Privacy Policy

Last updated: January 8, 2026

1. Introduction

IdentityFirst Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our identity assurance platform and services.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

Account registration information (name, email, company name)
Profile information and preferences
Communication and correspondence with us
Payment and billing information

2.2 Identity Data

As an identity assurance platform, we process identity-related data on behalf of our customers, including:

User authentication events and session data
Access permissions and role assignments
Identity provider configurations
Security logs and anomaly detection data

2.3 Automatically Collected Information

When you access our services, we automatically collect:

Device and browser information
IP addresses and location data
Usage patterns and analytics
Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our identity assurance services
Detect and prevent security threats, anomalies, and policy violations
Process your transactions and send related information
Send you technical notices, updates, and security alerts
Respond to your comments, questions, and customer service requests
Monitor and analyze trends, usage, and activities
Comply with legal obligations and enforce our terms

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

With your consent: When you authorize us to share information
Service providers: Third parties who perform services on our behalf
Business transfers: In connection with mergers, acquisitions, or asset sales
Legal requirements: When required by law or to protect rights and safety
Aggregated data: De-identified, aggregated data for analytics and research

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit and at rest
Regular security assessments and penetration testing
Access controls and authentication mechanisms
Employee training on data protection and security
Incident response and breach notification procedures

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Identity monitoring data is typically retained for 12 months, with aggregated analytics retained indefinitely.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

Access and receive a copy of your personal information
Correct inaccurate or incomplete information
Request deletion of your information
Object to or restrict processing of your information
Data portability to another service provider
Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@identityfirst.net

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission.

9. Cookies and Tracking

We use cookies and similar technologies to provide and improve our services. You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features.

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us:

IdentityFirst Ltd

Data Protection Officer

Email: privacy@identityfirst.net

Email: info@identityfirst.net

Registered Office: 71-75 Shelton Street, Covent Garden

London, WC2H 9JQ, United Kingdom

Company No: 15234567 (England & Wales)