At Sum & Substance we provide our clients with the results of background checks, document integrity check and camera footprinting regarding personal information subjects, i.e. you. You can find a detailed description of our services ("Services
") by visiting our website at www.sumsub.com
In order to provide the Services, we collect "personal information" (i.e. information that could be used to contact you directly (without using the Site) such as full name, postal address, phone number or email address, as well as prior and/or current employment. We collect the personal information that we need in order to effect background checks. We only collect and use the information we need. The information that we collect about people who are background checked by Sum & Substance depends on which background check is selected. Please note that in certain jurisdictions where legally possible and does not require any additional consents or governmental or any other approval we may also collect certain specific information, including, but not limited to criminal record, permission to work, certain other information.
We may also collect "demographic information" (i.e. information that you submit, or that we collect, including, but not limited to, postal code, gender, username, age/birth date, browsing history information, registration history information, subject to the rest of this paragraph). Please note that nowhere on the Site do we knowingly collect personal information from children under the age of 16, as we require that all users represent to us that they are at least 16 years old. Log data and Cookies
Due to the communications standards on the Internet, we automatically receive the uniform resource locator ("URL
") of the website from which you came and the website to which you proceed once you leave the Site. We also receive the IP address of your computer (or the proxy server you use to access the World Wide Web), your computer operating system and type of web browser you are using, as well as the name of your Internet service provider ("ISP"). This information is used to analyse overall trends to help us improve the Site.
In order to access or change any of your private information, you must log in with your password even if your computer contains your persistent cookie. Additionally, if you log out of the Site you will need to re-enter your password the next time you visit in order to log in to your account. Another type of cookie, called a "session" cookie, is used to identify a particular visit to the Site. Session cookies expire after a short time or when you close your web browser.
Third party advertisers on the Site may also place or read cookies on your browser. If you wish to disable these cookies, the "help" portion of the toolbar on most browsers will tell you how. However, if you set your browser to disable cookies, you may not be able to access certain areas on the Site. The Use of Information We Collect
We may use the information we collect, including your personal information in order to: (i) confirm to our clients that you are who you say you are, in case of background checks; (ii) confirm to our clients the authenticity of information contained in your identification documents, in case of document integrity check. In case of (i) and (ii) of this section "The Use of Information We Collect
" your information disclosed is limited to our report on whether you fit for the requested Services or not, only.
We do not participate in, or presently co-operate with, any kind of blanket surveillance or monitoring. However, we may also disclose your information when we determine that such disclosure is necessary to comply with applicable law. Sharing of Information with our Clients and Other Third Parties
Your personal information may be passed on to a third party in the event of a transfer of ownership or assets, or a bankruptcy. We may also disclose personal information when we determine that such disclosure is necessary to comply with applicable law, to cooperate with law enforcement or to protect the interests or safety of the Company or other organisations using the site. Whenever personal information is disclosed under this paragraph, we may also disclose your demographic information along with it, on a non-anonymous basis. We do not sell any personal information to third parties. The data that we collect and do make available to you and organisations that request background information from you, is solely presented in aggregated format and after you have provided your consent. All pages containing information are protected by SSL. Use of Public Information and Other Demographic Information
We may review all demographic information. We may use all the information provided to us by you or any third party for benchmarking. We may use demographic information to tailor the Site and communications to your interests. We may also share demographic information with advertisers on an anonymous and aggregated basis (i.e. without telling the advertisers your identity).
We may combine your data with those of other users of our Site and Services and share or provide this information in aggregated and anonymised form with third parties. We may also use information collected from you and combine it with information provided by other users of our Site and Services to help us improve the design and delivery of our software tools, increasing the effectiveness for all users. Data Protection
We take appropriate technical and organisational measures against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data. Please accept however, no security measures are perfect or impenetrable, and we cannot guarantee that the information submitted to, maintained on, or transmitted from its systems will be completely secure. We are not responsible for the circumvention of any privacy settings or security measures contained on the Site by any users or third parties.
We employ state of the art firewall technology, and all data generated in Sum & Substance Reports is fully encrypted at rest and in transit using 256-bit SSL encryption, and continuously backed up in several high security data centers in different locations. Transfer to other Jurisdictions
Data Protection laws in the EU and the UK stipulate that personal data must be fairly and lawfully processed, used only for the intended purpose, is adequate, relevant and not excessive, is accurate and up to date, is not kept longer than is necessary, is processed in line with the rights of the individual, is held securely, and is not transferred to other countries without adequate protection.
To provide you with our service, we may store, process and transmit information in locations around the world - including those outside your country or the EEA (this only applies if you have lived and worked overseas). Such a transfer will not occur without adequate protection. Sum & Substance shall only process (including store) personal information in accordance with applicable European and UK privacy laws. Additional Information About Us
Sum & Substance is a UK company (Company Registration Number: 09688671). We are regulated by the Information Commissioner and are registered as data controllers on the Data Protection Register (number ZA222205.)