TOPPAN Security
Contact Us

Privacy

Privacy Policy

We value your trust and are dedicated to protecting your privacy. This Privacy Policy outlines how we collect, use, share, and safeguard your information when you access or use our TOPPAN Security demos. By using our demos, you acknowledge and agree to the practices described in this policy.

Last updatedJuly 28, 2026TOPPAN Security ©
01

Digital Onboarding Demo

Updated February 2026

How identity documents, biometric data, and device information are handled during demonstration, evaluation, and testing.

TOPPAN SECURITY CO., LTD ("TOPPAN Security") provides a Digital Onboarding Platform that enables remote identity verification, document authentication, biometric verification, liveness detection, AML screening simulations, risk assessment demonstrations, and related compliance functionality for testing and evaluation purposes.

The terms "TOPPAN Security," "we," "us," "our," and "ours" include subsidiaries, divisions, branches, affiliates, or companies under the control of TOPPAN Security. The terms "you," "your," and "yours" mean any end user of the Digital Onboarding Demo mobile application or related online services.

Important

By submitting personal data to us and/or by using our online services, you consent to your personal data being processed in the manner and for the purposes described below.

Scope of Privacy Notice

This Privacy Notice describes our current policies and practices regarding personal data collected directly from you and/or through our Online Services. The term "personal data" refers to personally identifiable information about you.

This Privacy Notice applies to the operation of our Digital Onboarding Demo mobile application ("TOPPAN Security – Digital Onboarding Demo") and any related web-based portal that directly links to this notice. The application is intended strictly for internal demonstration, evaluation, testing, and product validation purposes. It is not connected to any live banking system, financial institution, or production environment.

Online Services

We provide digital onboarding and identity verification functionality through our Digital Onboarding Platform ("Online Services") for demonstration, evaluation, and testing purposes. These services may include document capture and verification, including OCR and NFC reading where applicable; facial recognition and biometric matching; liveness detection; AML screening simulations; risk-scoring demonstrations; and fraud-prevention feature simulations.

The Digital Onboarding Demo mobile application is used solely for internal demo and testing purposes. By downloading and accessing the application and providing identity documents, biometric data such as facial images, and other personal information, you acknowledge that your personal data will be processed by TOPPAN Security exclusively for demo, evaluation, troubleshooting, product validation, system security, and service-improvement purposes. No onboarding decisions are transmitted to a financial institution or third party through this Demo application.

Your access data and demo records may be retained for audit, testing, compliance, fraud-prevention simulation, dispute resolution, system security, reporting, and product-development purposes, as applicable.

Notification of Changes to This Notice

TOPPAN Security continually improves its methods of communication and adds functionality and features to existing services. Because of these ongoing changes, changes in the law, and the changing nature of technology, our data practices may change. We encourage you to review this Privacy Notice periodically within the Digital Onboarding Demo application.

Collection, Use, and Disclosure of Personal Data

TOPPAN Security acts as a data controller when you use the Digital Onboarding Demo Platform. We may collect personal data necessary to demonstrate identity-verification functionality, including your full name, date of birth, nationality, residential address, identification-document details, facial image and biometric data, device information, and contact details where required. We process this data strictly for demonstration, testing, troubleshooting, security monitoring, compliance obligations, and product-improvement purposes.

  • We may use your personal data to administer the TOPPAN Security Digital Onboarding Demo App and Online Services and to help improve our services.
  • We may disclose information in our databases and server logs to comply with a legal requirement, administer justice, protect national security only to the extent strictly necessary and proportionate, protect your vital interests, protect the security or integrity of our databases or Online Services, take precautions against legal liability, or in connection with a sale, merger, reorganization, dissolution, or similar event.
  • In the event of a corporate sale, merger, reorganization, dissolution, or similar event, your personal data may form part of an asset transfer or sale.

Retention

TOPPAN Security retains personal data only for as long as necessary to fulfill the stated demo and testing purposes or as legally required, and then securely destroys it.

When personal data is no longer necessary or relevant for its stated purpose or to fulfill a legal or business requirement, TOPPAN Security will physically or electronically erase it.

Data Security

We take sensible precautions to protect the information we collect, including physical, technical, and organizational procedures designed to safeguard information from loss, misuse, unauthorized access, or disclosure. Access to this information is protected both online and offline.

Anonymous Data Collected Through Online Services

We may use technology to collect anonymous information about the use of our Online Services. For example, our servers may automatically log pages viewed, IP addresses, device types, and operating systems. This technology does not identify you personally; it enables us to compile usage statistics and improve system performance and stability.

