1. Introduction
Identity Checker Ltd (trading as IdentityChecker, company number 13436825, 162-164 High Street, Rayleigh, Essex, SS6 7BS) takes the protection of your Personal Data very seriously and strictly adheres to the rules laid out by the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other data protection laws.
For the purposes of this Privacy Policy, "Personal Data" is defined as information relating to a living person that can be used to identify that person directly or indirectly.
This Privacy Policy gives you information on how we collect and process your Personal Data through your use of this site, https://public.identitychecker.co.uk/, and any data you may otherwise provide to us regarding our products and services.
Our site, and various items of correspondence sent to you, may contain links to other websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any Personal Data to these websites.
2. Why we collect your Personal Data
As the data "Controller", we collect your Personal Data to conduct identity verification (ID) and Anti-Money Laundering (AML) checks on behalf of our clients, which are done through a third-party supplier, who are the data "Processor".
To do this, we provide your full name, date of birth, contact information and nationality to the data Processor, who in turn requests biometric data and further information from you to carry out the checks. Once done, the results, additional data and supporting documents are shared with us.
As the data Controller, we share these results, additional data and supporting documents with the data subject, the primary service provider, and third-party partners of the primary service provider authorised by you to receive the data.
3. Lawful basis of processing data
We collect and process Personal Data about you when the law allows us to, such as when:
- the data subject (you) has given consent to the processing activity taking place, or
- the processing is necessary for the performance of a contract, or
- the processing is necessary for compliance with a legal obligation to which the controller is subject, or
- the processing is necessary for the purpose of the legitimate interest pursued by us or our partners.
Determination of legitimate interest is a three-step process:
- The purpose test: to identify the legitimate interest
- The necessity test: to consider if the processing is necessary for the purpose identified
- The balancing test: to consider the individual's interests, rights or freedoms and whether these override the legitimate interests identified
4. What information we collect and where from
We collect information from you when you communicate with us, request a quote from us, or use any of our services. During any of these interactions, we may ask you to provide us with information that can be used to contact or identify you.
Personal Data that we may collect, store and use includes:
- Full name
- Date of birth
- Contact number
- Email address
- Nationality
- Current address (including postcode)
- Bank statements
- Proof of address documents
- Identity documentation and passports
4.1 Special category data
We do not collect or store any special categories of data from you directly, but special category data is provided to us in the results supplied by the Processor, which we do collect and store.
4.2 Website enquiries
If you contact us using a form on this website, we collect your name, email address and, if you choose to give them, your phone number, company name and message. We use these details only to respond to your enquiry, for example to arrange a demo or call you back. Our lawful basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
Your enquiry is sent to our team by email and is not stored in a database on this website. We keep enquiry emails for up to 24 months after our last contact with you unless you become a customer, in which case our customer records apply. We will not add you to a marketing list.
To protect the form from abuse, we keep a one-way, keyed hash of your IP address for up to one hour to limit the number of messages that can be sent. We cannot turn this hash back into your IP address.
5. How long we keep data
IdentityChecker retains your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
All special category data is purged after the expiry of 6 months from the collection date.
6. Security of Personal Data
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Your Personal Data is securely stored on dedicated hosted servers within an ISO 27001 certified tier-3 data centre in the UK, which is also SSL secure.
We will ensure your data is secured in accordance with our obligations under the UK's data protection laws. We have in place technical and organisational measures to ensure data is secure and to prevent your Personal Data from being accessed in an unauthorised way, altered or disclosed. We also have a robust access control policy in place which limits access to your Personal Data to those employees, contractors and other third parties who only have a business need to know.
We will ensure that all employees have had information security and data protection training.
7. Your individual rights
In this section, we have summarised the rights that you have under the UK GDPR. Some of the rights are complex, and not all the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
Your principal rights under the UK GDPR are:
- Right to object
- Right of access
- Right to be informed
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Rights related to automated decision making including profiling
The right to object
You can exercise this right if:
- Processing relies solely on legitimate interest
- Processing is for scientific or historical research
- Processing includes automated decision making and profiling when not necessary
- Processing is for direct marketing purposes
The right of access
You or any third party acting on your behalf with your authority may request a copy of the Personal Data we hold about you without charge.
