Veratad Technologies LLC (“Veratad”, “we”, “our” or “us”) is committed to protecting the privacy of those who entrust us with their personal information. Our clients and employees trust and expect that we will protect their personal information in accordance with the promises we make. “Personal information” means any information pertaining to an identified or identifiable individual and may include, for example, email addresses, contact details and any similar information provided to us in the course of our business operations. Personal information that is de-identified or anonymized is not considered personal information. This Privacy Policy details our commitment to your privacy.
Veratad provides various technology solutions to our clients focused on age verification, identity verification, fraud prevention and compliance. This Privacy Policy describes our privacy practices concerning information collected on our website, www.Veratad.com (the “Site”) and when you otherwise interact with us in connection with the services and products we provide to our clients (the “Client Services”).
Veratad does not provide services directly to individual end users. Individual end users should contact the Veratad client that uses our Client Services and/or review that client’s privacy policy to understand how the client uses personal data.
For Client Services, Veratad generally acts as a “data processor” (or “service provider”/“processor” under applicable U.S. state privacy laws), processing personal data on the documented instructions of our business clients, who act as the relevant controllers/businesses. Veratad acts as a “data controller” only for limited and specific processing activities related to Veratad’s own business operations (for example, our website, client communications, recruiting, billing/administration, and platform security, fraud prevention, and system integrity functions).
If you are an individual end user with questions about Veratad’s handling of biometric information in connection with Client Services, please see the section titled “Biometric Information Retention Policy (Illinois Residents and Others)”.
By using our Client Services, visiting the Site, or otherwise interacting with us, you are accepting the practices described in this Privacy Policy. We recommend that our clients review this Privacy Policy periodically, as it may be updated from time-to-time.
What information does Veratad collect, and how is it used and shared?
For the 12-month period prior to the date of this Privacy Policy, we explain here what categories of personal information we may have collected, where we got it from, and with whom we may have shared it:
Veratad will only use personal information to the extent it is necessary to deliver the Site and as directed by our clients to deliver the Client Services or as stated in this Privacy Policy. In some jurisdictions, individuals may have the right to withdraw consent from certain uses where consent is relied-upon. If you reside in such jurisdictions, you may have additional rights that are detailed herein. In all cases, any service providers will be contractually limited in the way they may use personal information maintained by Veratad, including requirements that such information be maintained in a confidential and secure manner. Where Veratad acts as a data controller for limited internal processing activities (such as platform security, fraud prevention, and system integrity), it has direct obligations to use personal information in a lawful and transparent manner.
In Connection with Business Transfers: In the event that a division, a product or all of Veratad is bought, sold or otherwise transferred, or is in the process of a potential transaction, personal information will likely be shared for evaluation purposes and included among the transferred business assets, subject to client contractual requirements and applicable law.
To Comply with Laws: Veratad may disclose personal information where such disclosure is required or permitted by applicable law, including in response to lawful requests such as subpoenas, court orders, or governmental inquiries, or as otherwise necessary to establish, exercise, or defend legal claims.
Where Veratad processes personal data on behalf of its clients, such disclosures are made in accordance with the instructions of the relevant data controller or as otherwise required by law. Veratad may also disclose personal information to its accountants, auditors, legal advisors, and other professional service providers subject to confidentiality obligations.
For legitimate interests: Veratad may use personal information for legitimate interests related to operating, securing, and improving its business and services, including fraud prevention, security monitoring, investigations, auditing, compliance, service administration, and protection of systems and networks. Where Veratad engages in marketing, such activities are directed to business contacts (e.g., client representatives and prospective clients) and not to individual end users whose data is processed through Client Services. Veratad does not use personal data processed through Client Services for unrelated advertising or consumer marketing purposes. Where required under applicable law, Veratad conducts and documents a legitimate interests assessment.
Veratad Personal or Confidential Information
If you choose to provide Veratad with personally-identifiable information–by sending us an e-mail message or by filling out an online form and submitting it to us through our Site, please be aware that we may use the information to improve our service to you, respond to your request, or send you relevant marketing information. Your message could be saved in an electronic database or forwarded, in print or as e-mail, to others within Veratad or its affiliated and subsidiary operations who may be better able to help you. Except as required by law or as necessary to use service providers acting on our behalf (under confidentiality and security obligations), we do not sell or rent email addresses to outside organizations.