Cookies

We may use temporary "cookies" or similar technologies that remain in your browser until it is closed. Cookies by themselves cannot discover a user’s identity. A cookie is a small piece of information sent to your browser and stored on your device. Cookies do not damage your device, and you can set your browser to notify you when you receive one so you can decide whether to accept it.

Server Location

TOPPAN Security may host and process data in secure data centers in multiple jurisdictions for demo and testing purposes. When personal data is transferred across borders, appropriate safeguards are implemented in accordance with applicable data-protection laws.

Enforcement and Dispute Resolution

We regularly review how we meet our privacy objectives. If you have questions, requests, or complaints about our privacy practices, contact info@toppansecurity.com. If we do not acknowledge or resolve a complaint in a timely manner, we agree to participate in dispute-resolution procedures established by the Hong Kong Mediation Center. If necessary, you may submit a complaint at Hong Kong Mediation Center. Under certain conditions, you may invoke binding arbitration.

Any dispute arising from or connected with this Privacy Notice shall be submitted to the Hong Kong Mediation Center for mediation under the Center Mediation Rules in effect at the time.

To exercise your data-protection rights, including access, correction, or deletion, contact info@toppansecurity.com.

02

iDenKey / iDenFace

Updated February 2026

How personal data is processed across the iDenFace authentication and iDenKey digital-identity services.

TOPPAN Security provides digital identity verification and authentication services through our proprietary recognition tools iDenFace™ and iDenKey™.

The terms "TOPPAN Security," "we," "us," "our," and "ours" include subsidiaries, divisions, branches, affiliates, or companies under the control of TOPPAN Security. The terms "you," "your," and "yours" mean any user of these Online Services.

Important

By submitting personal data to us and/or by using our online services, you consent to your personal data being processed in the manner and for the purposes described below.

Scope of Privacy Notice

This Privacy Notice describes our current policies and practices regarding personal data collected directly from you and/or through our Online Services and the website’s contact form. The term "personal data" refers to personally identifiable information about you.

This notice applies to our Online Services through the iDenFace™ Authenticator and iDenKey™ apps, which link directly to this notice.

Online Services

We provide digital identity verification and authentication through our proprietary iDenFace™ and iDenKey™ tools ("Online Services"). These services are available through the iDenFace™ SDK and iDenKey™ SDK. By accessing the apps and providing personal information through the Online Services, you agree to the use of your personal data and contact information in accordance with this Privacy Notice.

We may contact you regarding updates, modifications, and additional service offerings. Access records may be retained and used for support, transition, maintenance, service improvements, technical development, and compliance with reporting, audit, and data-retention requirements.

Notification of Changes to This Notice

TOPPAN Security continually improves its methods of communication and adds functionality and features to existing services. Because of these ongoing changes, changes in the law, and the changing nature of technology, our data practices may change. We encourage you to review this page frequently and whenever you submit personal information through our Online Services.

TOPPAN Security as a Data Processor

From time to time, TOPPAN Security may need to process data that you uploaded, stored, or shared with us for troubleshooting or for the development or improvement of our Online Services, internally or with trusted partners. TOPPAN Security does not review or analyze the content of that data. It may, however, contain personal data that we use or process to support troubleshooting, development, or improvement.

TOPPAN Security as a Data Controller

When you use our products and services or request information, we may request personal data such as your name, an uploaded photo of your face, address, email address, and telephone number. We may also request demographic information to provide a personalized service. The information you provide is stored manually or electronically in our databases.

  • To provide requested product or service information, personal data may be shared with companies in our group and third parties acting for us, for further processing consistent with the original purpose or a purpose to which you consented. Third parties may support information technology, supplement or correct data, provide additional publicly available data, or handle mailings. We require third-party processors to apply the same level of protection and act consistently with this notice.
  • We may retain your contact details for marketing and market research. You can opt out by following the unsubscribe process described in the relevant communication.
  • We may use personal data to administer the iDenFace™ Authenticator app and Online Services and to improve our services.
  • We may share personal data with other companies in our group, which may contact you about products or services that could interest you.
  • We may disclose information in our databases and server logs to comply with legal requirements, administer justice, protect national security only to the extent strictly necessary and proportionate, interact with anti-fraud databases, protect your vital interests, protect the security or integrity of our databases or Online Services, take precautions against legal liability, or in connection with a sale, merger, reorganization, dissolution, or similar event.
  • In a corporate sale, merger, reorganization, dissolution, or similar event, your personal data may form part of an asset transfer or sale.

Retention

TOPPAN Security retains personal data only for as long as necessary to fulfill the stated purposes or as legally required, and then securely destroys it.

When personal data is no longer necessary or relevant for its stated purpose or to fulfill a legal or business requirement, TOPPAN Security will physically or electronically erase it.

