Introduction

At Youverify (“Youverify”, “we”, “our” or “us”), your privacy matters to us. Our mission is to help individuals and businesses verify identities, assess risks, and establish trust safely and transparently. We are committed to using your data responsibly and transparently, We collect and use personal data solely for the purpose of providing our verification services.

At Youverify, we provide identity verification and related risk assessment services (“verification services”). In doing so, we respect your privacy and are committed to protecting your personal data. This Privacy Policy (“Policy”) explains how we collect, use, and safeguard your information, as well as your rights concerning that data. It reflects our dedication to transparency, legal compliance, and building trust through the responsible delivery of our services.

Applicability

This Policy applies to all personal data processed by Youverify globally, including the personal data of our employees, contractors, and job applicants ("HR Data") in compliance with the Nigerian Data Protection Act (NDPA), GDPR, CCPA, POPIA, and any other relevant legislation applicable to our operations

This Policy applies to information collected through our websites, including all pages and services under the Youverify.co domain and its subdomains, as well as through email, text, APIs, web services, and other electronic communications exchanged between you and our website.

This Policy does not apply to information collected by Youverify through offline channels or via other means, including websites operated by third parties such as our affiliates or subsidiaries. It also does not cover information collected by any third party, including our affiliates and subsidiaries, through applications, content, or advertisements that may link to or be accessible from our website.

Consent

Please read this Privacy Policy carefully before using our platforms or services. By using any of our platforms, you confirm that you understand and agree to the terms of this Policy and that you give your express consent to how we handle your personal data as described herein.

Children Under Age of 18

Our Website and services are not intended for children under 18 years of age. No one under age 18 may provide any information to or on the Website. We do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information

on this Website or through any of its features, use any of the interactive features of this Website, or provide any information about yourself to us, including your name, address, telephone number, or email address. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at privacy@youverify.co.

Information we Collect

To deliver our Verification Services, we collect specific information about users. The type of information we collect depends on the nature of the verification being performed.When verifying a user's identity through Identity Document (ID) verification, we may request:

First name and last name
Date of birth
Unique identification number (e.g., NIN, BVN, voter’s card number)
A scanned copy or image of an identity document
A photo or video of the user’s face for biometric comparison

We then verify whether the submitted identity document is authentic by matching it against data from our trusted data providers. If the user also submits a facial image or video, we compare it with the photo on the ID to determine if they match. A positive match in either or both of these steps may lead Youverify’s client to conclude that the user has successfully proven their identity.
We may also collect and process information to determine whether a user is a Politically Exposed Person (PEP), appears on sanctions lists or is mentioned in adverse media or global watchlists. For these screening checks, we compare them against publicly available or licensed third-party databases

To provide these Verification Services, users must give their consent. When we deliver services on behalf of a client, consent is obtained and enforced through our contract with that client. In situations where users interact directly with Youverify, we request consent using checkboxes and clearly labelled buttons with descriptive text explaining the scope of the consent.

How we Collect Information

The Youverify Data Lifecycle outlines how we collect and process user information for our Verification Services

The Client: Clients (our business customers) are organizations that have contracted Youverify to verify an identity, address, or carry out related verifications. Once we verify an identity or complete the requested verification or check, we provide the client with the results in the form of a Youverify Report, as described below. The client then uses the results to decide how to proceed with the user. In some cases, the client may request additional information before making a decision. Additionally, some clients only request a verification if a previous check was marked as either verified or not verified. This approach helps minimize the number of verifications we perform, ensuring we only conduct the necessary checks.
The User: Users are individuals whose identities or personal information we verify or validate on behalf of our clients. We collect this information either from our clients or directly from the users themselves. The collected data may include the user's name, unique identification number, and images of their identity document (e.g., passport, driver's license, biometric verification number, national ID). Additionally, we may collect biometric facial identifiers, photos (sometimes taken in quick succession for anti-fraud purposes), and the user’s date of birth, which helps ensure that both the client and the user have sufficient information before requesting identity verification. This information enables us to verify that the user is the true owner of the identity document and has not committed identity fraud. In some cases, we may also request additional details such as the user’s physical address, guarantor information, employment history, and educational records. This is part of our client’s compliance due diligence, allowing us to confirm the truthfulness of the user’s information. We may also collect device identifiers and IP addresses to help detect potential fraud or check if the device has previously been used in relation to suspected fraudulent activities. Additionally, we may check whether Youverify is authorized to provide Verification Services in the user's country of residence. To further combat fraud, we may gather identity information that has been exposed or made available online, enhancing the accuracy and reliability of our checks.
The Data Providers: Data providers supply additional information to assist in performing specific checks. For example, if we need to verify a user’s National Identification Number (NIN), we will match the provided details against records from the National Identity Management Commission (NIMC) or other relevant government bodies. Similarly, if we are tasked with verifying the user’s right to drive, we may work with the appropriate governmental body to authenticate the information. When verifying an address, we rely on field agents who act as our data providers for this verification request.
System Logs : We also maintain logs of interactions between our clients, users, and data providers with our verification services. This may include timestamps, location information, and details about the device used to submit the verification data. On occasion, users may submit irrelevant data, such as an unrelated image when a photo is required. In such cases, we will make efforts to delete the unnecessary data.