We will ask to verify your identity or request evidence from the third party that they are acting on your behalf before releasing any Personal Data we hold about you.
The right to be informed
We are required to provide clear and transparent information to you about how we process your Personal Data. This Privacy Policy addresses this right.
The right to rectification
If you believe the Personal Data we hold about you is incorrect or incomplete, you have the right to correct this and you may exercise this right along with the right to restrict processing until these corrections are made.
The right to erasure
If there is no legal basis or legitimate reason for processing your Personal Data, you may request that we erase it.
The right to restrict processing
You may ask us to restrict the processing of your Personal Data. This means we will still hold it but not process it. This is a conditional right which may only be exercised when:
- Processing is unlawful
- We no longer need the Personal Data, but it is required for a legal process
- You have exercised your right to object to processing and require processing to be halted while a decision on the request to object is made
- You are exercising your right to rectification
The right to data portability
You can request that your Personal Data is transferred to another Controller or Processor in a machine-readable format if:
- Processing is based on consent
- Processing is by automated means (i.e. not paper based)
- Processing is necessary for the fulfilment of a contractual obligation
Rights relating to automated decision-making including profiling
You have the right to object to the processing of your Personal Data in certain circumstances. In other cases, we may continue processing your Personal Data if we have a compelling reason for doing so.
If you have any questions about these rights, please see section 14, "Additional information".
8. Consent
Where you have given consent for processing Personal Data you have the right to withdraw this consent at any time, but this will not affect the lawfulness of processing based on consent before its withdrawal.
9. Cookies
Cookies are small text files that are placed on your device by websites that you visit. Our Cookie Policy explains which cookies and similar technologies we use on this website, the IdentityChecker platform and our mobile app, and how to control them.
10. Automated decision making
Your Personal Data is not used in any automated decision making (a decision made solely by automated means without any human involvement) or profiling (automated processing of Personal Data to evaluate certain conditions about an individual).
11. Transfers to third parties
IdentityChecker transfers data to various third parties to deliver selected services and products. All third parties are required to protect the Personal Data we provide to them. We may share data with several or all of the following categories of recipients:
- Cloud providers
- Web analytics and search engine providers, to ensure the continued improvement and optimisation of our website
- Primary service providers
- Authorised third-party partners of the primary service provider
12. Transfers outside of the UK and EEA
IdentityChecker does not share any Personal Data outside of the EEA. However, should this change, any Personal Data transferred will be treated with the highest security standards as required by data protection laws.
Should Personal Data be transferred outside of the UK or EEA to a country without an adequacy decision, we will ensure appropriate safeguards are in place prior to the transfer. These could include:
- Standard Contractual Clauses with the UK Addendum
- International Data Transfer Agreement
- Binding Corporate Rules
- An exception as defined in Article 49 of the UK GDPR
12.1 Sharing of your data with third parties
IdentityChecker shares your ID and AML results with your primary service provider.
Where IdentityChecker has access to your data, we may share it in specific circumstances, such as:
- Suspected or confirmed identity fraud or other offences
- Valid and legally binding requests for data from third parties
- To verify your details with trusted third parties
We do not sell your data.
13. Right to complain
We take any complaints about our collection and use of Personal Data very seriously.
If you think that our collection or use of Personal Data is unfair, misleading or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance by emailing admin@identitychecker.co.uk.
You can also complain to the Information Commissioner's Office (ICO):
- By post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Online: ico.org.uk/make-a-complaint
- By phone: 0303 123 1113
14. Additional information
Your trust is important to us. If you have any questions that are not answered by this Privacy Policy, or if you wish to receive more in-depth information about any topic within it, please email admin@identitychecker.co.uk.
15. Policy review and amendments
We keep this Policy under regular review. It was last updated on 21 October 2026.
We reserve the right to update this Privacy Policy at any time, and we may notify you in other ways from time to time about the processing of your Personal Data.