Privacy Policy - Identity as a Service (TransUnion)
Updated on: October 28, 2026
IDmission helps various online service provider platforms validate your identity.
IDmission will collect images of your photo ID and your selfie and will securely process and store them on our Clients’ behalf. IDmission does not sell any user-submitted data.
IDmission LLC (“IDmission”) is concerned about privacy issues and respects the privacy of our users. This Privacy Policy (“Policy”) describes our privacy practices concerning personal information collected in connection with IDmission’s IDentity Solution and Identity-as-a-Service (the “Services”).
IDmission is a mere processor of user information with respect to the Services and not a controller. You must review the privacy policy of the third party with whom you are dealing directly (the “Third-Party Data Controller”).
However, in certain cases IDmission may determine the purposes and means of processing certain personal information — for example, for security, fraud prevention, service improvement, meeting the requirements of applicable certification or trust frameworks, or complying with our own legal obligations — and in those cases IDmission acts as a controller. Where IDmission acts as a controller, this Privacy Policy governs that processing directly.
1. Information Collection
IDmission collects a wide range of personal information including name, email, physical address, ID images (passport, driver's license), and date of birth as directed by the Third-Party Data Controller.
IDmission collects biometric information through the Services. Our Biometric Policy must be reviewed separately and users must consent to it as part of registration.
We may receive information from the Data Controller or agencies like consumer reporting and fraud-prevention services to uniquely identify you.
2. Cookies
Cookies are small files stored on your device that allow IDmission to recognize return users and store preferences. We use them to monitor usage trends and customize your session.
You can set your browser to refuse cookies, though some features of the Services may not operate correctly without them.
3. Use of Information
Personal information is used strictly as directed by the Third-Party Data Controller to provide the Services (e.g., verifying identity, auto-populating forms). We also use it to fulfill agreements, complete transactions, and comply with legal requirements.
4. Sharing Information
We share collected data directly with the Third-Party Data Controller on whose behalf it was collected.
Trusted third parties help us deliver and improve services, such as translating data from ID card scans.
Data may be shared to comply with law, prevent fraud, or protect the safety of any person or property.
5. Security
IDmission uses commercial-grade physical and electronic safeguards. All data is encrypted both in transit and at rest. IDmission is PCI Level 3 compliant and undergoes regular security audits and penetration tests.
6. What Are Your Data Subject Rights?
Depending on applicable data protection laws and the circumstances of the processing, individuals may have the following rights in relation to their personal information:
You have the right to receive clear and transparent information about how we collect, use, retain, disclose, and otherwise process your personal information. This Privacy Policy provides information about our processing activities.
You may request access to the personal information we hold about you and information about how that information is processed, subject to applicable legal requirements and exemptions.
You may request that inaccurate or incomplete personal information held by us be corrected or updated.
In certain circumstances, you may request that your personal information be deleted or removed. This right is not absolute and may not apply where we are required or permitted to retain or process the information under applicable law, including where the information is required for legal claims or other lawful purposes.
In certain circumstances, you may request that we restrict the processing of your personal information. Where processing is restricted, we may retain the information but will generally not process it further except as permitted by applicable law.
Where applicable, you may request to receive personal information that you have provided to us in a structured, commonly used, and machine-readable format. Where technically feasible and required by applicable law, you may also request that the information be transmitted directly to another organization.
In certain circumstances, you may object to the processing of your personal information, including where processing is based on legitimate interests or is otherwise permitted under applicable law.
Where applicable, you may have rights relating to decisions based solely on automated processing, including profiling, where such decisions produce legal effects or similarly significantly affect you. These rights are subject to applicable legal requirements and exceptions.
How to Exercise Your Rights
If you wish to exercise any of the rights described above, or if you have a question or concern regarding the processing of your personal information, you may contact IDmission using the contact details provided in the Grievance Officer section of this Privacy Policy.
We may need to verify your identity before processing a request in order to protect your personal information from unauthorized disclosure.
We will process and respond to valid requests in accordance with applicable data protection laws and within one calendar month of receiving a verified request. Where permitted by applicable law, the time required to respond may be extended where a request is complex or where multiple requests are received. Where an extension applies, we will inform you of the reason for the delay.
Where we determine that we cannot fulfil a request, we will provide an explanation where required by applicable law and inform you of any applicable right to lodge a complaint with the relevant supervisory or regulatory authority.
7. Reviewing, Updating or Deleting Information
Access to and deletion of data is governed by the Third-Party Data Controller. If you wish to update or delete your information, please contact the third party you dealt with directly.
You may also submit requests to us at James.Crawshaw@transunion.com.
8. Policy Changes
IDmission may revise this Policy as technology and the Internet change. New versions will be posted on our website home page and the IDentity Service website. Material changes will be accompanied by appropriate notice.
9. Questions or Comments
If you have any questions or comments regarding our Policy, please email us at:
privacyteam@idmission.com