Namejet keeps your records / verification docs forever

[Tytus]

Been contemplating getting verified there but can't decide due to this issue. In 30 years I never had an issue where I couldn't request my documents deleted (other than government). I recently contacted them and asked them that if I ever request my account to be deleted with my personal info (shredded or other matter) like the color id and personal info the support answered that they never delete the accounts and keep the documents forever.

On their application they ask for either drivers license or passport, that information is with namejet forever. Who knows what else they do with that info as keeping it forever is unorthodox.

Response Chris B. via Email12/01/2015 04:27 AM
Hello,

Thank you for contacting NameJet Technical support.

For historical tracking and auditing purposes, we do not delete the account, nor can your login name be used again. This includes any information to verify you, except credit card information.

If you have any additional questions regarding this matter, please let us know.

Regards,
Chris B.
Technical Support

I'm pretty sure this is against the Canadian Privacy Act.

• Businesses must obtain the individual's consent when they collect, use or disclose personal information, except in some circumstances, such as information needed for an investigation or an emergency where lives or safety are at risk.

Not sure how it works if the business is outside Canada though.

What do you guys think?

 

[Kate]

My understanding is as follows:

As long as your account is active, they will retain personal data.
Even if you cancel your account, they will still retain personal data. For regulatory reasons, they are certainly obliged to keep it for a number of years.... To be on the safe side, companies will usually retain data longer than necessary.

However, I hope that they archive the sensitive documents to offline storage

PS: if I absolutely must send copy of ID, I always add a watermark with the name of the website in the background.
This is to prevent reuse of the documents scans in case of a data breach.