Use of Information Collected

We use the collected information to deliver and maintain our verification services on behalf of clients. This processing is based on the following grounds:

The user has consented to the processing of their information or has requested verification services.
The client has a legitimate or lawful reason for requesting the verification.
The processing is necessary for carrying out a task in the public interest or for reasons of substantial public interest.
The processing is necessary for scientific research purposes.

We also use information to further develop our verification services, ensuring the continued improvement and security of the services we offer.

Youverify Reports and Verification Classification

When we verify an identity or carry out a verification on behalf of a client, we provide a Youverify Report to that client. This Youverify Report details our recommendation and the reasoning behind it. The reasons are generated from the different machine learning models, human powered processes and the data from our data providers that are used to verify an identity or perform a verification. As these machine learning models, human power and data

driven processes are under constant development, it is difficult to maintain a list of them in this Privacy Policy. But you can find an accurate and up to date list in our Technical Documentation, usually used by clients that have integrated or will be integrating with us. By providing our clients with these detailed Youverify Reports, our aim is to empower our clients to make informed decisions about users and to provide specific help to users that are having trouble in passing a Youverify verification.

Automated Decision-Making and Use of Artificial Intelligence

We use automated systems, including artificial intelligence and machine learning technologies, to support identity verification, fraud detection, and compliance processes.

These systems may analyze personal data such as identity documents, biometric information, and transaction data to assess authenticity, detect risk signals, and support decision-making.

Where such processing constitutes automated decision-making under applicable data protection laws, we implement appropriate safeguards, including:

Human oversight and review mechanisms
The ability to challenge or request review of automated outcomes
Measures to ensure accuracy, fairness, and non-discrimination

We do not rely solely on automated decision-making for decisions that produce legal or similarly significant effects without appropriate human involvement, where required by law.

Use of Artificial Intelligence

We use artificial intelligence (AI) technologies to enhance the efficiency, accuracy, and security of our services, including identity verification, fraud detection, and compliance monitoring.

Our use of AI is governed by internal policies and controls designed to ensure that such systems operate in a fair, transparent, and accountable manner.

We implement measures to:

Minimize bias and ensure fairness in AI outcomes
Maintain transparency regarding the use of AI in our services
Protect personal data processed by AI systems
Ensure appropriate human oversight of AI-driven processes

We conduct regular bias assessments of our AI models to identify and address potential unfairness across demographic groups. Our AI practices are aligned with applicable legal and regulatory requirements, as well as recognized standards and frameworks.

We use select third-party AI components to enhance our services. All third-party AI components undergo security and compliance assessment before integration, and we do not share your personal data with these providers for their own purposes.

Youverify does not use AI for social scoring, manipulative subliminal techniques, real-time remote biometric identification in publicly accessible spaces, or any other purpose prohibited under applicable law, including the EU AI Act.

