User Consent

Version: 20.10.2026

Last updated: 20.10.2026

Defined terms in this Consent ("Client", "User", "Verifico", "Service", "Check", "Data Processing Addendum") have the same meaning as in Verifico's Terms of Service and Privacy Notice.

End User means any natural person who accesses or interacts with the Service to complete an identity assessment, upload documentation, or complete a biometric check, at the request of an Enterprise Client or directly with Verifico.
Enterprise Client means any commercial entity, legal practice, financial institution, real estate conveyancer, or other corporate partner that uses the Service to fulfil statutory Anti-Money Laundering (AML), Know Your Customer (KYC), or fraud-prevention obligations.
Verifico means Verifico Ltd company, the identity verification provider the Client has engaged to carry out this Check. As explained above, Verifico acts as the Processor of your personal data for this verification, save for certain limited purposes where Verifico acts as an independent Controller, as described in Verifico’s Privacy Notice.

I acknowledge and agree that my personal data, which I am providing or have provided to the “Client”, the organisation with which I wish to establish, maintain, or continue a relationship following completion of this verification, will be processed by Verifico Ltd (“Verifico”), a company incorporated and registered in England and Wales under company number 17437921, with its registered office at 128, City Road, London, EC1V 2NX, United Kingdom, together with its relevant sub-processors, in order to verify my identity for the requested purposes in accordance with applicable Data Protection Laws and the Client's internal procedures and policies.

1.1 Parties and roles.

I acknowledge and agree that I know the identity and contact details of the Client, which is the Controller of my personal data. Any instructions, purposes, and decisions relating to the processing of my personal data are the responsibility of the Client. The Client has engaged Verifico as a data processor to collect and process my personal data where necessary for the purposes described in this Consent, in accordance with the Data Processing Addendum between the Client and Verifico. Verifico may engage sub-processors to help perform the specific Check(s) requested, such as document verification, biometric verification, screening, or address-verification data providers, and cloud hosting providers. Categories of such providers are described in Verifico's Privacy Notice, and a list of Sub-processors is available on request in accordance with the Data Processing Addendum.

I acknowledge and agree that my personal data may be disclosed to entities associated with Verifico where necessary to achieve the purpose of this processing. Verifico requires that such entities, and any other processors to which it discloses my personal data, implement appropriate technical and organisational measures to protect it.

1.2. Purpose and my identification.

My name and other means of identification for the purposes of this Consent shall be established in the course of the processing of my personal data carried out in accordance with this Consent. I acknowledge and agree that processing shall be carried out for the purpose(s) determined by the Client and described to me before this verification began. Depending on the Client's request, this may involve a document check, biometric identity verification, address verification, and/or identity fraud and screening checks, including via fraud prevention agencies, as described in Verifico's Privacy Notice.

1.3. Data processing methods and activities.

I acknowledge and agree that my personal data will be processed by means of automated extraction and verification of text and data, and other automated processing of photographs and scanned copies of documents that I provide. This Consent covers the following processing activities: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission to the Client, Verifico, and its processors, transfer (including cross-border transfer where necessary), combination, restriction, erasure and destruction.

My personal data may be checked against multiple data sources, which, depending on the Check(s) requested, may include screening lists (such as sanctions or politically exposed persons lists), address or credit-reference data sources, and fraud prevention databases.

1.4. Types of personal data subject to processing.

Depending on the Check(s) requested by the Client, this Consent covers the following categories of my personal data:

full name, and any former or middle names;
date and place of birth, and nationality;
residential address and contact details;
images of my identity document, including the document type, number, and expiry date;
facial image data, including photographs, selfie images, and, where applicable, video recordings;
biometric data, including facial geometry, where a biometric Check is required;
relevant publicly available data, such as whether I am a politically exposed person, where a screening check is required;
technical data, including the date, time, and nature of my activity on the Service, my IP address, device and browser information; and
a unique identifier created to associate me with my personal data within Verifico's systems.

This Part applies only where biometric identification, biometric identity verification, or biometric authentication is offered or required as part of my verification. Except as set out below, the general provisions (parties and roles, disclosure, rights, retention, and international transfers) apply equally to my Biometric Data.

For the purposes of this Consent, “Biometric Data” means (i) scans of facial geometry, and (ii) information derived from scans of facial geometry, where used to identify an individual. For clarity, photographs, video recordings, and audio recordings are not, of themselves, Biometric Data.

2.2. Specific Biometric Data processing purposes.

My Biometric Data may be collected, stored, used, disclosed, and otherwise processed by Verifico and its sub-processors for the following specific purposes:

to compare my live facial image or video with the image on my submitted identity document;
to determine whether the presented face appears live and genuine, rather than a spoof, mask, replay, static image, manipulated video, or deepfake;
to create and retain records necessary to demonstrate compliance with legal and contractual obligations;
Biometric Data is never used for one-to-many identification, to build or maintain a database of faces, or to train general or shared models.
to handle complaints and to establish, exercise, or defend legal claims; and
to support limited service improvement, quality assurance, and fraud-model calibration by Verifico, where permitted by applicable law and as described in Verifico's Privacy Notice.

