit card details on our behalf; we do not store that information. | The processing is necessary for the performance of a contract and to take steps prior to entering into a contract (namely the SaaS Services Agreement between Customer and Berbix). |
Correspondence and comments. When you contact us directly, e.g. by email, phone, mail, when you respond to customer surveys or when you interact with customer service, we will record your comments and opinions. | To address your questions, issues and concerns and to resolve your customer service issues. | This processing is necessary for our legitimate interests, namely, administering the Service and communicating with you in connection with the Service. |
All personal information set out above. | We will use all the personal information we collect to operate, maintain and provide to you the features and functionality of the Service, to monitor and improve the Service and business and to help us develop new products and services. | The processing is necessary for our legitimate interests, namely to administer and improve the Service and our business. |
Information you submit and that we receive from third parties
We collect personal information from you when you submit information to the Service when it is deployed on a Customer site or when a Customer provides a direct link to the Service. The information we collect could include your name, date of birth, phone number, email address, photo of your driver license, street address, and other identification documents or indicators. We use this information to operate, maintain and provide the features and functionality of the Service, including to verify your identity on our Customer sites.
We may also ask you to provide one or more photos of yourself at the request of our Customer. Berbix uses facial recognition technology for verification and fraud detection purposes. Face geometry data will be used to match the photo on your identity document with the photo(s) taken of yourself. This face geometry data will be destroyed when the information is no longer needed for verification and fraud detection purposes, or within 3 years of your last interaction with our Customer, whichever comes first.
We may receive information about you from third parties, including from our Customers when they provide us with information about you. We may also collect information about you that is publicly available on behalf of our Customers.
Please note that the Customer (on whose site the Service is deployed or that has provided you with a direct link to the Service) is the controller of this personal information.
Information we collect automatically
We also collect information automatically about the way in which you use the Service deployed on the Customer site (“Service Usage Data”). We are the controller of the Service Usage Data. The table below sets out the Service Usage Data, how we use it and the corresponding leg
Category of information | How we use it | Legal basis for processing |
---|---|---|
Information about your device and its software, such as your IP address, browser type, Internet service provider, device type/model/manufacturer, operating system, date and time stamp, and other such information. | We use this information to monitor and improve the Service, and for other internal purposes. | The processing is necessary for our legitimate interests, namely to improve our Service generally, to monitor and resolve issues and for other internal purposes. |
Information about the way you access and use the Service, for example, for example, what options you choose, the number of attempts you make, how much time it takes you, and other actions you take while using the Service. | We use this information to monitor and improve the Service, and for other internal purposes. | The processing is necessary for our legitimate interests, namely to improve our Service generally, to monitor and resolve issues and for other internal purposes. |
Information about your location, including GPS coordinates (e.g., latitude and/or longitude) or similar information regarding the location of your mobile device, or we may be able to approximate or infer a device’s location by analyzing other information, like an IP address. | We use this information to present the Service to you on your device and to enhance and personalize your experience on the Service. | The processing is necessary for our legitimate interests, namely to tailor the Service to you. |
We use this information to monitor and improve the Service, and for other internal purposes. | The processing is necessary for our legitimate interests, namely to improve our Service generally, to monitor and resolve issues and for other internal purposes. |
We automatically collect information about how you use and browse our Site and the device you use to access the Site. We typically collect this information through a variety of cookies and similar technologies, including web beacons, embedded scripts, location-identifying technologies, and file information. Please refer to section 3 below for more information on cookies and other tracking technologies that we use.
The table below sets out the categories of personal information we collect about you automatically and how we use that information. The table also lists the legal basis which we rely on to process the personal information.