Sharing Information Outside Youverify

Sharing with External Parties: In addition to sharing information with our clients, users, and data providers (as described above), Youverify may also share information with external parties who perform tasks on our behalf, including our affiliates. We may also share information with other companies, organizations, government bodies, and individuals outside of Youverify where we have a legitimate legal reason to do so (e.g.,External Audit) or when we have been instructed to share the information on behalf of our clients.
Protection of Information Shared: We ensure that these external parties, even when located in countries with varying levels of personal data protection, provide the same level of protection for your information as we do. For a detailed list of whom we share information with, you can refer to our Cookie Use policy.
Sharing Information for Investigations: For instance, if a client is investigating a transaction related to the user, the client may instruct us to share the user’s information and report with relevant authorities, such as law enforcement or a legal investigation agency.
Scientific Research Collaborations: Additionally, in our efforts to bring legal identities online safely, we partner with universities and researchers working in the fields of machine learning and artificial intelligence. Where permitted by law and with the user’s consent, we may share user information with them for scientific research purposes.
Contractual Safeguards: Where legally permissible, we take steps to protect the information we share by imposing contractual privacy and security safeguards on the recipients of that information. However, in certain cases, such as when we are legally obligated to disclose information to a government authority, it may not be possible to impose such safeguards.

Information Security

Youverify implements reasonable and appropriate administrative, physical, technical, and organizational security measures to help protect user information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures are designed based on the sensitivity of the information we store and are continuously reviewed to respond to evolving risks. Our goal is to prevent unauthorized disclosure, loss, misuse, or alteration of data through proactive security management and strong internal controls.

To demonstrate our commitment to global data protection standards, Youverify complies with the following regulatory and certification frameworks:

ISO/IEC 27001:2013 certification – ensures we maintain a robust Information Security Management System (ISMS).
Nigeria Data Protection Act (NDPA) 2023 – enforced by the Nigeria Data Protection Commission (NDPC).
Protection of Personal Information Act (POPIA) – South Africa.
UK Data Protection Act 2018 and UK GDPR – regulated by the Information Commissioner’s Office (ICO).
Kenya Data Protection Act, 2019 – enforced by the Office of the Data Protection Commissioner (ODPC), Kenya.

We also ensure data is encrypted in transit and at rest, implement strict access control mechanisms, and regularly test our systems for vulnerabilities.

User Responsibility for Information Security : The security of your personal information also depends on your actions. Where we have provided you with credentials or access to restricted areas of our services, you are responsible for maintaining the confidentiality of those credentials. We strongly advise you not to share your login details with anyone.
Internet Security Limitations : Despite our best efforts to secure your data, please note that no method of transmission over the internet is completely secure. Therefore, any data shared with us online is done at your own risk. Youverify is not liable for any circumvention of privacy settings or security features on our platform.
Cookies and Tracking: Youverify uses cookies on its platform to support essential functionality such as secure login, session management, and platform performance. These cookies do not track user behavior for advertising or profiling purposes. Instead, they are limited to ensuring a secure and seamless user experience on our platform. We also use secure authentication methods, including JSON Web Tokens (JWT), which are issued after a user or client has successfully authenticated. These tokens are then used to securely authorize subsequent requests. Users can manage cookie preferences via our cookie banner or browser settings. For detailed cookie classifications and usage, refer to our Cookie Policy
Data Breach Protocol : In the event of a data breach which includes the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data. Youverify will promptly initiate a comprehensive investigation to determine the scope, cause, and impact of the incident. Youverify will notify the relevant supervisory authorities, clients, and affected users within 72 hours of becoming aware of the breach, without undue delay, in compliance with applicable data protection regulations. Youverify will provide clear and specific information about the nature of the breach, the categories of data affected, potential risks, and the remedial actions being taken. Where it is not possible to meet the 72-hour notification timeline, a documented and reasonable justification for the delay will be provided, in line with our legal obligations. In the event of an AI system malfunction or security incident that materially affects automated decisions about you, we will notify affected individuals and, where required by law, relevant supervisory authorities within the timeframes prescribed by applicable law.

For more details about our security framework, you can access our Information Security Policy directly here

If you identify a security vulnerability or bug in our services, please report it to the Youverify Security Team at security@youverify.co. Include as much detail as possible to help us investigate and respond effectively.

Data Storage

Youverify performs verification services on behalf of our clients for various purposes. These purposes are defined by our clients, and we rely on them to notify us when they no longer require us to retain the information we have collected on their behalf. Upon receiving such instructions, whether through our formal agreement or an ad hoc request, we promptly delete the information we have gathered about users during the verification process or return it to the user.

