Yoti ID Checker - Business User Privacy Notice

Last updated on: 18 November 2025

The Yoti ID Checker (“ID Checker”) is provided by Yoti Ltd. This Privacy Notice gives more information about personal data of business users processed as part of the ID Checker web app/native app solution.

Yoti as controller: When you are a business (or employee of a business) creating a business account with Yoti’s ID Checker solution to validate individuals’ digital Proof of Age (PoA), Yoti is the controller responsible for the processing of your account creation and login data. 

Yoti as processor: When you are a business using Yoti’s ID Checker solution to scan an individual’s QR code and verify whether they are of the appropriate age, you are the controller responsible for the processing of those individuals’ personal data including the digital Proof of Age (PoA) results shared with you. It is noted that Yoti does not share any personal data in the results of the PoA checks – rather just a record of the PoA check, when it was performed and whether it was successful or not.

 

Contents

What is Yoti ID Checker?

Information Collection and Use

Data Retention

Information Sharing

Security and Data Location

Your Rights

Cookies & Similar Technologies

Complain to the ICO

Contact Us

What is Yoti ID Checker?

Yoti ID Checker is a solution that enables relying businesses to verify an individuals’ digital Proof of Age (PoA). ID Checker is available as a native app (iOS & Android) or web app. Businesses and their employees will be able to create an account, log in and then scan an individual’s QR code and verify whether they are of the appropriate age. Once logged in, businesses will be able to see a log of historic transactions that have been performed and whether they were successful or not.

Information Collection and Use

We collect information from businesses for account creation, management and billing purposes.

Information Use
Email address

Password

Business postcode

To create an account with Yoti ID Checker 

To send you updates and marketing about Yoti (you can unsubscribe from marketing emails in each email we send) and for product analytics

Organisation sector Added by user after account creation
Email address

Password

Yoti Digital ID verified login share

To log into the Yoti ID Checker account
Audit log of transactions and performance analytics (i.e number of successful verifications, number of results by age threshold/type) To bill per transaction

To understand product performance

IP Address

Location

To understand location of the scanning/fraud detection

 

Data Retention

We hold account data only for as long as the individual user holds an account. Accounts can be deleted at any time.

We may in some instances keep your data for longer where we have a legal reason to keep your data for a longer period of time e.g. for billing purposes. Under these circumstances you would not be able to exercise your right to erasure.

Information Sharing

We do not sell personal data. However, we may share it with:

  • Service Providers – Hosting, security, and support providers that help operate the ID Checker solution.
  • Affiliated Companies – If applicable, for administrative or operational purposes.
  • Legal or Regulatory Bodies – Where required by law, court order, or regulatory obligation.

We always ensure that third parties protect your data and comply with applicable privacy laws.

Security and Data Location

We process and keep all the data securely encrypted on Yoti servers within the UK.

We always ensure any transfers of data follow the relevant legal requirements, such as entering into standard contractual clauses (SCCs) and completing transfer impact assessments to ensure that any data transferred is protected to an adequate standard. 

We are audited annually by KPMG against the SOC2 Type 2 Security control standards and we also maintain our ISO 27001, ISO9001 and ISO27701 certification. You can see more about Yoti’s technical and organisational measures at https://www.yoti.com/security/.

Your Rights

Individuals are entitled to data protection rights which are listed below:

  • Right of Access: You are entitled to know what personal information we hold about you and to receive a copy of it. 
  • Right to Correction: You are entitled to correct personal information we hold about you that is inaccurate.
  • Right to Deletion: You are entitled to ask us to delete the personal information we hold about you. You can however simply do this by deleting your account.
  • Right to Objection: In certain circumstances you are entitled to object to Yoti processing your personal information. 
  • Right to Restriction: In certain circumstances you are entitled to ask us to restrict our processing of your personal information. 
  • Right to Portability: In certain circumstances, you are entitled to receive the personal information you have provided us in a structured, commonly used and machine-readable format.

If you want to ask us any questions about any of your rights, please email privacy@yoti.com.

Cookies & Similar Technologies

Strictly necessary cookies

We only use strictly necessary cookies for the Yoti ID Checker. These are necessary for the ID Checker to function and they cannot be turned off. These cookies do not store any personally identifiable information.

Cookie Name Use Lifespan
_iam_csrf For security purposes 12 hours
token To enable login 5 hours
yoti-iam-previous-login To remember previous login 6 months
yoti-iam-gdpr-cookie To remember if you elected to hide the cookie banner 6 months

Complain to the ICO

You can also complain to the Information Commissioner’s Office (ICO) who is responsible for making sure that organisations comply with the law on handling personal information at  https://ico.org.uk/global/contact-us/.

Contact Us

If you have any questions about Yoti or what is included in this privacy information, you can contact Yoti using the below:

Email: privacy@yoti.com
Address: Yoti Ltd, 6th Floor, 107 Leadenhall St, London, EC3A 4AF