Biometric
Privacy Policy

Biometric Information Privacy Policy

Certifix, Inc. (“Certifix,” “we,” “our,” or “us”) is committed to protecting biometric information, including fingerprint data, collected in connection with our fingerprinting and identity verification services.

This Biometric Information Privacy Policy explains how Certifix collects, uses, stores, retains, and destroys biometric data in accordance with applicable federal and state laws, including the Illinois Biometric Information Privacy Act (740 ILCS 14/1 et seq.) (“BIPA”), which establishes widely recognized standards for biometric data protection.

1. Purpose of Collection

Certifix collects biometric information, including fingerprints, solely for the purpose of:

• Conducting fingerprint-based background checks
• Identity verification
• Submitting fingerprint data to authorized government agencies
• Providing related compliance services requested by applicants, customers, or agencies

Certifix does not collect biometric information for marketing or commercial resale purposes.

2. Definitions

Biometric Identifier means a fingerprint or other unique biological characteristic used to identify an individual.

Biometric Information means any data derived from a biometric identifier that is used to identify an individual.

3. Collection and Use

Certifix may collect biometric information when you:

• Schedule or complete a fingerprinting appointment
• Submit fingerprints for a background check
• Enroll in a service requiring identity verification
• Biometric information is used exclusively to:
• Capture fingerprint data
• Convert fingerprints into required submission formats
• Transmit fingerprints to authorized government entities such as the FBI, state Departments of Justice, FDLE, ATF, or other authorized agencies

Certifix does not independently analyze, interpret, or determine background check results.

4. Disclosure and Prohibition on Sale

Certifix does not sell, lease, trade, or otherwise profit from biometric information.

Biometric data is disclosed only:

• To authorized government or regulatory agencies for the purpose of processing background checks
• To secure technology vendors acting on our behalf under confidentiality obligations
• As required by law, court order, or regulatory mandate

5. Retention Schedule

Certifix retains biometric information only for the time necessary to fulfill the purpose of collection or as required by applicable law.

Retention periods may vary depending on:

• State regulatory requirements
• Agency submission rules
• Contractual obligations

For individuals covered by the Illinois Biometric Information Privacy Act, biometric data will be retained for no longer than three (3) years after the individual’s last interaction with Certifix, or earlier if the purpose for collection has been satisfied and no legal obligation requires continued retention.

6. Destruction of Biometric Data

When the purpose for collection has been satisfied and any applicable retention period has expired, Certifix will permanently destroy biometric information using secure deletion or destruction methods consistent with industry standards and applicable law.

7. Security Measures

Certifix implements administrative, technical, and physical safeguards designed to protect biometric information from unauthorized access, disclosure, alteration, or destruction.

Security measures include:

• Encryption of data in transit
• Secure transmission protocols
• Access controls and role-based permissions
• Secure hosting environments
• Restricted internal access to authorized personnel

While we implement strong security controls, no system can guarantee absolute security.

8. Written Notice and Consent

Before collecting biometric information, Certifix provides individuals with written notice describing:

• The purpose of collection
• The manner of use
• The retention schedule

Individuals must provide written consent prior to the collection of biometric data where required by law.

By submitting fingerprints or proceeding with fingerprint-based services, you acknowledge and consent to the collection, storage, and transmission of your biometric information in accordance with this policy.

9. Updates to This Policy

Certifix may update this Biometric Information Privacy Policy to reflect changes in legal requirements, technology, or operational practices. Updates will be posted on this page with a revised “Last Updated” date.

10. Contact Information

If you have questions regarding this Biometric Information Privacy Policy or our handling of biometric data, please contact:

Certifix Live Scan
Email: privacy@certifixlivescan.com
Phone: (800) 710-1934

Additional Information

Applicants may review:

The FBI Applicant Privacy Rights Brochure
The FBI Privacy Act Statement