If you, as a user, wish to request the deletion of your information, please contact the client who conducted the relevant verification. For more details on how to make such a request, please refer to the section “Your Rights” below.

As a data processor (when acting on behalf of our client) and as a data controller (when engaging users directly on behalf of our client), we ensure that all data is stored and processed securely and encrypted at data centers in jurisdictions with strong data protection laws, similar to the Nigeria Data Protection Act 2023. Currently, our data centers are located in the European Union (EU), where data privacy is governed by the General Data Protection Regulation (GDPR). For more information on GDPR, visit https://gdpr.eu/faq/

In cases where highly sensitive government data is involved, we store such data only at the premises of the government agency or an approved local data center.

In certain situations, where legally mandated, we may retain information for longer than outlined above, even in the face of a deletion request. For example, if we are under a binding legal order to preserve the information, we will comply with such obligations.

We do not use customer personal data to train our AI models unless explicitly authorized by contract or with your express consent. Where we use data for model improvement, we anonymize or aggregate the data to prevent identification of individuals.

Disclosure of Personally Identifiable Information (PII)

Unless required by law, Youverify never discloses PII without seeking and obtaining express written consent from the data subject prior to disclosure. When seeking consent, the purpose of the disclosure must be explicitly stated to enable the data subject to make an informed disclosure prior to granting consent. If consent is obtained, Youverify shall take necessary measures to limit disclosure to the scope/purpose necessitating the disclosure. Data subjects are at liberty to refuse consent and it will not hinder the data subject from receiving services from Youverify.

Use of PII for Marketing and Advertising Purposes

Youverify never uses PII for marketing and advertising purposes unless express written consent is sought and obtained from the data subject prior to publishing the advert or campaign. Data subjects are at liberty to refuse consent and it will not hinder the data subject from receiving services from Youverify. If consent is obtained, Youverify shall take necessary measures to limit disclosure of identifiable information by anonymisation, where feasible, and limiting the scope of the information disclosed.

The Use of Subcontractors for Processing PII

Youverify may utilize the services of subcontractor(s) to process personally identifiable information (PII). Each subcontractor is bound by the same obligations to handle PII as Youverify, ensuring that the information is processed in compliance with applicable privacy and security requirements.

Youverify ensures that all subcontractors processing PII do so under strict contractual obligations, including data protection agreements, to ensure compliance with applicable data protection laws. Where required by law or where the nature of processing changes significantly, consent will be obtained.

To protect the security of PII processed by subcontractor(s), Youverify ensures that the subcontractors adhere to the same technical, organizational, and security standards outlined in the agreements between Youverify and the subcontractor(s). These standards are designed to meet the required information security and privacy protections for PII.

Handling PII Security Breaches

Although Youverify implements the highest security measures to protect personally identifiable information (PII), security breaches may still occur despite our best efforts. In the event of a breach, Youverify will promptly notify the affected data subjects via email, providing details of the nature of the breach and the remedial measures being taken to mitigate its impact.

If the Data Protection Officer determines that the breach requires notification to the supervisory authority, Youverify will inform the relevant authority in writing within 72 hours of becoming aware of the breach, without undue delay, in compliance with applicable data protection laws.

Your Rights

As a data subject, you have the following rights regarding the processing of your personal data:

