How we collect, use, share and protect personal information — for website visitors, candidates and applicants to our team.
Authenticatin LLC ("Authenticatin", "we", "us") is a background screening and primary source verification company registered in the State of Wyoming, United States. We provide employment, education, credential and address verification services to businesses.
This policy explains how we handle personal information when we operate our website and when we carry out verification work on behalf of our clients.
Two different roles. When you visit this website, we decide how your information is used — in data protection terms we are the controller. When we carry out a verification check for a client, that client decides what is checked and why; we act as a processor on their instructions.
Where a client instructs us to verify a candidate, we may process:
We do not sell personal information. We do not use candidate data for marketing.
Where the GDPR or a similar framework applies, we rely on the following:
| Purpose | Legal basis |
|---|---|
| Responding to a business enquiry | Legitimate interests — replying to a request you made |
| Carrying out a verification check | Our client's legal basis, supported by the candidate's written authorisation |
| Assessing a job application | Steps taken at your request prior to entering a contract |
| Keeping records of completed work | Legal obligation and legitimate interests in defending claims |
| Website security and analytics | Legitimate interests in operating a secure service |
No verification check begins without a signed candidate authorisation. If a client cannot supply one, we decline the case.
We share personal information only where it is necessary:
Verification is by nature international. To confirm a credential issued in one country for an employer in another, information must cross borders.
Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including Standard Contractual Clauses with the parties involved and contractual confidentiality obligations with every specialist we engage.
| Category | Retention period |
|---|---|
| Website enquiry records | 24 months from last contact |
| Completed verification case files | As instructed by the client, and by default no longer than 12 months from completion |
| Candidate authorisation documents | Retained with the case file for the same period |
| Unsuccessful team applications | 12 months |
Case data is deleted on written instruction from the instructing client at any time. Candidates may also request deletion — see section 8.
Depending on where you are located, you may have the right to:
If you are a candidate who has been verified: your request may need to be directed to the organisation that commissioned the check, since they determine why the check was carried out. Contact us and we will tell you who that is and pass your request on.
We respond to rights requests within 30 days. There is no charge.
No system is completely secure. If a breach occurs that is likely to affect your rights, we will notify you and the relevant supervisory authority without undue delay.
This website uses only the cookies necessary to make it function and to keep it secure. We do not use advertising cookies and we do not track visitors across other websites.
Fonts and icon libraries are loaded from third-party content delivery networks, which will receive your IP address as part of that request.
Our services are directed at businesses. We do not knowingly collect information relating to anyone under 16 through this website. If you believe we have, contact us and we will delete it.
We may update this policy as our services or legal obligations change. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.
For any question about this policy, or to exercise your rights:
Authenticatin LLC
Email: contact@authenticatin.com
If you are in the EEA or UK and are not satisfied with our response, you may complain to your national data protection authority.