2.3. How the biometric processing is performed.

Processing of my Biometric Data may include automated and, where necessary, manual capture, extraction, and conversion of facial images into scans of facial geometry; cross-comparison of scans of facial geometry; liveness analysis; anti-spoofing analysis; duplicate-identity detection; fraud scoring; and related recordkeeping. Human review may occur where needed for complaint handling, or legal and regulatory compliance. Verifico's automated tools support this process, but the final decision on my application or relationship is made by the Client, not by Verifico.

2.4. Jurisdiction-specific biometric retention limits.

My Biometric Data processed on the Client's behalf will be retained until the earliest of: (a) the point at which Verifico's contract with the Client no longer permits further processing; (b) deletion pursuant to the Client's documented instructions; or (c) the expiry of 90 days after completion of the verification session; or (d) any other event triggering Verifico's mandatory deletion obligations under applicable law. Where the following jurisdiction-specific retention limits apply to me, Verifico will observe them:

Illinois residents: Biometric Data will be retained for no longer than three (3) years from the date of my last interaction with the Service, or a shorter period (including the 90-day period above) if the purpose for processing is satisfied earlier;
Texas residents: Biometric Data will be destroyed within a reasonable time, and no later than one (1) year, after the purpose for collecting it expires; and
Washington residents: Biometric Data will not be retained for longer than is reasonably necessary to provide the requested Service to the Client, prevent fraud or security threats, or comply with a legal obligation.
residents of any other US state that classifies biometric data as sensitive or special category personal information under an applicable comprehensive privacy law (including, without limitation, California, Colorado, Connecticut, and Virginia): Biometric Data will not be retained for longer than is reasonably necessary to fulfil the purpose for which it was collected, and Verifico will otherwise apply the general retention principles set out above and any state-specific written retention schedule required by that state's law.

Neither the Client nor Verifico will sell, lease, or trade my Biometric Data. Verifico's general data retention and destruction practices are further described in its Privacy Notice.

3. RIGHTS, RETENTION AND GENERAL TERMS

3.1. Disclosure of my personal data.

My personal data (including Biometric Data) may be disclosed only to the extent reasonably necessary for the purposes described in this Consent and under applicable law, including to: (a) the Client; (b) Verifico's sub-processors that support the Service and are bound by confidentiality, security, and data processing obligations; (c) external data sources, registries, and screening providers used for identification, verification, authentication, or fraud-prevention purposes; and (d) courts, regulators, law enforcement bodies, or other authorities, where required by law, legal process, or a binding request.

3.2. International transfers.

Where my personal data is transferred internationally, Verifico will use lawful transfer mechanisms and safeguards required by applicable law, which may include adequacy decisions, the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses, or other legally recognised safeguards. Further detail is available in Verifico's Privacy Notice.

3.3. My data subject rights.

I confirm that I have been informed of my rights to:

withdraw this Consent at any time, where processing is based on my consent;
access and request correction of my personal data;
object, in writing and on justified grounds, to the processing of my personal data, including its transfer to third parties;
object to being subject to a decision based solely on automated processing;
request, in writing and on justified grounds, the erasure of my personal data, subject to applicable law; and
lodge a complaint with a competent data protection authority.

These rights may be exercised by contacting the Client directly, or Verifico using the details in its Privacy Notice. Some rights are not absolute and may be limited by the Client's or Verifico's own legal obligations. Withdrawing my consent to the biometric processing in Section 2 will not affect processing that took place before withdrawal, and may mean that I cannot complete this verification, or continue using a Service that requires biometric verification, unless the Client offers a non-biometric alternative.

3.4. Consequences of refusal or withdrawal.

I confirm that I have been informed that if I do not agree to this Consent, I will not be able to use the Service to complete the verification requested by the Client. I confirm that I have been informed that if I withdraw this Consent, my personal data will be deleted by Verifico in line with the Client's instructions, save to the extent retention is required by applicable law.

3.5. Retention.

I confirm that I have been informed that my personal data will be retained by the Client and Verifico and will be permanently destroyed once the Client's purpose for collecting it, and any retention period required by applicable law, has expired, in accordance with the Client's instructions, subject to the jurisdiction-specific biometric limits in Section 2.4 above, the 90-day limit for biometric data and the six-month limit for other verification data set out in the Data Processing Addendum (unless applicable law requires longer retention). Where Verifico independently determines a compatible purpose for retaining certain data for its own purposes, that data will be retained as described in Verifico's Privacy Notice.

3.6. My confirmations.

I confirm that: (a) I have read this Consent and Verifico's Privacy Notice and Terms of Service; (b) I have been informed in writing about how my personal data, including any Biometric Data, will be collected, stored, used, and otherwise processed; (c) I have been informed of the specific processing purposes and retention terms described above; (d) I know the Client's identity; and (e) I knowingly, voluntarily, and expressly give my informed consent, including electronic consent where permitted by law, to the processing described in this Consent. I confirm that I have carefully read all of the provisions above and that I voluntarily and unambiguously agree to them.

Roles in this Consent

1. GENERAL PROCESSING CONSENT