SimpliVerified - Privacy Policy

1. Introduction

SimpliVerified, LLC (“SimpliVerified,” “we,” “our,” or “us”) is a Consumer Reporting Agency (CRA) as defined by the Fair Credit Reporting Act (FCRA), 15 U.S.C. §1681 et seq. We specialize in employment background screening, verification services, tenant screening, drug testing, and related compliance services.

We are committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information in accordance with the FCRA, state privacy laws (including the California Consumer Privacy Act (CCPA/CPRA)), and Professional Background Screening Association (PBSA) best practices.

This policy applies to:

• Consumer information obtained for background screening or verification purposes; and
• Information collected through our website, online forms, communications, SMS text messaging, customer service interactions, or other business interactions.

2. FCRA Compliance and Purpose of Information Use

SimpliVerified provides consumer reports only to authorized users who have a permissible purpose under the FCRA and applicable state law.

Before providing any consumer report, we require our clients to:

• Certify that they have a legally permissible purpose (e.g., employment, tenancy, insurance, or credit);
• Obtain the consumer’s written consent prior to requesting a report; and
• Agree to maintain the confidentiality and security of all consumer information received.

SimpliVerified may periodically audit clients to confirm compliance with these requirements.

3. Information We Collect

The information we collect depends on the nature of the request and includes:

A. From Consumers (Subjects of Reports):

• Identifying information (name, date of birth, SSN, address, contact information);
• Employment and education history;
• Criminal and court records;
• Driving and professional license records;
• Credit or financial information (where authorized); and
• Drug screening and testing results (where applicable).

B. From Website Visitors and Clients:

• Name, company name, phone number, and email address submitted via contact forms;
• Mobile phone number and SMS communication preferences;
• Browser information, IP address, and device type;
• Website usage data through cookies, analytics, or similar technologies; and
• Communication records if you email, call, text, or otherwise communicate with us.

We do not sell consumer information to unrelated third parties.

4. How We Use Information

We use personal and consumer information to:

• Verify identity and perform background checks for authorized clients;
• Deliver accurate, FCRA-compliant consumer reports;
• Manage customer accounts and communications;
• Send service-related communications, customer feedback requests, and review invitations;
• Maintain security and audit logs;
• Respond to consumer inquiries and disputes;
• Improve our website, customer experience, and services; and
• Comply with legal or regulatory obligations.

5. Disclosure of Information

We disclose information only in accordance with the FCRA, applicable privacy laws, or as otherwise required to provide our services:

• To the end user (client) authorized to receive the consumer report;
• To government or law enforcement agencies when legally required;
• To service providers or data partners (e.g., courts, schools, laboratories, technology providers, and communications providers) that assist us in providing our services, subject to appropriate confidentiality and security requirements; and
• To legal authorities pursuant to subpoena, court order, or other lawful request.

We do not maintain a resale database of consumer information and do not sell or rent personal data for marketing purposes.

6. Data Storage, Retention, and Security

SimpliVerified maintains a secure electronic and physical environment designed to protect data from unauthorized access, use, alteration, or disclosure.

Security measures include:

• Encrypted data transmission and storage;
• Access limited to personnel with a business need to know;
• Secure passwords, multi-factor authentication, and audit logs; and
• Shredding and digital deletion in accordance with the FTC Disposal Rule (16 C.F.R. §682).

Consumer information is retained only as long as necessary to fulfill the purpose for which it was obtained and as required by law, contractual obligations, or applicable audit standards.

7. International Data Handling

SimpliVerified does not transmit consumer information outside the United States except when necessary to verify information obtained from a foreign source. Such data is returned to the United States and treated with the same security protections as domestic data.

8. Consumer Rights Under the FCRA

If SimpliVerified has prepared a background report about you, you may have the right under the FCRA to:

• Obtain a copy of your report;
• Dispute inaccurate or incomplete information;
• Receive the results of a reinvestigation as required by law; and
• Know who has requested or received your report as provided under applicable law.

9. Your Rights Under State Privacy Laws (CCPA/CPRA and Others)

If you are a California resident or reside in another state with applicable privacy legislation, you may have additional rights to:

• Request access to certain personal information we hold about you;
• Request correction or deletion of certain information, subject to legal exceptions and retention requirements;
• Request information about how certain personal information is used or disclosed; and
• Opt out of certain forms of data “sale” or “sharing,” where applicable.

SimpliVerified does not sell consumer report information for marketing purposes.

To exercise applicable privacy rights, contact us at privacy@simpliverified.com or through our website’s privacy form.

10. Cookies and Website Analytics

Our website may use cookies, tracking pixels, and analytics tools such as Google Analytics or HubSpot to improve site functionality, understand website usage, and measure engagement.

You can control cookie settings through your browser or device preferences.

We do not use cookies for the purpose of collecting sensitive consumer report information or tracking users across unrelated websites for consumer reporting purposes.

11. SMS Text Messaging and Google Review Requests

SimpliVerified may send SMS text messages to customers following completed customer service calls or other completed customer interactions. These messages may include a request to provide feedback about your experience or a link inviting you to leave a Google review.

Message frequency is generally limited to one text message per completed customer call or interaction. Message and data rates may apply. Reply STOP to opt out of future text messages. Where supported, reply HELP for assistance.

Participation in SMS messaging is voluntary. You are not required to leave a review, and choosing not to leave a review will not affect the services you receive from SimpliVerified.

We do not sell, rent, or share mobile phone numbers or SMS opt-in information with third parties for their marketing or promotional purposes. Mobile information may be disclosed to service providers that assist us in delivering text messages or operating our communications systems, solely as necessary to provide those services and subject to appropriate confidentiality and data protection requirements.

Any review you choose to submit through Google is governed by Google’s applicable terms and privacy policies.

12. Data Breach and Incident Response

In the event of a data security incident involving personal information, SimpliVerified will take appropriate steps to:

• Investigate the incident promptly;
• Contain and mitigate potential harm; and
• Notify affected individuals and authorities when required by applicable state or federal law.

13. Children’s Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors except where legally authorized and necessary in connection with services requested by an authorized client.

14. Policy Updates

This Privacy Policy may be updated periodically. The effective date displayed with this Privacy Policy indicates the most recent revision.

Substantive changes will be communicated through our website or through direct notice to affected individuals when required by applicable law.