Emailage Processing Notice

Enabling our Customers to verify your identity, prevent and investigate fraud, and assess risk

When you apply for services from credit, insurance or utility providers, retailers, or other organisations they might use our services to help them check you are who you say you are, and that the contact information you provided is yours. Our products allow our Customers to evaluate fraud risk in near real time.

For example, when opening a new account or processing an online transaction, a Customer may process your email address and IP address through our service to generate a fraud risk score. We generate a fraud risk score by matching and evaluating the supplied data points to associated meta data (email data, email domain data, IP geolocation data) and previous Customer queries and fraud indicators contributed to our global fraud network.

Using our fraud risk score together with other checks they might perform, a Customer can assess risk associated with the application or transaction and make decisions in an effort to identify and prevent fraud (e.g., manually review a high-risk transaction before approving). 

Allowing our Customers to comply with regulatory requirements

Our services form part of our Customers’ compliance checks, which are necessary for them to ensure they meet external and internal governance obligations (including necessary risk due diligence on individual customers and potential customers).

In particular, our Customers have a legitimate interest in verifying the identity of its individual clients and verifying the information they provide when they engage with clients. Our services forms part of this verification process, by providing a fraud risk score and digital identity score in relation to the individual client’s personal data.

Developing our statistical models, analytics and profiling     

We use personal data for statistical models, analytics and profiling to improve our products and services and to help Customers better predict risk, to verify data you provide, to help to prevent and investigate fraud, to allow them to comply with their regulatory requirements. To do this, we compare information received against variables like name, email address, postal address, phone number, device ID, IP address, and other transaction-level details to provide our Customers with a fraud risk score and digital identity score so they can more accurately predict risk factors associated with their proposed or ongoing relationships with you. 

Protecting our legitimate business interests and legal rights

Where we believe it is necessary to protect our legal rights, interests and the interests of others, we use personal data in connection with legal claims, compliance, regulatory, and audit functions, and disclosures in connection with the acquisition, merger or sale of a business.

Third-party data partners and service providers  

We receive data from trusted commercial sources and service providers in connection with the provision of our products which includes personal data such as name, email address, email domain, IP address, postal address, Bank Identification Numbers (BIN), gender, date of birth, telephone, social media handles, professional status and background  

Our Customers                                                                                                            

Our Customers choose which personal data of their clients and prospective clients to send to us when using our service which includes personal data such as name, email address, IP address, phone number, billing address, shipping address, device ID, Bank Identification Number (BIN), hashed card number, transaction information (e.g. amount, currency), service information (e.g. service date, location, type).

We also receive fraud feedback data from our customers which indicates whether previous transactions processed through our service were determined to be fraudulent. 

Businesses and other organisations

We share personal data with Customers when they check a client or potential client using our service. We ask our Customers to explain to their clients that they use our information, including data provided to us by third parties.

We take steps, including through contracts, intended to ensure that the information continues to be protected wherever it is located in a manner consistent with the standards of protection required under applicable law.

Service providers and data partners

We share personal data with service providers who assist us with the provision of our products and services. These providers include data partners, customer support, IT service providers, financial services and professional advisors.

We take steps, including through contracts, intended to ensure that the information continues to be protected wherever it is located in a manner consistent with the standards of protection required under applicable law.

Resellers, distributors, integrators and agents

We sometimes use other organisations to help provide products and services to clients and we may provide personal data to them in connection with that purpose.

Affiliates

Some of the service providers we use are other affiliated companies within the LexisNexis Risk Solutions and RELX group of companies. These companies assist us in providing the products and services described in this Notice, such as to provide customer and product support. We have contracts in place with them to ensure they only use the personal data we provide them in accordance with our instructions. Some of our affiliated companies also act as resellers, distributors, integrators or agents for the sale of products or services.

If some or all of the LexisNexis Risk Solutions or RELX business is acquired by another company personal data may be disclosed to the prospective or actual purchasers.

Third parties where required by law (or to protect our rights)

We also share personal data in order to:

• comply with the law;
• investigate and help prevent security threats, fraud or other malicious activity;
• enforce and protect the rights and property and those of our affiliates; or
• to protect the rights of our customers, employees and third parties. This may include sharing information for the purposes of crime prevention and fraud protection.

Identification data

We retain identification data whilst there is a continuing need for us to utilise it. We keep this retention under review and we will remove data as and when we no longer require it. 

Customer enquiry data

We retain personal data associated with and resulting from our customer enquiries or checks whilst it continues to be relevant to our services and there is a continuing need for us to utilise it. We keep this retention under review and we will remove data as and when we no longer require it.

Other third party-supplied  data and services

Other third party supplied data is retained as necessary for our Customers to perform and undertake their legitimate interests and activities, including those undertaken in the substantial public interest. The criteria used to determine the storage period will include the legal limitation of liability period, agreed contractual provisions, applicable regulatory requirements and industry standards.

Archived data

We may hold data in an archived form for longer than the periods described above, for things like research and development, analytics and analysis, (including refining fraud strategies, scorecard development and other analysis such as de-risking), for audit purposes, and as appropriate for establishment, exercise or defense of legal claims. The criteria used to determine the storage period will include the legal limitation of liability period, agreed contractual provisions, applicable regulatory requirements and industry standards.