Category of information | How we use it | Legal basis for processing |
---|---|---|
Information about your device and its software, such as your IP address, browser type, Internet service provider, device type/model/manufacturer, operating system, date and time stamp, and other such information. | We use this information to present the Site to you on your device and to enhance and personalize your experience on the Site. | The processing is necessary for our legitimate interests, namely to tailor the Site to you. |
We use this information to monitor and improve the Site, and for other internal purposes | The processing is necessary for our legitimate interests, namely to improve our Site generally, to monitor and resolve issues and for other internal purposes. | |
Information about the way you access and use our Site, for example, the site from which you came and the site to which you are going when you leave our Site, the pages you visit, the links you click, whether you open emails or click the links contained in emails, whether you access the Site from multiple devices, and other actions you take on the Site. | We use this information to present the Site to you on your device and to enhance and personalize your experience on the Site. | The processing is necessary for our legitimate interests, namely to tailor the Site to you. |
We use this information to monitor and improve the Site, and for other internal purposes | The processing is necessary for our legitimate interests, namely to improve our Site generally, to monitor and resolve issues and for other internal purposes. | |
Information about your location, including GPS coordinates (e.g., latitude and/or longitude) or similar information regarding the location of your mobile device, or we may be able to approximate or infer a device’s location by analyzing other information, like an IP address. | We use this information to present the Site to you on your device and to enhance and personalize your experience on the Site. | The processing is necessary for our legitimate interests, namely to tailor the Site to you. |
We use this information to monitor and improve the Site, and for other internal purposes | The processing is necessary for our legitimate interests, namely to improve our Site generally, to monitor and resolve issues and for other internal purposes. |
We use cookies and similar technologies to provide you with a good experience when using the Berbix Services and to allow us to improve the Berbix Services. A cookie is a small data file that we transfer to your computer's hard disk for record-keeping purposes. We use the following types of cookies:
The cookies we use are designed to help you get the most from the Berbix Services but if you do not wish to receive cookies, most browsers allow you to change your cookie settings. Please note that if you choose to refuse cookies you may not be able to use the full functionality of the Berbix Services. These settings will typically be found in the "options" or "preferences" menu of your browser. In order to understand these settings, the following links may be helpful, otherwise you should use the "Help" option in your browser for more details.
If you would like to find out more about cookies and other similar technologies, please visit www.allaboutcookies.org or the Network Advertising Initiative's online sources at www.networkadvertising.org.
Although we do our best to honor the privacy preferences of our users, we are unable to respond to Do Not Track signals set by your browser at this time.
We may share your personal information in the instances described below. For further information on your choices regarding your information, see the “Control Over Your Information” section below.
We may share User Data with:
We may share all personal information that we collect with:
We may also share information with others in an aggregated or otherwise anonymized form that does not reasonably identify you directly as an individual.
Modifying Customer account information. If you have an account with us, you have the ability to modify certain information in your account (e.g., your contact information) through your “Account” settings. If you have any questions about modifying or updating any information in your account, please contact us at privacy@berbix.com.
Accessing and modifying User Data. You may update the User Data that Berbix has collected from or about you, such as you name, mobile phone number and email address by contacting the Customer through which it was provided. Should you be unable to do so, please email us at privacy@berbix.com.
Data storage and transfer: Your information collected through the Berbix Services may be stored and processed in the United States or any other country in which Berbix or its affiliates or service providers maintain facilities. If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction, including the U.S. or any other country in which Berbix or its parent, subsidiaries, affiliates, or service providers maintain facilities. These international transfers of your personal information are made pursuant the appropriate safeguards (such as the standard data protection clauses adopted by the European Commission). If you wish to enquire further about these safeguards, please contact us using the details set out at section 10 below.
Keeping your information safe: We care about the security of your information and employ physical, administrative, and technological safeguards designed to preserve the integrity and security of all information collected through the Berbix Services. However, no security system is impenetrable, and we cannot guarantee the security of our systems 100%. In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.
Retention of your information. We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of our legitimate business interests and satisfying any legal or reporting requirements.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and the applicable legal requirements.
In accordance with applicable privacy law, if you are in the EEA, Switzerland or the UK, you have the following rights in respect of personal information that we hold about you contained in the Customer Data, Visitor Data and, to the extent we act as a controller (as described in section 2 above), the User Data:
If you wish to exercise one of these rights, please contact us as privacy@berbix.com.
You also have the right to lodge a complaint to your national data protection authority. Further information about how to contact your local data protection authority is available at https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
Residents in other jurisdictions may also have similar rights to the above. Please contact us using the contact details at section 10 below if you would like to exercise one of these rights, and we will comply with any request to the extent required under applicable law.
Berbix does not knowingly collect or solicit any information from anyone under the age of 16 on the Berbix Services. In the event that we learn that we have inadvertently collected personal information from a child under age 16, we will delete that information as quickly as possible. If you believe that we might have any information from a child under 16, please contact us at privacy@berbix.com.
The Berbix Services may contain links to and from third-party websites of our business partners, advertisers, and social media sites and our users may post links to third-party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. We strongly recommend that you read their privacy policies and terms and conditions of use to understand how they collect, use, and share information. We are not responsible for the privacy practices or the content on the websites of third-party sites.
If you have any questions about this Privacy Policy or the Berbix Services, please contact us at privacy@berbix.com.
We may modify or update this Privacy Policy from time to time to reflect the changes in our business and practices, so you should re view this page periodically. When we change the policy in a material manner, we will let you know and update the ‘last modified’ date at the bottom of this page. If you object to any changes, you may close your account. Continuing to use the Berbix Services after we publish changes to this Privacy Policy means that you are consenting to the changes.
This privacy policy was last modified on March 11, 2019.