Privacy Policy

Last Updated: September 24, 2024

Identity Theft Guard Solutions, Inc. d/b/a IDX, (“IDX”) provides leading identity theft and data breach solutions. Privacy is core to what we do. This Privacy Policy explains how we collect, use, and disclose information when you sign up for our identity protection or data breach services, use our websites and other online products and services (collectively, the “Services”), or when you otherwise interact with us (for example, through surveys or customer service centers). “Information” means any information relating to an identified or identifiable individual.

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy. In some cases, we may provide you with additional notice (such as adding a statement to our homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access the Services or otherwise interact with us to stay informed about our information practices and the ways you can help protect your privacy.

By using our Services, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes.

If you are a California resident, please also review our California Resident Privacy Notice (https://www.idx.us/california-privacy) for more information about the types of personal information we collect and disclose, as well as how to exercise your rights under California law.

Collection of Information

We may collect a variety of information from or about you or your devices from various sources, as described below.

Information You Provide to Us

When you sign up to receive our Services, we collect your name, email address, phone number, postal address, date of birth, social security number and, in some cases, your payment information. When you sign up for a Family Plan, we also collect the names and mailing addresses of any dependents or other family members that you include in your plan.

We also collect any other information you provide directly to us, such as when you sign up to receive our emails or text message alerts, fill out a form, request customer support, or otherwise communicate with us. This information may include your name, email address, phone number, or other personal information. We may also collect nicknames or profile images from your social network sites.

When you enroll in our dark web monitoring tools, you have the option to provide us with additional information, including your phone number, email address, bank account and routing, debit or credit card, driver’s license, passport, and/or medical identification numbers.

If you decide that you wish to apply for a job with us, you may submit your contact information and your resume online. We will collect the information you choose to provide on your resume, such as name, email address, address, date of birth, phone number, social security number, your education, and employment experience.

Information We Collect From Sponsors of Our Services

When your employer or other entity pays or offers to pay for you to use our Services, they may provide us with your name and other personal information so that we can offer you the ability to enroll in the Services. We may collect information about you from our commercial customers to facilitate your enrollment.

Information We Collect Automatically When You Use the Services

When you access or use our Services, we automatically collect information about you, including:

  • Alert Information: We collect information about the alerts that are triggered by your use of our Services, including details from credit, dark web, public record, social network, medical, and month in review notifications and alerts.
  • Log Information: We collect log information about your use of the Services, including the type of browser you use, access times, pages viewed, your IP address, and the page you visited before navigating to our Services.
  • Device Information: We collect information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, unique device identifiers, approximate location, and mobile network information.
  • Information Collected by Cookies and Other Tracking Technologies: We use various technologies to collect information, including cookies and web beacons. Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience, see which areas and features of our Services are popular and count visits. Web beacons are electronic images that may be used in our Services or emails and help deliver cookies, count visits, and understand usage and campaign effectiveness. For more information about cookies, and how to disable them, please see “Your Rights and Choices” below. Below is an overview of the types of cookies we and third parties may use to collect information.
    • Strictly Necessary Cookies. Some cookies are strictly necessary to make our Services available to you. We cannot provide you with our Services without this type of cookies
    • Functional Cookies. Functional cookies are used to recognize you when you return to our Services. This enables us to adapt our content for you and remember your preferences. For example, we use functional cookies to remember your choice of language or region.
    • Analytical or Performance Cookies. We also use cookies for website and app analytics purposes to operate, maintain and improve our Services. We may use our own analytics cookies or use third-party analytics. These providers may also collect information about your use of other websites, apps, and online resources.

Where required by applicable law, we will obtain your consent to use cookies. For more information about cookies, and how to disable them, please see "Your Rights and Choices" below.

Information We Collect From Other Sources

We may also obtain information from other sources, such as mailing list providers, and combine that with information we collect through our Services.

Use of Information

We use the information we collect to provide and improve our Services, such as to alert you of changes to your credit history and to bill you for the Services. We may also use the information we collect to:

  • Send you technical notices or alerts;
  • Respond to your comments, questions, and customer service requests;
  • Communicate with you about products, services, and offers from IDX and others;
  • Monitor and analyze trends, usage, and user activity;
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities and protect the rights and property of IDX and others;
  • Personalize and improve the Services and inform you about products or services that may be of interest to you;
  • Comply with legal obligations, including responding to lawful requests such as subpoenas, court
    orders, or other mandatory legal processes.
  • For compliance purposes, including enforcing our Terms and Conditions of Use or other legal rights, or as may be required by applicable laws and regulations or requested in connection with any judicial process or by a governmental agency; and
  • For other purposes for which we provide specific notice at the time the information is collected.

Legal Bases for Processing European Information

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), we only process your information when we have a valid legal basis for such processing, including as set forth below.

