Last updated on: December 4, 2024
The AgeGuardian Age Verification Service ("AVS") is provided by AgeGuardian Inc. This privacy information covers the age checking methods we provide for this product.
This privacy information will refer to AgeGuardian as 'us' and the organization you're interacting with to prove your age as the 'Organization' or 'Client'.
When you use AVS, AgeGuardian is the service provider / processor on behalf of our Clients (the organization that requested you complete an age check in order to access their products/services). This means that our Clients are responsible for the processing of your personal information and you should contact the Client for any questions on the use of your data.
AgeGuardian AVS has been designed to give you a quick, privacy-friendly way to prove your age online. The process works as follows:
No directly identifiable information is shared back with the AgeGuardian Client – they only receive the result of the age check.
AVS has various different methods that can be used to verify age:
The AgeGuardian Client decides which of the above age-checking methods it wants to use and whether they want to receive your age in years or if you are 'over' or 'under' their specific age requirement.
Depending on the age-checking method, the AgeGuardian Client may also choose to enhance the security of the check and use your information to:
This check uses your selfie to analyze and estimate your age. You'll be asked to take a selfie using the camera on your device. This captures a single facial image which will be analyzed by our age estimation technology to determine whether you are over or under the required age.
If requested by the AgeGuardian Client, we analyze the image with liveness detection technology to ensure it is of a real person and not a 2D image, mask, or bot.
AgeGuardian deletes the image as soon as an age estimate is given – no images are shared with the Client.
This check uses your ID document to determine your age. You'll be asked to scan your ID document using the camera on your device. We extract the information from your ID document and calculate if you are over the Client's age requirement using your date of birth.
If the AgeGuardian Client wants extra security for their IDV check, they will ask you to take a selfie using the camera on your device. This is to make sure the ID document belongs to you and is how we stop fraudsters from impersonating you. Multiple images will be captured, and the clearest image will be compared to the photo on your ID document using face matching technology.
This check uses your email address to estimate your age. You'll be asked to submit your email address, which we will share with the third-party provider.
The third-party provider checks marketing and other databases for which advertising segments your email address is linked to and these are cumulatively used to estimate age. Such advertising segments may include 'Home Own or Rent', 'Credit Card Holder Bank', 'Refinance Loan Type', 'Household Income', 'Number of Credit Lines', etc.
For most age-checking methods, the data is deleted as soon as the check is complete. In some cases, the AgeGuardian Client will configure the AgeGuardian service so that the maximum amount of time that AgeGuardian has access to your personal data to perform the check is 28 days. This will depend on the AgeGuardian Client and its specific requirements.
After 28 days (or sooner if chosen by the Client), AgeGuardian may continue to store the results of the age checks on behalf of the Client, according to the retention period set by them as controller. AgeGuardian does not have access to the data following the initial 28 days.
Where AgeGuardian is under a legal or statutory obligation to retain your data, for example, due to a valid request from law enforcement, we will keep your data for longer.
AgeGuardian shares the results of the age checks with the AgeGuardian Client that has requested for you to complete an age check. These results include (depending on the Client's configuration):
We also share information with:
Where AgeGuardian are required to share data we always make sure that we only share what data is required to fulfil the purpose.
Checks and results of checks processed on AgeGuardian servers in AgeGuardian Tier 2 data center(s) within the UK or in a US, EU, UK AWS region.
Third-party providers may process data in different locations. Where this processing involves a cross-border transfer of data, AgeGuardian ensures there are appropriate technical and organizational measures in place to protect the data, and that such transfers are made in accordance with legal requirements.
If you want to exercise your rights in relation to your check, you should contact the AgeGuardian Client that requested you complete the check as they are responsible as the controller.
AgeGuardian is the service provider and so you should contact the Organisation that requested you complete the age check to exercise your rights in relation to your data.
If you have any questions about AgeGuardian or what is included in this privacy information, you can contact AgeGuardian using the below:
Email: privacy@ageguardian.net