In order to effectively and securely confirm the identity of individuals, Olliv may use a biometric identification system. Olliv may use a third-party biometric online verification system or vendor, including by not limited to, Persona Identities, Inc. (“Persona”) and Veriff OÜ (“Veriff”), to supply it with biometric identification systems or services.

In order to comply with applicable law concerning biometric data (including the Illinois Biometric Information Privacy Act), Olliv has instituted the following policy:

Biometric Data Defined

As used in this policy, biometric data includes “biometric identifiers” and “biometric information” as defined in the Illinois Biometric Information Privacy Act, 740 ILCS § 14/1, et seq, and Texas Bus. & 503.001.

Biometric Data Collection & Use

As part of your use of certain Olliv services, you may be asked to verify your identity. Olliv’s vendor will generate biometric data by analyzing images of your face during this verification process. Olliv and its vendors may utilize biometric technology and collect this biometric data solely for the purposes of confirming the identity of potential or existing customers, security, and fraud prevention.  Olliv and its vendors may also use the data collected to improve their services and internal operations. 

Authorization

If you elect to use Olliv features that require facial verification through these biometric technologies, you will use an input device or terminal designated to collect your biometric data. By using these Olliv services and participating in the verification process, you consent to the collection and use of your biometric data by Olliv and its vendor(s) in accordance with this policy.

Disclosure

As indicated above, some of the features through which you are asked to provide biometric data may be operated on Olliv’s behalf by Persona, Veriff, or another third-party vendor. Olliv discloses (or permits the direct collection of) biometrics data to/by to such vendor(s) for the purposes of operating the identity-verification systems they provide to Olliv. Olliv will not sell, lease, trade, or otherwise profit from an individual’s biometric identifiers or biometric information. Nor will it authorize its identification vendors to engage in any such activity. (Olliv does, however, pay its vendors for the services they provide.) Persona, Veriff, or any other vendor used in accordance with this policy may engage with third parties to assist in providing the identification services, including hosting, cloud services, and other information technology services; email communication and SMS software providers; and identity verification services, background check providers, public and private records database providers, consumer reporting services, and fraud and identity management providers.  Neither Olliv nor its identification vendors will disclose or disseminate an individual’s biometric data unless:

·         The individual or the individual’s legally authorized representative provides consent to such disclosure;

·         The disclosed data completes a financial transaction requested or authorized by the individual;

·         Disclosure is required by state or federal law or municipal ordinance; or

·         Disclosure is required pursuant to a valid warrant or subpoena.

Storage

Persona, Veriff, or any other vendor will permanently destroy data from scans of facial geometry extracted from the photos of your face that you upload upon completion of verification or within three years of your last interaction with Persona, unless the third-party vendor is otherwise required by law or legal process to retain the data.  . Olliv shall use a reasonable standard of care to store, transmit, and protect from disclosure any paper or electronic biometric data collected. Such storage, transmission, and protection from disclosure shall be performed in a manner that is the same as or more protective than the manner in which Olliv stores, transmits, and protects from disclosure similar sensitive and confidential information. Olliv will require its vendor(s) to similarly protect and delete biometric data.