  • Consent. You have consented to the use of your information. For example, we may process your information to send you marketing communications or to use cookies where you have consented to such use.
  • Contractual Necessity. We need your information to provide you with our Services. For example, we may need to process your information to respond to your inquiries.
  • Compliance with a Legal Obligation. We have a legal obligation to use your information. For example, we may process your information to comply with tax and accounting obligations.
  • Legitimate Interests. We or a third party have a legitimate interest in using your information. Specifically, we have a legitimate interest in using your information for product development and internal analytics purposes, and otherwise to improve the safety, security, and performance of our Services. We only rely on our or a third party’s legitimate interests to process your information when these interests are not overridden by your rights and interests.

Sharing of Information

We may share information about you as follows or as otherwise described in this Privacy Policy:

  • With credit bureaus in order to receive information about your credit activity and send you alerts;
  • When you enroll in one of our Services in connection with an employer or other entity, we may share the fact that you enrolled in our Services with your employer or other entity, such as a referral partner, promoting or sponsoring services to you, or in response to an audit as may be required by your employer or such other entity, strictly limited to the purposes for which an audit may be initiated;
  • With vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, including marketing our products and services;
  • In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company;
  • Between and among IDX and our current and future parents, affiliates, subsidiaries, and other companies under common control and ownership;
  • With your consent or at your direction; and
  • As required by law and similar disclosures, we may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Services.

We do not rent, sell, or share information about you with non-affiliated companies for their direct marketing purposes, unless we have your permission.

Aggregated or De-Identified Information

We may also share aggregated or de-identified information, which cannot reasonably be used to identify you.

Advertising and Analytics Services Provided by Others

We may allow others to provide analytics services and serve advertisements on our behalf across the internet and in applications. These entities may use cookies, web beacons, device identifiers, and other technologies to collect information about your use of the Services and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in apps, links clicked, and conversion information. This information may be used by IDX and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites, and better understand your online activity. For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit www.aboutads.info/choices.

We also use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn more about Google’s practices by visiting https://www.google.com/policies/privacy/partners/. To help us understand how you use our Services and to help us improve them, we automatically receive information about your interactions with our Services, like the pages or other content you view, the searches you conduct, and the dates and times of your visits.

Your Rights and Choices

Account Information

You may update, correct or delete information about you at any time by logging into your online account. You may exercise your right to withdraw your consent to the Services at any time. The withdrawal of consent will require deactivation of your account. To withdraw consent and deactivate your account or to exercise your right to data portability or erasure, please contact support by dialing 800-939-4170 or by e-mailing us at PrivacyOfficer@idx.us. Please note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for up to 12 months. You have the right to lodge a complaint with a supervisory authority.

If you are a California resident, please review our California Resident Privacy Notice (https://www.idx.us/california-privacy) for more information about how to exercise your rights under California law.

Cookies

Most web browsers are set to accept cookies by default. If you elect to opt out of accepting cookies from our site, you can set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services.

Promotional Communications

You may opt out of receiving promotional emails from IDX by clicking the unsubscribe link in those emails. If you opt out, we will still send you non-promotional emails, such credit alerts, technical messages, and other messages related to our ongoing business relations.

Your European Privacy Rights. If you are located in the EEA or the UK, you have the additional rights described below.

  • You may request access to the information we maintain about you, update and correct inaccuracies in your information, restrict or object to the processing of your information, have your information anonymized or deleted, as appropriate, or exercise your right to data portability to easily transfer your information to another company. You also have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.
  • You may withdraw any consent you previously provided to us regarding the processing of your information at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.

To exercise these rights please contact support by dialing 800-939-4170 or by e-mailing us at PrivacyOfficer@idx.us. Before fulfilling your request, we may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain information for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

Security

IDX takes reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. However, as no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information.

Retention

We take measures to delete your information or keep it in a form that does not permit identifying you when your information is no longer necessary for the purposes for which we process it unless we are required by law to keep your information for a longer period. When determining the specific retention period, we consider various factors, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and the statute of limitations.

Children’s Privacy

We do not knowingly collect, maintain, or use personal information from children under 13 years of age, and no part of our Services is directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Policy, then you may alert us at PrivacyOfficer@idx.us.

International Transfers of Data

Our Services are hosted in the United States and intended for visitors located within the United States. If you choose to use the Services from the EEA, the UK, or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the United States for storage and processing. We may transfer personal information from the EEA or the UK to the United States based on Standard Contractual Clauses, as needed to perform our Services that you have requested from us, or with your consent. Also, we may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services. By providing any information, including personal information, on or to the Services, you consent to such transfer, storage, and processing. To obtain additional information on the transfers, please contact us using the contact information below.

Contact Us

If you have any questions about this Privacy Policy or data requests pursuant to applicable law, please email us at PrivacyOfficer@idx.us or mail us at:

IDX
Attn: Privacy Officer / DPO
4145 SW Watson Ave, Suite 400
Beaverton, OR 97005