Right to Withdraw Consent: You have the right to withdraw your consent to the processing of your personal data at any time. This withdrawal will not affect the lawfulness of any processing based on consent prior to its withdrawal. However, withdrawing consent does not prevent Youverify from continuing to process your information where a legitimate legal basis exists for doing so, even after consent has been withdrawn. In certain circumstances, we may also be legally obligated to disclose your personal information in response to legitimate requests from public authorities, such as for national security or law enforcement purposes.
Right to Access Your Data: You have the right to request a copy of the personal data we hold about you. You may request information about how we are processing your data, the purposes of processing, and the categories of data involved.
Right to Rectification: You have the right to request that we correct any inaccuracies or update any incomplete personal data we hold about you. If you believe the personal data we hold about you is incorrect or incomplete.
Right to Deletion (Right to Be Forgotten): You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent and no other legal basis for processing exists.
Right to Restrict Processing: You have the right to request the restriction of the processing of your personal data in specific situations, such as when you contest the accuracy of the data or if you object to the processing of your data for legitimate reasons. During this period, Youverify may store the data but not process it further
Right to Data Portability: You have the right to request the transfer of your personal data to another organization, or directly to you, in a structured, commonly used, and machine-readable format. This right only applies to data that you have provided to Youverify where processing is based on consent or a contract.
Right to Object to Processing: You have the right to object to the processing of your personal data in certain situations, such as when the processing is based on legitimate interests or when processing is carried out for direct marketing purposes.
Right to Contest Automated Decisions: Where a solely automated decision has been made about you that produces legal or similarly significant effects, you have the right to contest the decision, request human review, and express your point of view. To exercise this right, first contact the business that used Youverify's services (the data controller). If unresolved, contact our Data Protection Officer at privacy@youverify.co. .
Right to lodge a Complaint: If you believe that your rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority. If you are in the European Union (EU), this would be your local data protection authority. You can also lodge a complaint with the Information Commissioner's Office (ICO) in the UK or other relevant authorities in your jurisdiction.

To exercise any of your rights, please contact Youverify at privacy@youverify.co. If you are a South African citizen, you may also click [here] for further guidance through our PAIA Manual, or reach us via the postal address provided below.

Upon receipt of your request, Youverify will respond and fulfill the request within 30 days, in accordance with applicable data protection regulations. If we are unable to fulfill your request within this timeframe due to complexity, legal obligations, or other justifiable reasons, we will promptly inform you and provide an explanation for the delay or the grounds for refusal, where applicable.

Please note that some requests may require us to notify the relevant client (as outlined in the Youverify Data Lifecycle), so that the client may fulfill the request directly. This applies in situations where Youverify is acting as a data processor on behalf of a client and does not have the legal authority to independently carry out the request

Third-Party Disclosure

By using Youverify’s services, you authorize third parties (e.g., your mobile operator, internet service provider, financial institutions, government organizations) to disclose data to Youverify and its data processing partners for the purpose of validating your identity and preventing fraud. You also authorize Youverify to disclose this data to our data processing partners for these purposes. This disclosure is only for the legitimate purposes outlined in this document and will be handled in accordance with applicable data protection regulations.

Employee (HR) Data Processing

This section applies specifically to the processing of personal data related to Youverify's current, prospective, and former employees, contractors, and job applicants ("HR Data"). This processing is separate from our commercial verification services and is necessary for managing the employment relationship.

Collection and Use of HR Data: We collect and process HR Data for the following purposes:
- Recruitment: To evaluate and onboard qualified job applicants.
- Employment Administration: To manage payroll, benefits, performance reviews, career progression, training, and other standard employment functions.
- Compliance: To comply with legal obligations related to employment, tax, immigration, and health and safety laws.
- Workplace Security: To ensure the security of our premises, systems, and information through access control measures.
The categories of HR Data we process include, but are not limited to:
- Name, contact information, date of birth, government-issued identification numbers,and copies of identity documents.
- Bank account details for payroll, tax information, and benefits details.
- Information about education, employment history, and references.
- Next of kin and emergency contact details.
- Performance reviews, disciplinary records, and grievance procedures.
- Biometric data and photographs for security access and identification purposes.

In certain jurisdictions and with explicit consent, we may process health data where necessary for reasonable accommodations or health insurance benefits.

Legal Basis for Processing HR Data: Our processing of HR Data is primarily based on the following legal grounds:
- Necessity for the performance of the employment contract.
- Compliance with a legal obligation (e.g., tax laws, labor laws).
- Our legitimate interests as an employer, provided they are not overridden by the employee's data protection rights.
- In specific cases, we will obtain explicit consent, which can be withdrawn at any time.
Disclosure of HR Data: We share HR Data with third-party service providers under strict contractual obligations who assist us with HR functions, including:
- Payroll and Benefits Administrators
- Health Insurance Providers
- Pension and Retirement Plan Administrators
- IT and Cloud Service Providers hosting HR systems
- Government Agencies (e.g., tax authorities, immigration authorities) as required by law.

We ensure all third parties provide adequate guarantees to implement appropriate technical and organizational measures to protect HR Data.

