Last Updated: September 9, 2020

Biometric Information Retention Schedule and Permanent Destruction Guidelines

  • What is Biometric Data?

  • Biometric data is identifying information related to your biometric characteristics which may be used to identify you. Examples of common forms of biometric data that you may use in your daily life include fingerprints, voiceprints, veins in your palm, facial recognition, and iris or retina recognition. When OFX talks about “Biometric Data”, we are referring to certain physical information we collect about you (such as a face scan) in order to identify you individually in order to provide you our resources and services available through our Website, applications and APIs (the “Services”).

  • How does OFX collect your Biometric Data?

  • When you sign up for an OFX account, you will provide certain Biometric Data. OFX collects that Biometric Data and then encrypts and stores it on OFX’s data servers, which OFX will use to identify you when you want to use the Services. OFX does not collect, capture, receive or otherwise obtain your Biometric Data without notifying you in writing in advance or without your consent or without the consent of your legally authorized representative. You may decline to provide your Biometric Data, and at any time can withdraw your consent to us using your Biometric Data. However, if you decline to provide Biometric Data, we may not be able to provide certain Services to you.

  • Is your Biometric Data secure?

  • OFX takes your Biometric Data security seriously. OFX implements industry-standard data security technology to ensure that your Biometric Data is as secure as possible. You can read our privacy policy here if you would like to see how we hold and protect your Biometric Data.

  • How does OFX use your Biometric Data?

  • In order for you to use the Services, OFX uses Onfido to collect your Biometric Data, who will then compare it with the personal identification information you provided when you enrolled and signed up for your OFX account. OFX will not use your Biometric Data for any other purpose.

  • Does OFX share or sell your Biometric Data?

  • OFX does not sell, lease, or trade your Biometric Data to any third parties or derive any profit in such a manner. OFX may work with certain third parties to provide the Services to you, but only as necessary to provide you with such Services. We do not disclose, re-disclose or otherwise disseminate your Biometric Data without your request or consent or without the request or consent of your legally authorized representative. However, in certain specific instances, we may be compelled to disclose your Biometric Data in cases where such disclosure or re-disclosure is required by state or federal law, or municipal ordinance, or when required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction.

  • How long does OFX keep your Biometric Data?

  • In order to deliver the Services to you, OFX stores and uses your Biometric Data as long as you have an active account with OFX, but in any event for no more than 1 year following the date you first consented to the biometric capture. Your account is considered “active” until you specifically request that we close your account.

  • Can I request that you delete my Biometric Data?

  • You may request that we delete your Biometric Data or close your account by notifying us at compliance@ofx.com.

  • What happens to your Biometric Data after you close your account?

  • After you close your account, OFX will permanently destroy your Biometric Data on or before the one-year anniversary of the date you first consented to the biometric capture, unless you ask that we delete it sooner. After your account is closed, you will need to re-enroll and provide your Biometric Data to OFX again before you can use the Services.