Please note that e-mail is not secure from interception, so senders cannot expect privacy. This also applies to sending online forms, unless the form is secure. If you would rather not submit information via email, you may wish to send it by traditional mail or courier instead to the following address:
Veratad Technologies, LLC
500 Frank W. Burr Blvd
Teaneck, New Jersey 07666
You may also call Veratad at 201-510-6000 and ask to be referred to someone who may be able to answer your questions and provide you with instructions on how to submit your information.
Parts of the Veratad Site may use cookies to improve your experience and to track transactions while you are online. A cookie contains information that is either stored in your computer’s memory, or in a file on your computer’s hard disk. Veratad Cookies stored in your computer’s memory are automatically removed when you quit your browser. Veratad Cookies stored in a file on your computer’s hard disk will have an expiration date after which time they will no longer be valid.
Children’s Privacy
Our Client Services and our Site are not directed toward children and we do not knowingly solicit or collect personal information online from children under the age of 13 (or such applicable higher age of consent) without prior verifiable parental consent. If Veratad learns that a child under the age of 13 (or such higher applicable age) has submitted personal information online without parental consent, we will take all reasonable measures to delete such information from our databases and to not use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law). If you become aware of any personal information we have collected from children under age 13 (or such higher applicable age), please contact us at:
E-mail: info@veratad.com
Cross-border Transfer of Personal Information
In some cases, personal information that we process, including information from our clients and their employees and/or customers located in various countries, including in Canada, the European Economic Area, the UK and Switzerland or relative to queries or visitors to the Site may be transferred to the United States or other countries that may not have data privacy laws that provide equivalent protection as the countries where you reside. Veratad is certified under the EU-US Data Privacy Framework (EU-US DPF), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (Swiss-US DPF) and our full DPF Privacy Policy is available below.
EU-US Data Privacy Framework Policy:
Veratad Technologies, LLC (“Veratad”), complies with the EU-US Data Privacy Framework (EU-US DPF), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (Swiss-US DPF) as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union, the United Kingdom (UK, including Gibraltar) and Switzerland to the United States. Veratad has certified to the Department of Commerce that it adheres to the Data Privacy Framework (DPF) Principles. If there is any conflict between the terms in this privacy policy and the DPF Principles, the DPF Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
With respect to personal data received or transferred pursuant to the EU-US DPF, the UK Extension to the EU-US DPF and Swiss-US DPF, Veratad is subject to the regulatory enforcement powers of the US Federal Trade Commission. In certain situations, Veratad may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
We acknowledge the right of EU, UK and Swiss individuals to access their personal data. Where Veratad acts as a data controller, upon request, Veratad will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information. Where Veratad acts as a data processor on behalf of a client, requests relating to personal data processed through the Client Services should be directed to the relevant client acting as the data controller, and Veratad will provide reasonable assistance to such clients in accordance with applicable law. To request this information please contact us at info@veratad.com.
You may access, correct, or request deletion of your personal information processed or stored by Veratad by contacting us at info@veratad.com. Where Veratad acts as a data controller, we will respond to such requests within a reasonable time-frame. Where Veratad acts as a data processor on behalf of a client, such requests should be directed to the relevant client acting as the data controller, and Veratad will provide reasonable assistance to that client as required under applicable law.
We may retain your information for as long as your account is active or as needed to provide you services, comply with our legal and audit obligations, resolve disputes and enforce our agreements.
We will also provide EU, UK or Swiss individuals with an opt-out choice or opt-in choice for sensitive data before we share their data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized.
To limit the use and disclosure of your personal information, please submit a written request to info@veratad.com.
In compliance with the EU-US and Swiss-US DPF Principles, Veratad commits to resolve complaints about your privacy and our collection or use of your personal information. European Union, United Kingdom or Swiss individuals with inquiries or complaints regarding this privacy policy should first contact Veratad at:
Email: info@veratad.com
Veratad Technologies, LLC has further committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, DATA PRIVACY FRAMEWORK SERVICES, operated in the U.S by BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers for more information and to file a complaint. This service is provided free of charge to you.
IF YOUR DPF COMPLAINT CANNOT BE RESOLVED THROUGH THE ABOVE CHANNELS, UNDER CERTAIN CONDITIONS, YOU MAY INVOKE BINDING ARBITRATION FOR SOME RESIDUAL CLAIMS NOT RESOLVED BY OTHER REDRESS MECHANISMS. FOR MORE INFORMATION, PLEASE VISIT https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.
