GDPR / CCPA Compliance
How Lead iD Ensures Data Privacy Compliance
Committed to GDPR, CCPA, and Global Privacy Standards
At Lead iD, we prioritize the protection and responsible use of personal data. In accordance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other global privacy laws, we have implemented a comprehensive privacy framework that ensures transparency, security, and user control.
Our Compliance Measures Include:
- Updated Privacy & Terms Policies: Clear, accessible, and fully aligned with GDPR and CCPA requirements.
- User Consent Controls: Integrated multi-step consent mechanisms to ensure informed, explicit, and revocable user choices.
- Data Security Protocols: Real-time intrusion detection, encryption at rest and in transit, and proactive threat monitoring.
- Data Breach Response: Documented procedures for breach notification and timely reporting to authorities and affected users in accordance with applicable laws.
- Third-Party Due Diligence: Contracts and data protection agreements with all vendors and partners to ensure privacy compliance across the ecosystem.
Ongoing Assessments
As part of our ongoing compliance, we regularly audit and review:
- What data we collect, and how it is used.
- Whether consent is properly obtained and documented.
- How long personal data is retained, and if it’s deleted when no longer needed.
- How we manage cross-border data transfers, particularly outside the EU/EEA.
- Whether special categories of personal data (sensitive information) are collected and handled lawfully and securely.
How does GDPR protect me?
Companies with permission to use your data are bound by law to protect and report any data breaches. They are also to provide a means to request a copy of the data and methods to update or delete the data. Other requirements with regards to data protection are data reuse limitations, less Ambiguous privacy and terms policies, and enhanced registration submission confirmations to be more explicit.
How is my information going to be used?
Lead iD employ’s the following principles when processing data.
- Lawfulness – personal data will be processed when there is a legal basis by consent; or if necessary precautions will be taken to protect a subject’s interests.
- Fairness – all data controller’s key compliance is to responsibly and lawfully provide sufficient information about our processes and to provide information about a data subject’s rights.
- Transparency – subject’s information request will be provided in a clear and concise manner.
- Purpose limitation – subject data is collected and processed for the specified intent and legitimate purposes by subjects and will not be used for unintended purposes.
- Data minimization – only relevant data is collected for the specified intent and will be collected and processed for a specified purpose.
- Accuracy – personal data can be updated and made accurate by both parties using updates.
- Storage retention – subject data will not be stored longer than necessary post-processing.
- Security – implemented across all data environments using best practice implementations like but not limited to firewalls, intrusion detection, and notifications.
How to request a copy of my information?
Complete the following form.
How can I update my information?
Complete the following form.
How is my information protected?
Fanatical data center security team is in place to safeguard data and to keep unwanted data abuse from occurring. Updated standard operating procedures are in place to report any data breach to the appropriate authorities and in the case of data loss procedures to update affected data subjects.
Is there a Retention Policy?
To help mitigate data breaches Lead iD has implemented date retention policies and have updated them to comply with GDPR. Data retention period for the subject’s data is 120-day rolling retention. Log level data is set to 25-month rolling retention.
The Right To Be Forgotten, how do I apply?
Complete the following form.
