iProov Limited (“iProov,” “we” or “us”) are committed to protecting privacy when we process our users’ data. These Terms set out what personal information we collect and process when you use the iProov.me application (“iProov.me”), your data rights and how to exercise them, and some limited obligations you have when using iProov.me.
We are a controller of your facial authentication data and of the identity document data (we collectively call this your “digital credential”) that you provide when using iProov.me and we process it:
You can’t proceed to use iProov.me unless you both agree to these Terms and give us your consent to processing your facial imagery in order to identify you – by clicking each of the buttons at the bottom of these Terms.
If you don’t agree with something you see in these Terms or feel uncomfortable about allowing the use of your digital credential to authenticate your identity, then you should not click those buttons, and use other channels for authenticating yourself when you travel – such as the standard ticket check service – and not use the Eurostar SmartCheck Lane.
Once you have given your consent you can withdraw it (see Your Consent below), but if you do so after you Confirm Travel (see The Process below), your digital credential will have already been sent to Eurostar.
The copyright and other intellectual property in iProov.me is either owned by or licensed to us. You have certain obligations that are intended to protect our rights (see Your Obligations below). We licence you the limited, personal right to use iProov.me in the manner and for the purposes stated in these Terms.
iProov is responsible for adhering to applicable data protection law and for protecting your privacy and data in line with these Terms.
In order to use iProov.me for identifying you, you must provide us with your consent by clicking on the appropriate consent button.
You are given the opportunity to consent to iProov processing your digital credential for the purposes described in these Terms. If you wish not to share your data or if you wish to withdraw your consent, you can do so by deleting your digital credential from iProov.me – by opening iProov.me and following the instructions given there. Note that if you withdraw your consent after you Confirm Travel (see The Process below), your digital credential will already have been sent to Eurostar.
When you enrol with iProov.me and create your digital credential, an image is taken of you and the NFC chip on your passport and is used by iProov for fraud checks. These checks may continue for up to 30 days after enrolment. If you have deleted your digital credential or if you would like this data deleted from iProov’s systems, you can send an email to deletemydata@iproov.com where we will delete your data if we can identify you.
Once you have been authenticated using your digital credential, we send certain of your data to Eurostar (who then send it on to UK Border Force) – more detail is provided in The Process below.
When you use iProov.me for your Eurostar travel
You can easily stop our processing on your mobile device and on iProov’s kiosk by deleting your iProov.me account. However, note that if you do so after you Confirm Travel the biometric profile of your face and the passport data from your digital credential will have automatically been sent to iProov’s kiosk at the Eurostar terminal, and will continue to be processed and transferred as described in The Process above and:
If you have downloaded iProov.me, you have done so to register for travel with Eurostar. Eurostar and iProov are separate companies. Eurostar have their own privacy notice explaining their privacy practices and how they control or process your data. Their terms are different to iProov’s, and we recommend that you review their privacy notice where it is identified to you.
The day before you are scheduled to travel with Eurostar, you will see a “Confirm Travel” button. You will need to click this button to proceed with using SmartCheck.
When you arrive at iProov’s kiosk on the day you travel your face is matched to your biometric data by iProov. Your ticket information is validated with Eurostar – if the face match and ticket validation are successful, your MRZ is sent to Eurostar who then sends it on to the UK Border Force.
Consent
We process your biometric data used to identify you based upon your consent. You can withdraw that consent at any time using the information provided in these Terms.
Contract
We process some of your personal data to help facilitate your travel contract with Eurostar and these Terms and Privacy Notice.
Legitimate Interests
iProov has a legitimate interest in fraud prevention and detection, and processes some of your personal data for those purposes.
Your data is not transferred outside of the UK or EU.
iProov and its business partners host all the data they collect in the United Kingdom and countries located within the European Union. Data is not transferred anywhere else.
You can contact iProov to provide access to your data if we have any about you and we’re able to associate with you, and ask us to restrict or suspend any processing we undertake.
You can withdraw consent, delete, or correct your data held within iProov.me yourself by following the instructions that are given within iProov.me.
Under data protection legislation you have a range of rights:
If you wish to exercise any of the rights set out above, please contact us at the email address specified below. You will not have to pay a fee to exercise any of your legal rights as specified above. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the relevant personal information (or to exercise any of your other legal rights). This is in part a security measure we take to help avoid your personal information being disclosed to a person who has no right to receive it, but also because we hold very limited information from which we can identify users. We will also need you to provide some information found within iProov.me at the bottom of your profile on the privacy profile page. This information is your unique identifier under the build number called ID.
We try to respond to all legitimate requests within one month. However, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Note that iProov.me gives you a lot of control over your data. Where you wish to exercise the following rights, you can do so in iProov.me yourself:
Your data is securely stored on your mobile device and is encrypted wherever it is transferred or stored by iProov. iProov tests security to ensure your data is well protected at all times.
iProov has implemented several key security and privacy policies, controls, and measures to adhere to and to meet the requirements of the GDPR / Data Protection Act 2018. These include regular security tests, independent assessment and certification to certain international information security standards that meet the requirements of data protection law. The data held within your mobile device and any transactions from it are encrypted.
Children under the age of 16 should not attempt to use iProov.me.
If you want to contact us about data protection or privacy, please send an email to deletemydata@iproov.com.
If you have any questions about these Terms or about any requests to exercise your legal rights, please send an email to DPO@iproov.com.
If you would like to ask a question or make a complaint, please send an email to DPO@iproov.com If you feel we cannot help you, you can contact the ICO or a supervisory authority in your country.
If you have any questions about these Terms or about any requests to exercise your legal rights, please send an email to this address DPO@iproov.com and we will assist you.
You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection issues (www.ico.org.uk) if you are based in the UK. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so would request that you contact us in the first instance.
We are registered with the ICO under number ZA441165.
If you live in the EU, iProov’s EU representative can be contacted at:
IProov Netherlands B.V.
Siriusdreef 17 Transpolispa,
Hoofddorp,
213WT
Company number 74408259
Email: eurepresentative@iproov.com
If you are not happy with the way that iProov has dealt with your data or your rights, you can make a complaint at any time to a Data Protection Supervisory Authority in your country. A list of EU Supervisory Authorities can be found here: https://edpb.europa.eu/about-edpb/about-edpb/members_en
In order to protect our and third parties’ rights in iProov.me, you must not:
“SmartCheck” and “Eurostar” are trade marks or registered trade marks of Eurostar International Limited
“iProov” and “iProov.me” are trade marks or registered trade marks of iProov Limited