Veratad Processing of Personal Data
Veratad is responsible for the processing of personal data it receives and subsequently transfers to a third party acting as an agent on its behalf, under the Data Privacy Framework. These third parties include trusted and verified data providers, such as credit bureaus, government entities, mobile carrier’s as well as providers of identity document and biometric evaluation services, all for the purpose of verifying the age and identity of our client’s end users as provided in our Client Services. Veratad complies with the DPF Principles, including the onward transfer liability provisions. In cases of onward transfer to third parties of data of EU, UK or Swiss individuals received pursuant to the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF, Veratad is potentially liable unless we can prove we were not a party giving rise to the damages. In the course of providing our verification services, Veratad may receive the personal information of our client’s customers, which is processed primarily on behalf of and under the instructions of such clients for the purposes of verifying age and/or identity, and may also be used in a limited manner by Veratad for security, fraud prevention, system integrity, and service improvement activities as described in this Privacy Policy. This personal information we receive may include identity attributes such as name, address, date of birth, government-issued identification information, contact details (such as email address and phone number), and, where applicable, document images, verification signals, or other data elements provided by customers or verification providers.
Veratad does not operate as a data broker or aggregator of consumer profiles. Instead, Veratad processes personal data on a transactional, request-driven basis, either by accessing information from trusted third-party data providers or by processing information provided by customers and their end users as part of the Client Services.
Upon completion of a verification transaction, Veratad does not retain full underlying identity data as part of a persistent consumer profile. Veratad may retain limited information (such as transaction logs, security records, document images where applicable, and fraud or abuse prevention signals) where necessary to operate, secure, and support the Client Services, including certain Veratad-operated verification components, and in accordance with contractual, legal, and regulatory requirements.
Sharing Your Personal Data with Third Parties
Veratad shares personal data with third parties only as necessary to deliver its services and in accordance with applicable law and contractual obligations. In connection with Client Services, Veratad shares personal data with trusted and verified third-party providers, such as credit bureaus, government entities, mobile carriers, and providers of identity document and biometric evaluation services, solely for the purpose of performing identity verification, age assurance, fraud prevention, and related services on behalf of its clients and in accordance with their instructions.
Veratad also shares personal data with service providers acting on its behalf (such as payment processors and infrastructure providers), who are contractually bound to process personal data only for specified purposes, maintain confidentiality, and implement appropriate security measures. Veratad does not disclose personal data to third parties for independent marketing or commercial purposes.
Biometric Information Retention Policy (Illinois Residents and Others)
This Biometric Information Retention Policy is provided pursuant to the Illinois Biometric Information Privacy Act (“BIPA”) and other applicable laws that govern the collection of biometric data. It also describes the purpose for which your biometric data may be collected, an applicable retention schedule, and guidelines for permanently destroying your biometric data.
Purpose of Collection. Veratad’s access to, processing, or collection of your Personal Information in connection with the Client Services, if any, may include biometric identifiers and/or biometric information (collectively, “biometric data”). Veratad does not interact directly with you with respect to collection of your biometric data. Through our clients and at their specific direction, Veratad may access, process, and store your biometric data for the purpose of verification services, fraud prevention, and/or long-term proof of inspection of your provided form of identification, on behalf of and as instructed by our clients. Where required by law, Veratad’s clients must obtain consent to collect or possess your biometric data. Veratad will not sell, lease, trade, or otherwise profit from your biometric data.
(1) The Illinois Biometric Information Privacy Act, 740 ILCS 14/1 et seq., the Business and Commerce Code of Texas, on the Capture or Use of Biometric Identifiers, Tex.Bus.& Comm.Code § 503.001, the Washington Biometric Statute, Wash. Rev. Code § 19.375.010, Quebec’s Bill 64 and Law 25, and other proposed and enacted legislation across domestic and foreign jurisdictions, regulate the collection, storage, use, and retention of “biometric identifiers” and “biometric information”. “Biometric identifier” means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. Biometric identifiers do not include writing samples, written signatures, photographs, human biological samples used for valid scientific testing or screening, demographic data, tattoo descriptions, or physical descriptions such as height, weight, hair color, or eye color. “Biometric information” means any information, regardless of how it is captured, converted, stored, or shared, based on an individual’s biometric identifier used to identify an individual.
(2) Veratad, individually or through its service providers, may collect and process certain biometric identifiers and biometric information, namely face scan information (face geometry information ), during the identity verification process. Veratad processes this information on behalf of its clients this information to verify your identity, prevent fraud, and provide authentication Services to our Clients in accordance with their instructions on an ongoing basis.