Data Retention: We retain HR Data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Retention periods are based on the type of data and the legal requirements in the respective jurisdiction. For example, payroll records are typically retained for 5 years after the termination of employment.
Data Subject Rights for Employees: As a data subject, you have the rights outlined in the "Your Rights" section of this policy. To exercise these rights concerning your HR Data, please contact hr@youverify.co. We will process your request in accordance with applicable employment and data protection laws. Please note that certain rights may be limited in the employment context due to legal obligations or our legitimate interests.
International Transfers of HR Data: Youverify is a global company. HR Data may be transferred to and processed in countries outside of your country of residence, including the United States, for the purposes described above. Where such transfers occur, we rely on the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) for transfers from Europe, the UK, and Switzerland to our entity in the United States. For other international transfers, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs).

International Data Transfer

Youverify may transfer your personal data to countries outside your country of residence or the jurisdiction in which the data was originally collected, including countries that may not offer the same level of data protection as your jurisdiction. Where such transfers occur, we ensure that appropriate safeguards are in place in compliance with applicable data protection laws.

These safeguards include the implementation of Binding Corporate Rules (BCRs), which we have adopted where applicable, and transfers to countries that have been deemed to provide an adequate level of protection by relevant supervisory authorities, such as the European Commission, the UK Information Commissioner’s Office (ICO), or the Nigerian Data Protection Commission (NDPC).

In cases where none of these safeguards are applicable, we will seek your explicit consent before transferring your data or rely on another legal ground permitted under the law. Youverify remains committed to ensuring your personal data is protected wherever it is processed, and that your rights remain enforceable under applicable laws.

Onward Transfer and Accountability

Within the framework of an onward transfer, Youverify is responsible for processing personal data received under the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), which is subsequently transferred to a third party acting as an agent on its behalf. Youverify will be held accountable under the Principles if its agent handles personal data in a manner inconsistent with the established Principles. However, an exception to this liability may apply if Youverify can demonstrate its nonliability for the circumstances leading to the violation.

Data Privacy Framework

Youverify complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce Youverify has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Youverify has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/

Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you through a notice on the website home page and we will share the policy with all our clients through email. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this privacy policy to check for any changes

Contact Youverify

If you would like more information about how Youverify collects and uses information, regardless of the jurisdiction you receive our services in, or if you would like to contact the Youverify data protection officer, please contact Youverify at privacy@youverify.co

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Youverify commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK

Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact Youverify at privacy@youverify.co

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Youverify commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Gibraltar Regulatory Authority (GRA) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. The Federal Trade Commission has jurisdiction over Youverify’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

Binding Arbitration Option

It is mandated that our organization informs individuals about the potential option, subject to specific conditions, to initiate binding arbitration and as described respectively in Annex I of the EU-U.S. DPF Principles: https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2, the Letter from the ITA regarding the UK Extension to the EU-U.S. DPF, and Annex I of the Swiss-U.S. DPF Principles, an EU, UK, or Swiss individual has the option to invoke binding arbitration at no cost to determine whether Youverify has violated its obligations under the DPF Principles as to that individual and whether any such violation remains fully or partially unremedied (“residual claims”).

Attention:

United States

privacy@youverify.co

315 Montgomery Street, Suite 900 San Francisco, CA 94104

South Africa

informationofficersa@youverify.co

Privacy Office Youverify Inc. 24 Cade Street South Crest Alberton Gauteng 1449

Nigeria

privacy@youverify.co

1st Floor, Sum House, 350 Borno Way, Yaba, Lagos.

Kenya

privacy@youverify.co

Delta Corner, Oracle Tower, 13th floor, Chiromo Road, Westlands, Nairobi, Kenya.

Europe

privacy@youverify.co

Switzerland

privacy@youverify.co

Youverify will ensure that the relevant jurisdiction’s Information Officer is notified through our portal and ensure that your request receives the attention provided for per national laws governing our relationship.

If you need to raise a concern with our Supervisory Authority, you may submit this form https://inforegulator.org.za/wp-content/uploads/2020/07/FORM-SCN1-Security-Compromises-Notification-Fillable-Formpdf.pdf

If you would like to raise a concern with our Privacy Supervisory Authority, you can contact NDPC from https://www.ndpc.gov.ng/contact/