Privacy & information handling
Identity Verification Notice
1. Purpose #
Identity verification helps reduce fraud and the risk that a criminal record check is connected to the wrong person. Instant Record Check uses identity-verification information and outcomes to support the identity check and the related service. Identity verification, the criminal record check, optional result sharing, and marketing are distinct purposes.
2. Verification methods #
In Quebec, the current method uses knowledge-based questions supplied through TransUnion. The flow exchanges the questions, available choices, and answers and produces a pass/fail result. Instant Record Check may retain the raw response for diagnostics. It does not receive a TransUnion credit report or score for this process.
Outside Quebec, Stripe Identity is the primary method and TransUnion may be used as a fallback. Stripe hosts the government-ID and selfie capture and comparison flow. Instant Record Check receives the resulting outcome and reason codes in the routine platform flow.
3. Quebec applicants #
No biometric data is currently collected from applicants in Quebec. The Quebec knowledge-based method is the current process and is not a biometric collection method. If the process changes, the applicable notice and legal requirements will be addressed before a new process is introduced.
4. Applicants outside Quebec #
Where offered outside Quebec, Stripe Identity hosts the identity-document and selfie flow and performs the relevant capture and comparison. Instant Record Check uses the outcome and reason codes it receives to administer the check. An organization requesting a check receives only the verification status needed for the service through the applicable sharing process, not payment details.
5. Information handled #
The information handled can include the identity information submitted by the applicant, questions, choices, answers, pass/fail outcomes, reason codes, and information needed to connect the outcome to the applicant’s check. Provider handling of identity documents, selfies, or biometric information is governed by the provider’s service and applicable arrangements. Instant Record Check does not create a biometric database.
6. Consent and available options #
Instant Record Check requests express consent before the identity-verification step. If you cannot complete the available verification process, contact support@instantrecordcheck.ca to discuss available options; the service may be unable to be completed.
7. Disclosure and use #
Identity-verification information and outcomes are used for identity verification, fraud prevention, operating the check, support, security, legal obligations, and related administration. A completed check result is shared with a named partner organization only after the applicant’s separate express opt-in. Withdrawal prospectively stops authorized future sharing but does not retrieve copies already disclosed or undo lawful processing.
8. Retention and deletion #
The current configuration uses a seven-year period for identity and TransUnion information linked to a completed check, measured from completion, and for unlinked information, measured from creation. Long-horizon cleanup for screening files is currently handled in review mode, and automatic deletion is not yet enforced by that mechanism. Requests concerning screening-file deletion are handled under applicable legal duties, including statutory response deadlines. Scheduled external encrypted backups are configured to expire after approximately 30–35 days, but that period does not apply to every operational copy or snapshot. Some shorter-lived records are deleted automatically: session tokens after 30 days, failed-login records after 90 days, certain entity-less audit context after 90 days, and advertising click identifiers in checkout and conversion records after 90 days. Provider retention periods and deletion processes may differ.
9. Rights and contact #
Questions and written access, correction, withdrawal, or complaint requests may be sent to privacy@instantrecordcheck.ca. Quebec-related requests may also be sent to confidentialite@instantrecordcheck.ca. The privacy officer is the Chief Executive Officer of 1244527 B.C. Ltd., doing business as Instant Record Check. Postal address: 2031 Store St., Unit 11, Victoria, British Columbia V8T 5L9.
Written access and correction requests are answered within 30 days where that period applies. Access and correction are free, subject to reasonable advance-notified charges for transcription, reproduction, or transmission where law permits. Identity documents supplied solely to verify an access request are destroyed securely after verification. If a concern is not resolved, contact the applicable regulator, including the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or 1-800-282-1376, or the Commission d’accès à l’information du Québec at www.cai.gouv.qc.ca or 1-888-528-7741.