(3) For Illinois residents, we will permanently destroy their biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within 3 years of the individual’s last interaction with Veratad’s Clients, whichever occurs first.
(4) For Texas residents, we will permanently destroy their biometric identifiers the later of (1) one year after the purpose for collecting the identifier expires, or (2) one year after any recordkeeping obligations imposed by law in connection with the collection of the biometric identifier expires.
(5) For Washington residents, we will retain their biometric identifiers as long as reasonably necessary to provide the service for which the biometric identifier was enrolled, and will permanently destroy their biometric identifiers thereafter.
(6) For Quebec residents, we will permanently destroy their biometric identifiers once the purposes for which personal information was collected or used are achieved.
(7) For all other residents, we will permanently destroy their biometric identifiers once the purposes for which collecting or maintaining such information has been satisfied.
8) Except where prohibited by law, your biometric data is accessible only to us and our service providers, which process your data only on our behalf to provide the Services. We do not disclose biometric data to third parties except as necessary to provide the Services on behalf of our clients and in accordance with applicable law. The Client on whose behalf Veratad processes your data may receive from us information about you, such as copies of the identification document and photo you provided us, and data indicating whether we were able to identify and authenticate your identity, but we do not disclose to Clients your biometric data.
9) By giving your consent prior to the verification or authentication process, and choosing to continue, you acknowledge and agree that you have read the relevant disclosures, and that you voluntarily consent to Veratad’s, or its service providers’, collection, storage, retention, use, and disclosure of your biometric data.
(10) Veratad does not sell, lease, trade or otherwise profit from the biometric data.
Arbitration
This Privacy Policy is subject to Veratad’s Terms of Service, including a binding individual arbitration provision and class action waiver. By giving your consent prior to the verification or authentication process, and choosing to continue, you thereby by agree to Veratad’s Terms of Service and the arbitration provision and class action waiver therein.
Changes to this Privacy Policy
We may update this Privacy Policy, and our Terms of Use, from time to time to reflect changes in our services or in applicable laws.
General Data Protection Regulation (GDPR)
When Veratad processes personal data, it does so to operate our business, provide the Site, and deliver Client Services to our business clients, consistent with this Privacy Policy and applicable law. In the context of Client Services, Veratad primarily processes personal data on behalf of its customers acting as data controllers, and does so in accordance with their documented instructions.
When you visit our website as an individual, you may have certain rights under the GDPR regarding the use of your personal data, these are:
- The right to object – you can object to Veratad processing your personal data at any time. Email info@veratad.com to object.
- The right to be forgotten – you can request deletion of your personal data. Where Veratad processes personal data on behalf of a client acting as the data controller, such requests should be directed to that client. Veratad will assist its clients in responding to such requests in accordance with applicable law and contractual obligations. Email info@veratad.com for assistance.
- The right to access your personal data – you have the right to know what personal data is processed about you and for what purpose (commonly referred to as a Data Subject Access Request or “DSAR”). Where Veratad processes personal data on behalf of a client acting as the data controller, requests should be directed to that client. If you are unsure who the relevant controller is, you may contact Veratad at info@veratad.com and we will assist in directing your request appropriately. Veratad will also assist its clients in responding to such requests where required under applicable law and contractual obligations. These requests must be made in writing by email or letter, and Veratad may take reasonable steps to verify the identity of the requester before responding. Email info@veratad.com for assistance. Or by mail to:
Thomas Canfarotta
Director of Client Quality Services
Veratad Technologies, LLC
500 Frank W. Burr Blvd Teaneck, NJ 07666
5th Floor Suite 14
Teaneck, New Jersey 07666
- You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: https://edpb.europa.eu/about-edpb/board/members_en, and for UK citizens here: https://ico.org.uk/make-a-complaint/uk-extension-to-the-eu-us-data-privacy-framework-complaints-tool/. If you need further assistance regarding your rights, please contact us using the contact information provided above and we will consider your request in accordance with applicable law. In some cases our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.
Veratad’s GDPR Role: Data Processor and Limited Controller
Veratad primarily acts as a data processor in relation to the Client Services, processing personal data on behalf of its customers, who act as data controllers and determine the purposes and means of processing. Veratad processes personal data in accordance with customer instructions and does not independently determine final eligibility or access decisions relating to end users.
