Identity & Biometric Verification

1. Responsible company and provider

ParlourTT is a brand operated by Generate One Solutions Ltd. Generate One Solutions Ltd. determines the purpose of marketplace identity checks. Didit is the intended independent verification service provider.

Live verification is not yet activated on ParlourTT. The current integration is a restricted technical Sandbox; a demonstration result does not establish that a real person is verified.

2. Why identity checks may be required

When separately approved, identity checks may be used to assess identity evidence, support age eligibility, deter impersonation and duplicates, investigate concerns and protect account integrity. A check cannot promise a trustworthy seller or safe transaction.

3. Sensitive information that may be collected

• National ID, passport or other allowed identity-document images and the fields extracted from them, including name, date of birth, document number and expiry
• Portraits from documents and a live selfie, liveness video or frames
• Facial geometry or biometric templates used for face matching or liveness
• Verification outcome, failure reasons and relevant workflow metadata
• IP/device, approximate location, proxy/VPN and fraud-related signals when that feature is enabled

The actual categories depend on the configured workflow. Didit's hosted verification page may also produce essential error monitoring and usage metrics. Some processor subprocessors may assist; see Didit's collection explanation.

4. Where documents and facial media are handled

The planned process directs participants to an approved Didit-hosted flow. Do not send images of your government ID, selfie or facial video through ParlourTT messages, public listings or ordinary email. ParlourTT's current backend is designed to retain limited session references and bounded status values, not a complete copy of the underlying identity documents or biometric media.

Any expansion of media collection or storage would require new notice, legal review and technical authorization.

5. Notice, informed choice and alternatives

Before an authorized check begins, the participant must receive a clear explanation of the purpose, categories, provider, potential consequences, retention and options to decline or withdraw consent where applicable. Appropriate explicit consent will be required for sensitive facial capture where the law demands it.

Declining a check may prevent access to features that genuinely require identity verification. Alternative assessment or appeal arrangements must be reviewed and should not be promised where they are not operational. Consent does not guarantee automatic account approval.

6. Retention, training and deletion

The currently configured Didit Sandbox application retains session data for one month and is set to delete biometric templates with their sessions. Didit was configured to exclude the organization's new verification data from future model training. These settings may differ from a future production deployment and will require re-verification before Live processing.

Deletion of a Didit session does not necessarily erase distinct legal audit records or all backup copies on the same schedule. Separately, ParlourTT's status references and moderation logs have their own retention policies and are not automatically included in Didit's one-month setting.

For data-access or erasure requests, contact privacy@parlourtt.com. If necessary, verified requests concerning provider-held biometric records will be coordinated with Didit.

7. International processing and restricted access

Didit states that verification data is processed in the EU by default. Provider hosting, security monitoring and authorized subprocessors may involve additional jurisdictions. We must assess the contract, subprocessor list and cross-border safeguards before live launch.

Access must be restricted to specifically authorized personnel and legitimate support functions. No public user, advertiser or ordinary marketplace member may inspect other individuals' identity documents or face templates.

8. Human review, appeals and safety

Didit reports an identity-check result; it does not grant trading access, message privileges or a ParlourTT Verified badge. An authorized reviewer must independently assess any evidence required under ParlourTT's launch rules.

Verification is not a criminal-background check or a guarantee against fraud. Participants should retain the ability to report errors and request appropriate reconsideration.

9. Age restriction and test environments

Individual adult verification is intended for people aged 18 or older. A Sandbox result is simulated. Genuine documents, facial captures and liveness media must not be entered into test flows without a separate approved data-processing basis.

A successful technical demonstration is not proof of eligibility or marketplace authorization.

10. Contact and policy relationship

For questions about identity verification, privacy or deletion, contact privacy@parlourtt.com. This notice supplements the Privacy Policy and Data Collection & Retention Notice.

Didit's independent verification notices are available at didit.me/terms.