Experian IDnotifyTM Privacy Policy (Solely For Eligible Consumers Impacted by the Equifax Cybersecurity Incident)

ECS (as defined below) respects individual privacy and values the confidence of our subscribers. This Privacy Policy sets out the privacy principles that we follow only with respect to processing personal information in the course of providing the IDnotify credit monitoring and identity theft protection service to eligible consumers (the “Service”) as part of the Equifax cybersecurity incident announced on September 7, 2017 (the “Equifax Cybersecurity Incident”).We will only collect, use and disclose personal information in a manner consistent with the laws of the countries in which we operate, for example, both relevant Federal and State laws in the U.S. By using the ECS website (or other means provided by ECS to you such as call center services) for the IDnotify service provided to eligible consumers as part of the Equifax Cybersecurity Incident (the “Site”), you consent to the data practices described in this Privacy Policy.

By using the Site, you agree to the terms of this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use the Site. We reserve the right to change this Privacy Policy without prior notice. You agree to obtain annual notices of, and changes to, this Privacy Policy electronically by visiting this Site. You can determine when this Privacy Policy was last revised by referring to the “Effective Date” at the bottom of this page. Any changes to our Policy will become effective upon our posting of the revised Privacy Policy on the Site. Use of the Site following such changes constitutes your acceptance of the revised Privacy Policy then in effect. Therefore, we encourage you to review this Site from time to time for changes to our Privacy Policy. If we make any material changes, we will update you by means of a prominent notice on this Site.

For purposes of this Agreement, the terms "we," "us" or "ECS" refer to, Inc., an Experian® company (also known as Experian Consumer Services), and its service provider(s) or vendors, including CSIdentity Corporation, an Experian® company (also known as Experian Partner Solutions), and referred to as "Experian" on the websites, its predecessors in interest, successors and assigns, and any of its third party service providers or vendors (including, without limitation, credit bureaus such as Equifax and TransUnion and cloud service providers) who ECS uses in connection with the provision of the Service to you.

This Privacy Policy applies only to all personal data provided to ECS from consumers (or otherwise accessed by ECS in connection with providing the Service to such consumers) applying to use our IDNotify service as part of the Equifax Cybersecurity Incident.If you provide personal data to ECS in connection with a different product or service that is unrelated to the Equifax Cybersecurity Incident, you may be subject to a different privacy policy provided to you either on our affiliated website(s) or during your transaction with ECS for these other services.

This Privacy Policy describes how ECS collects, uses, shares and secures the personal information you provide or is otherwise collected to provide the Service to you. It also describes your choices regarding use, access and correction of your personal information.

The ID Notify service combines multiple layers of protection and goes beyond basic credit monitoring for 360 degrees of identity defense. We offer comprehensive protection that reviews your credit and non-credit identity records in order to protect your identity. Protecting our subscriber’s privacy is at the forefront of ECS.


We may collect personal information from which you can be identified, such as your name, date of birth, postal and e-mail address, phone number, national identifier or social security number (as applicable).

We will use this data to access and monitor various data sets that you request us to monitor as part of your identity protection service and for the prevention and detection of fraud. When you close your account, we may continue to share information about you according to our legal and regulatory requirements, such as lawful requests by public authorities or compliance with a subpoena as described in Section 3 of this Agreement.

We will use the information you provide us solely for the purpose of providing you with the products and services you have requested and for administering our relationship with you, internal business purposes, our product or service development and/or statistical analysis.

In some instances, we may ask information from you about others (such as your child’s information). We will only use that information for the specific reason for which it was provided to us.


We will share your personal information with third parties only in the ways that are described in this Privacy Policy. We do not sell your personal information to, or share such personal information with, third parties for their promotional use or for marketing purposes.

In order for us to provide you with our identity protection service and for the prevention and detection of fraud, we will share your personal information with third parties who perform services on our behalf. Depending on the service you have requested, we may share your name, e-mail address, national identifier or social security number (as applicable), income, account balances, payment history and credit history with credit bureaus, to verify your identity and provide information as part of your Service from those credit bureaus, including your credit report, credit monitoring, and alerts for changes to information contained in your credit report. These companies are authorized to use your personal information only as necessary to provide these services to us.