Veratad may also act as a data controller for limited and specific internal processing activities, such as platform security, fraud prevention, system integrity, compliance, and limited testing and improvement of its services, in each case where Veratad determines the purposes and means of such processing.
In relation to Client Services, Veratad does not determine the purposes for which personal data is processed and operates under the instructions of its customers acting as data controllers. Veratad’s customers determine the purposes of processing and the categories of data used in connection with their services. Data partners may determine the purposes of processing in relation to the data they provide, in accordance with their own legal and regulatory obligations. Veratad processes personal data in accordance with these instructions and applicable contractual requirements. Veratad does not independently determine the collection of personal data at the point of capture or the legal basis for such collection.
Veratad’s customers, acting as data controllers, determine which individuals’ data is collected and whether such data is disclosed, and to whom. Data partners determine the purposes of processing in relation to the data they provide in accordance with their own legal obligations. Customers are responsible for the information contained within the applicable privacy notices provided to individuals.
If Veratad receives a subject access request (SAR) related to the services we provide, we will direct the request to the relevant data controller and provide reasonable assistance in responding, in accordance with applicable law and contractual obligations.
California Residents (Effective January 1, 2020)
If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”). While the Veratad Privacy Policy addresses the required disclosures about your Personal Information, this supplement to the Veratad Privacy Policy is an overview of the information required by the CCPA and provides instructions on how to exercise the rights granted by the CCPA.
Disclosures About Your Personal Information
As described in the Veratad Privacy Policy, to support your relationship with Veratad or your interaction with our Site and business services, we may have collected and disclosed, for a business purpose, information from the following categories in the last twelve months:
- Information necessary to provide you with access to and use of our websites, products and services
- Information necessary to respond to your request for information, order or support
- Information about interactions with our Site and business services
- Business contact information of clients, prospects, partners and suppliers
- Information about visitors to our sites and locations
- Information collected for marketing to business contacts and for internal analytics
This includes Personal Information defined by the CCPA as:
- Identifiers such as IP address and cookies
- Personal information under the Customer Records provision of the California Civil Code such as your name, postal address, email address or payment information you provide to purchase an Veratad product or service
- Commercial information related to purchases of Veratad products or services
- Internet activity information relating to your interactions with Veratad websites
- Audio, electronic and visual information such as visitors’ presence on security systems at Veratad offices
- Professional information such as your employer name and job title
- Inferences about your consumer preferences
Sources and Sharing of Personal Information
The Veratad Privacy Policy describes the types of sources from which we collect Personal Information and how we share your information with third parties. As explained, we may collect Personal Information directly from you, automatically from your device, from selected partners and/or from your employer. We may share information about you with our subsidiaries, suppliers and, where appropriate, with selected partners to help us provide you, or the company you work for, products or services, or to fulfill your requests, or with your consent.
Sale of Personal Information
When you use Veratad websites, Veratad’s authorized partners may collect cookies and similar technologies and use this data for their own purposes. This activity may qualify as a “sale” or “sharing” under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”). You can make choices to allow or prevent such uses. Depending on your choices, during the past twelve months, we may have “sold” or “shared” personal information collected through our websites and online services within the following categories defined by the CCPA:
- Identifiers like IP address and cookies
- Internet activity information relating to your interactions with Veratad websites
- Inferences about your consumer preferences
Know your Personal Information
You can request specific pieces of Personal Information, or information about the categories of Personal Information that Veratad holds about you by submitting a request through our webform here or by calling us (toll free) 888-510-7343.
You can request the deletion of the Personal Information that Veratad holds about you by submitting a request through our web form here or by calling us (toll free) 888-510-7343.
Opt-Out of the Sale of Personal Information
When you use Veratad websites, Veratad’s authorized partners may collect cookies and similar technologies and use this data for their own purposes. This activity may qualify as a “sale” or “sharing” under the CCPA. You can make choices to allow or prevent such uses. To opt-out of Veratad making information relating to cookies, and similar technologies, available to third parties for their own purposes, email: Veratad at info@veratad.com
If you are accessing our websites while located outside of California, you can opt out by going to “Cookie Settings” in the footer and setting your cookie preferences to “Required.”
Non-Discrimination
If you choose to exercise any of these rights, we will not deny goods or services to you or provide different quality of services.
How to Contact Us
Questions about this Policy or about Veratad’s handling of your Personal Information may be submitted by email at info@veratad.com.
LAST UPDATE March 3, 2026
