Onfido Facial Scan Policy and Release

Retention & Deletion · Company practice

Biometric Data kept up to 365 days; photos and videos up to three years, then destroyed

Entrust stores and uses Biometric Data for a maximum of 365 days after the user or the Company submitted photos/videos of the user's face and/or identity document to the Services, or a shorter period set by the Company. After that it permanently destroys the Biometric Data it stores, unless law or legal process requires retention. Photos/videos (including audio recordings) are stored for up to three years after submission, then permanently destroyed unless law or legal process requires retention. The policy tells the user to read the Company's own policies to understand how long the Company may retain Biometric Data.

Supporting quotations

Retention of your Biometric Data:

Entrust stores and uses the Biometric Data described above for a maximum of three-hundred and sixty five (365) days after you or the Company submitted photos/videos of your face and/or identity document to the Services, or a shorter retention period set by the Company.

After this, it permanently destroys your Biometric Data that it stores, unless otherwise required by law or legal process to retain the data.

Entrust stores all photos/videos (including audio recordings) for up to three (3) years after submission of photos/videos of your face and/or identity document to the Services, at which time they are permanently destroyed, unless otherwise required by law or legal process to retain the materials.

(You should read the Company’s own privacy related policies and terms of use to understand how long the Company may retain Biometric Data if applicable).

Qualifications & exceptions

• The periods run from submission of the photos/videos to the Services.
• The Company may set a shorter period than 365 days for Biometric Data.
• Destruction is subject to retention otherwise required by law or legal process.
• The three-year period applies to photos/videos (including audio recordings), which the policy distinguishes from the Biometric Data described above.

Not stated here

• The Company's own retention periods are not stated in this policy; it directs the reader to the Company's policies.

Retention & Deletion · Company practice

Without consent, the partial-process record and photos/videos are kept up to three years

If the user does not consent, Entrust will store a record of the partially completed process and any photos/videos (including audio recordings) in accordance with the Company's instructions, up to a maximum of three years from the time the user terminated the process. After that, Entrust permanently destroys the photos/videos (including audio recordings), unless law or legal process requires retention.

Supporting quotations

Entrust will store a record of the partially completed process and any photos/videos (including audio recordings) in accordance with the instructions of the Company up to a maximum of three (3) years from the time you terminated the process.

After this time Entrust will permanently destroy your photos/videos (including audio recordings), unless otherwise required by law or legal process to retain the materials.

Qualifications & exceptions

• Storage follows the Company's instructions.
• The three-year maximum runs from when the user terminated the process, not from submission.
• Destruction is subject to retention otherwise required by law or legal process.