Subject Terms & Privacy Notice (End Customers)

Effective date: [DATE] You are receiving a verification request because a business ("Customer") asked postal.ID to help verify information as part of Customer's onboarding or compliance process.

1. Roles (who is responsible)

• The Customer is typically the Controller of your data for the verification request.
• postal.ID acts as a Processor for the Customer, processing your data to complete the verification steps and generate evidence artifacts.

If you have questions about why the verification is required, contact the Customer directly (their details should be shown in the verification portal).

2. What we process

Depending on the verification flow, we may process:

• your name and address;
• your email and/or phone number (if digital verification is enabled);
• verification events (e.g., code entry time, delivery status events);
• fraud/security metadata (e.g., IP address, device/browser metadata) if enabled.

3. Purpose

To complete the verification requested by the Customer and provide an evidence record.

4. Retention

Retention is determined by the Customer's configuration and legal requirements. You can request deletion or access by contacting the Customer.

5. Security

We use security controls appropriate to the risk (encryption, access control, audit logs).

6. Your rights

Your rights depend on your location. In many cases, requests should be directed to the Customer as the Controller. We will assist the Customer where applicable.

7. Contact

If you cannot reach the Customer, you may contact postal.ID at [PRIVACY@POSTAL.ID].