Data Security

We take sensible precautions to protect the information we collect, including physical, technical, and organizational procedures designed to safeguard information from loss, misuse, unauthorized access, or disclosure. Access is protected both online and offline.

Anonymous Data Collected Through Online Services

We use technology to collect anonymous information about Online Services usage. For example, our web server may log pages viewed, IP addresses, and browser types. This technology does not identify you personally; it enables us to compile usage statistics.

Our Online Services contain hyperlinks to other pages within the services. We may track how often these links are used and which pages users choose to view.

Cookies

We may use temporary "cookies" that remain in your browser until it is closed. Cookies by themselves cannot discover a user’s identity. A cookie is a small piece of information sent to your browser and stored on your device. Cookies do not damage your device, and you can set your browser to notify you when you receive one so you can decide whether to accept it.

Enforcement and Dispute Resolution

We regularly review how we meet our privacy objectives. If you have questions, requests, or complaints about our privacy practices, contact info@toppansecurity.com. If we do not acknowledge or resolve a complaint in a timely manner, we agree to participate in dispute-resolution procedures established by the Hong Kong Mediation Center. If necessary, you may submit a complaint at Hong Kong Mediation Center. Under certain conditions, you may invoke binding arbitration.

Any dispute arising from or connected with this Privacy Notice shall be submitted to the Hong Kong Mediation Center for mediation under the Center Mediation Rules in effect at the time.

03

SuperApp Application

Updated February 2026

How the mobile application accesses information, connects to services, and supports user rights.

TOPPAN Security provides this Privacy Notice to demonstrate our commitment to privacy. It applies to your use of the TOPPAN SuperApp on a mobile device.

Your use of the Application is at the request of a TOPPAN Security customer ("TOPPAN Security Customer"). That customer may collect and use your personal data independently of us. This Privacy Notice does not apply to personal data you provide directly to the TOPPAN Security Customer.

Changes to the Privacy Notice

This Privacy Notice may be updated from time to time for any reason. You should consult it regularly through the Application. By continuing to use the Application after notification of a change, you acknowledge and accept the change.

Information the Application Obtains and How It Is Used

When you install and use the Application, we do not collect any data.

If we need to collect information or access parts of your device, we will first inform you and/or ask for your consent, as applicable. The data will be used only in accordance with this Privacy Notice.

Precise Real-Time Location Information

Enabling Location Services on the device is voluntary and necessary for BLE data transfer. We do not collect precise real-time location information from the device.

Location Services help the device optimize the Application’s ability to communicate with readers using the BLE communication protocol. The Application accesses, but does not store, your device’s location data to determine your current location when presenting a Mobile ID to a reader.

Connections to Web Services

The user may trigger the Application to connect to the internet in the following circumstances:

  • A credential document is being provisioned.
  • An update or revocation check is requested for a provisioned credential.
  • The user is involved in a transaction with a web service.

Third-Party Access

Third parties do not see or have access to information obtained by the Application.

Opt-Out Rights

You can stop the Application from collecting or accessing information by uninstalling it using the standard process on your mobile device, mobile application marketplace, or network.

Managing Your Information

Requests to manage your information should be directed to the TOPPAN Security Customer, which is the controller of your data.

Children

We do not knowingly use the Application to solicit data from or market to children under 13. If a parent or guardian becomes aware that a child has provided information without consent, contact info@toppansecurity.com. We will delete the information from our files within a reasonable time.

Security

We are concerned about safeguarding the confidentiality of your information. We provide physical, electronic, and procedural safeguards for information we process and maintain. We limit access to authorized employees and contractors who need it to operate, develop, or improve the Application.

Although we endeavor to provide reasonable security for the information we process and maintain, no security system can prevent every potential security breach.

Users in the European Union

If you are in the European Union, TOPPAN Security is the processor of your personal information and provides a service to a TOPPAN Security Customer. Under certain circumstances, data-protection law gives you the following rights:

  • Request access to your personal data, commonly known as a "data subject access request." This enables you to receive a copy of the personal data we hold about you and to check that we process it lawfully.
  • Request correction of the personal data we hold about you. This enables you to have incomplete or inaccurate data corrected, though we may need to verify the accuracy of the new data you provide.
  • Request erasure of your personal data where there is no good reason for us to continue processing it, where you have successfully objected to processing, where we may have processed your information unlawfully, or where local law requires erasure. We may not always be able to comply for specific legal reasons, which will be provided to you when applicable.
  • Object to processing where we rely on a legitimate interest and your particular situation makes you feel that processing impacts your fundamental rights and freedoms. You may also object to processing for direct-marketing purposes. In some cases, we may demonstrate compelling legitimate grounds that override your rights and freedoms.
  • Request restriction of processing while we establish the data’s accuracy; where use is unlawful but you do not want erasure; where you need us to retain data to establish, exercise, or defend legal claims; or while we verify whether legitimate grounds override your objection.

