Privacy Policy

1. Collection and use of personal data

1.1 General

You may provide us with information by filling in forms on our website(s), app or by corresponding with us by phone, email, using our platform, or otherwise. This includes information you provide when you register on our websites, send us a request, contact our customer service, utilize our app, enter into a contract for the supply of services, enter a competition, promotion or survey and when you report a problem with our site.

We do not sell your personal data. We use and share your personal data only for the purposes and with the recipients described in this policy.

1.2 Processing of data

In order to process your request to use the App we are required to collect the following information:

• Email address
• Phone number
• Name
• Address
• Invoicing details
• Gender (in order to know how we can address you)
• Date of Birth
• Passport number
• Nationality
• Copy of Passport
• A Selfie picture
• Customer Number (we create a customer number for you)
• Company/Employer name and address
• Company/Employer bank account details
• Contact details company/employer

We need a positive identification of each person to avoid ID fraud.

In order to process your payment, we will be required to collect the following information:

• Debit Card details (name of account holder, IBAN number, and BIC)
• Credit Card
• Invoicing details

When using a credit card, your card data will not be stored in the IDsure database. The information is entered and stored directly by the party who handles the credit card payments on our behalf.

1.3 Third parties

If you have become a customer via a third party such as a ship management company, please consult the Privacy Statements of these parties.

1.4 Support channel

We may use your IP address to help diagnose problems with our server and to administer our website. IDsure logs the chat conversations of its WhatsApp service and other social media channels exclusively for quality purposes and will not share this with or sell this to third parties. Do not enter privacy sensitive personal data via WhatsApp or other social media channels.

1.5 Information about you and your device

Each time you use our Services, we may automatically collect the following information:

• Technical information, including the type of device you use, a unique device identifier, mobile network information, your mobile operating system, time zone setting, your IP address, browser type, domain names, access times and referring website addresses
• Information stored on your device, including login information and previous location history
• Details of your use of the App or any of our Services or your visits to our website including traffic data, starting and stopping of transactions, and ordering of products

2. Disclosure of your information

We may disclose some or all of the data we collect from you to the following third parties:

• Other members of our group of companies
• Third parties only to the extent to ensure the usability of our services and within the scope of the contract we have with you

Your personal data will not be passed to any further third parties without your explicit permission, unless this is necessary to provide the service or complete the contract. IDsure is legally obliged to cooperate with law enforcement agencies if these request information, within the scope of our statutory duty of disclosure or if obliged by a court judgement.

2.1 Uploaded certificate verification

With your consent, IDsure may process your manually uploaded third-party certificates and the personal information they contain to develop and provide certificate verification. This consent covers all your uploaded certificates.

For verification, we share each certificate and only the specific personal details needed with the training center or certificate issuer identified on that certificate. These details may include your certificate number, name, date of birth and nationality where required by that training center or issuer. We share these details solely to verify the certificate's authenticity.

The planned verification service will initially verify certificates only with training centers within the European Union. The consent also describes EU/EEA countries and countries covered by European Commission adequacy decisions; the list below explains those decisions and does not expand this initial EU-only verification scope.

Consent is optional. You can grant or withdraw it in the consent board in your IDsure account, free of charge. Withdrawing consent stops further sharing for your uploaded certificates and does not affect the lawfulness of sharing that took place before withdrawal. Your choice does not affect your existing certificates or access to IDsure.

The retention periods in section 7 and your rights described in sections 4 and 5 also apply to certificate data processed for this purpose.

2.2 Countries and territories with adequacy decisions

The certificate verification consent refers to countries outside the European Union and European Economic Area that the European Commission has recognised as providing an adequate level of data protection. As checked on 8 October 2026, the Commission lists the following countries and territories:

• Andorra
• Argentina
• Brazil
• Canada, for commercial organisations covered by its adequacy decision
• Faroe Islands
• Guernsey
• Israel
• Isle of Man
• Japan
• Jersey
• New Zealand
• Republic of Korea
• Switzerland
• United Kingdom
• United States, for commercial organisations participating in the EU-US Data Privacy Framework
• Uruguay

Adequacy decisions have specific scopes and may be amended or withdrawn. For the current list and the details of each decision, see the European Commission's adequacy decisions.

This list explains the adequacy decisions referred to in the consent. IDsure's planned certificate verification service will initially be limited to training centers within the European Union.

3. Data integrity and security

We employ our best efforts to maintain full reliability, accuracy, completeness and currency of all Personal Data in our databases and to protect the privacy and security of our databases. Our servers and databases are protected by industry standard security technology.

Our internal staff and contracted service companies have a duty of confidentiality and comply with the current data protection regulations. Nevertheless, we cannot guarantee against any loss, misuse, unauthorised disclosure, alteration or destruction of data, but we do take all reasonable steps to prevent this from happening.

4. Your rights: data access and corrections

Upon receiving a written request from you, we will enquire about your identity to make sure we are not divulging your Personal Data to anybody else, and then disclose to you the Personal Data we hold about you. We will also correct, amend or delete any Personal Data that turns out to be inaccurate. Your request will be dealt with promptly, within 30 days.

If you wish to access or correct your Personal Data or have any questions about this Privacy Policy, please email our data protection officer at support@idsure.io.

5. Your rights: right of information and withdrawal

You can obtain information free of charge at any time about your data. You can also submit a request to block, rectify or delete personal data that we have saved about you, or revoke the consent you have given us to collect and use your data. To do so, please contact support@idsure.io. Your request will be dealt with promptly, within 3 days.

6. Where we store your personal information

We store your personal information within the European Economic Area.

7. How long we store your personal information

IDsure retains personal data for 18 months after the end of the service, after which all personal data will be destroyed. Financial data is stored according to the fiscal term of seven (7) years and subsequently destroyed.

8. Cookies

We make use of cookies to extend the operability of our website and make its use more convenient for you. You have the option of preventing cookies being stored on your computer by modifying your browser settings, however this can limit the usability of our website. Please see our Cookie Policy for more information.

9. Data collection via Google Analytics

Our website utilizes Google Analytics, a web analysis service. Google Analytics collects information on your operating system, browser, IP address, the previous website visited, and the date and time you visited our website. Google uses this information to analyse your use of our website and to compile reports on website activity. This use is anonymous or uses pseudonyms.

10. Collection and saving of usage data

We collect and store data such as the date and time of website access and the page from which you called up our site, to optimise our website. This is done anonymously without personally identifying the user. We only collect this data for statistical purposes to further enhance our website — it cannot be traced back to you as an individual.

11. Newsletter & marketing

IDsure operates a strict opt-in policy for individuals who are not yet customers. We will not send you our newsletter or information unless you have requested to receive these updates from us. This data is only collected for the purpose of sending you the newsletter and will not be sold to third parties.

If you wish to be removed from our direct marketing list, you can do so by:

• Logging in to My IDsure and using the link in the My Details section
• Clicking the unsubscribe link at the bottom of any email communication
• Contacting us at support@idsure.io

Please note that in some cases it is necessary for us to communicate with customers by email even after unsubscribing. These communications are strictly service-related and limited to vital information regarding our services or technical problems.

12. Complaints

For possible complaints about the processing of personal data by IDsure ApS., you can submit a complaint to the Danish Data Protection Authority.