In certain situations, ECS may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

As may be required by law, we may also disclose your personal information, for example, to comply with a subpoena, or similar legal process, when we believe in good faith that the disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

In addition, in the event of a merger, acquisition, or any form of sale of some or all of our assets to a third party, we may also disclose your personal information to the third parties concerned or their professional advisors. In the event of such a transaction, the personal information held by ECS will be among the assets transferred to the buyer.


We have appropriate physical, technical and organizational measures in place to protect your data when held by ECS that comply with relevant legal and best practice requirements. When you enter sensitive information (such as a social security number or login credentials) as part of the enrollment process, we encrypt the transmission of that information using secure socket layer technology (SSL).

When you submit information to ECS through the relevant portal or web site, you should be aware that your information is transmitted across the Internet and that no method of transmission over the Internet is 100% secure. Although we take reasonable security measures to protect your information when we receive it, you also need to ensure you take appropriate steps to protect your information.

We will obtain assurances from any agents we may use to help provide this service that they will safeguard personal information consistently with this Privacy Policy.


We, and the third parties we engage to perform analytics services, automatically collect certain general information when you access our web site, via Cookies, Log Files, Web Beacons, and other tracking technologies (the “Tracking Technologies”). We and the third parties we engage use these Tracking Technologies to administer and improve our Site and the content on it, including to track user movements around the Site, to gather usage information and statistics about how the Site is used, to permit users to log in or enroll in our services, to store user preferences, and to customize content. We do not use cookies for marketing or advertising purposes.

We may combine the information we have automatically collected from you with other information we collect about you. We do this to improve services we offer you, to improve analytics, or web site functionality, and to develop new products and services. The following are some examples of information we may collect:

  • ECS Web site pages you view
  • Emails that you open or forward
  • Links you click on
  • Forms you complete

In connection with the use of the Site, for example during the enrollment process or upon log into the web site portal, information about your computer, such as the device ID and other accompanying technical attributes and characteristics, may be accessed, retained and used by us or our service provider solely to analyze trends, track users’ movements on the web site, and to gather demographic information about the user base as a whole. If you access the Site through a mobile device, we also may collect information about your device, such as the device ID or another identifier as permitted by the manufacturer.

ECS and our clients have access to reports produced by these service providers that contain anonymized trends and statistics about website usage on ECS’s proprietary platforms. However, neither ECS nor any other third parties are able to tie any of the anonymized analytics data to your personal information. At no time will this information be provided or sold to any third party affiliates for advertising or marketing purposes. The use of cookies by our partners and the third parties we engage to perform analytics services is not covered by our Privacy Policy.

We, and the third parties we engage to perform analytics services, use both session ID cookies and persistent cookies. Specifically, we use session-based cookies in order to store language and other country specific preferences such as support contact information. ECS may also utilize cookies in order to track internal metrics of site usage. A session ID cookie expires when you close your browser. A persistent cookie remains on your hard drive for an extended period of time. Persistent cookies also enable us to track and target the interests of our users to enhance the experience on our site. You can remove persistent cookies by following directions provided in your Internet browser’s “help” file. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of the web site.

As is true of most websites, we gather certain information automatically and store it in log files. This information may include Internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We do not link this automatically collected data to other information we collect about you.

Third parties with whom we partner to provide certain features on our website also use HTML5 to collect and store information. Various browsers may offer their own management tools for removing HTML5.


The Site may contain links to other web sites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other web site. Therefore, we cannot be responsible for the protection and privacy of any information that you provide while visiting such sites and such sites are not governed by this Privacy Policy. You should exercise caution and look at the privacy statement applicable to the web site in question.


If you have questions, comments, and/or complaints regarding ECS’s Privacy Policy or how we collect, transmit, and process data please contact us by:

PHONE (888) 280-8115




Attn: General Counsel
475 Anton Boulevard
Costa Mesa, CA 92626

Effective Date: October 25, 2018