International Transfers

TOPPAN Security may process personal information relating to individuals in the European Union and transfer it from the EU under data-processing agreements based on the EU Standard Contractual Clauses. We apply safeguards in accordance with applicable law. Data collected in the EU and European Economic Area ("EEA") may be stored, processed, or transferred outside the EEA.

Complaints

If you are based in the EU, you can file a complaint with the supervisory authority in your Member State. For example, users in Ireland can file a complaint with the Data Protection Commission.

04

TOPPAN Wallet

Updated February 2026

How the mobile wallet accesses device services, handles information, and supports user rights.

TOPPAN Security provides this Privacy Notice to demonstrate our commitment to protecting your privacy. It applies to your use of the TOPPAN Wallet on a mobile device.

Your use of TOPPAN Wallet is at the request of a TOPPAN Security customer ("TOPPAN Security Customer"). That customer may collect and use your personal data independently of TOPPAN Security. This Privacy Notice does not apply to personal data you provide directly to the TOPPAN Security Customer.

Changes to the Privacy Notice

This Privacy Notice may be updated from time to time for any reason. You should consult it regularly through TOPPAN Wallet. By continuing to use TOPPAN Wallet after notification of a change, you acknowledge and accept the change.

Information TOPPAN Wallet Obtains and How It Is Used

When you install and use TOPPAN Wallet, we do not collect any data.

If we need to collect information or access parts of your device, we will first inform you and/or ask for your consent, as applicable. The data will be used only in accordance with this Privacy Notice.

Precise Real-Time Location Information

Enabling Location Services on the device is voluntary and necessary for BLE data transfer. We do not collect precise real-time location information from the device.

Location Services help the device optimize the App’s ability to communicate with readers using the BLE communication protocol. The App accesses, but does not store, your device’s location data to determine your current location when presenting a Mobile ID to a reader.

Connections to Web Services

The user may trigger the App to connect to the internet in the following circumstances:

  • A credential document is being provisioned.
  • An update or revocation check is requested for a provisioned credential.
  • The user is involved in a transaction with a web service.

Third-Party Access

Third parties do not see or have access to information obtained by TOPPAN Wallet.

Opt-Out Rights

You can stop TOPPAN Wallet from collecting or accessing information by uninstalling it using the standard process on your mobile device, mobile application marketplace, or network.

Managing Your Information

Requests to manage your information should be directed to the TOPPAN Security Customer, which is the controller of your data.

Children

We do not knowingly use TOPPAN Wallet to solicit data from or market to children under 13. If a parent or guardian becomes aware that a child has provided information without consent, contact info@toppansecurity.com. We will delete the information from our files within a reasonable time.

Security

We are concerned about safeguarding the confidentiality of your information. We provide physical, electronic, and procedural safeguards for information we process and maintain. We limit access to authorized employees and contractors who need it to operate, develop, or improve the App.

Although we endeavor to provide reasonable security for the information we process and maintain, no security system can prevent every potential security breach.

Users in the European Union

If you are in the European Union, TOPPAN Security is the processor of your personal information and provides a service to a TOPPAN Security Customer. Under certain circumstances, data-protection law gives you the following rights:

  • Request access to your personal data, commonly known as a "data subject access request." This enables you to receive a copy of the personal data we hold about you and to check that we process it lawfully.
  • Request correction of the personal data we hold about you. This enables you to have incomplete or inaccurate data corrected, though we may need to verify the accuracy of the new data you provide.
  • Request erasure of your personal data where there is no good reason for us to continue processing it, where you have successfully objected to processing, where we may have processed your information unlawfully, or where local law requires erasure. We may not always be able to comply for specific legal reasons, which will be provided to you when applicable.
  • Object to processing where we rely on a legitimate interest and your particular situation makes you feel that processing impacts your fundamental rights and freedoms. You may also object to processing for direct-marketing purposes. In some cases, we may demonstrate compelling legitimate grounds that override your rights and freedoms.
  • Request restriction of processing while we establish the data’s accuracy; where use is unlawful but you do not want erasure; where you need us to retain data to establish, exercise, or defend legal claims; or while we verify whether legitimate grounds override your objection.

International Transfers

TOPPAN Security may process personal information relating to individuals in the European Union and transfer it from the EU under data-processing agreements based on the EU Standard Contractual Clauses. We apply safeguards in accordance with applicable law. Data collected in the EU and European Economic Area ("EEA") may be stored, processed, or transferred outside the EEA.

Complaints

If you are based in the EU, you can file a complaint with the supervisory authority in your Member State. For example, users in Ireland can file a complaint with the Data Protection Commission.