ExpectID:
This Service Schedule is supplementary to the GBG Terms and applies to the ExpectID Service. Additional Terms apply where the relevant Datasets are selected on the Order Form.
1.1 In this Service Schedule the following definitions shall apply in addition to those contained within the GBG Terms:
“ExpectID Additional Terms” means the supplementary terms and conditions relating to particular Datasets and/or aspects of the Service as updated from time to time which are available at https://www.gbgplc.com/legal-and-regulatory/additional-terms-v6/expectid/;
“Initial Price” means the Charges for the use of the Datasets provided as part of the Service during the fixed Initial Term of this Agreement, as agreed between the Parties and set out within the Order Form. Where the Initial Price listed on the Order Form is lower than the Standard Price listed, the Initial Price will be considered to be Preferential Pricing;
“Service” means the ExpectID service which comprises of the Datasets selected on the Order Form, any Batches processed pursuant to a Batch Request (if applicable) together with the Standard Support Services and Professional Services as described on the Service Page and any other ancillary services provided by GBG to the Customer pursuant to this Agreement;
“Service Page” is available at https://www.gbgplc.com/legal-and-regulatory/products-v6/expect-id/; and
“Standard Price” means GBG’s standard Charges for the use of Datasets provided as part of the Service as set out in the Order Form and updated by GBG from time to time.
2.1 Except where an Order is for: (i) an Evaluation, or (ii) a one-off Batch Request, this Agreement will start on the Contract Start Date and will continue for the Initial Term and thereafter on a rolling basis unless terminated earlier in accordance with the Agreement.
3.1 Except as set out in this clause 3 and any other provisions in the Agreement related to price increases (including the Order Form), on Renewal, Prepayments shall renew automatically.
3.2 If the Customer has received Preferential Pricing or if the Standard Pricing or payment terms that applied on the Contract Start Date have changed during the Initial Term then unless otherwise expressly agreed in writing between the Parties, GBG’s Standard Pricing and payment terms will prevail in respect of the Customer’s continued use of the Service after the Initial Term.
3.3 If the Customer materially breaches the Agreement and has received Preferential Pricing, GBG may terminate the Agreement or withdraw the Preferential Pricing as a consequence of the breach. GBG shall provide 30 days’ notice of its intention to revoke such pricing. Following revocation, GBG’s standard pricing and payment terms (as notified to the Customer) will apply from the date of the breach for the remainder of the Initial Term and any continued use thereafter.
3.4 Notwithstanding anything else in this clause 3, after the expiry of the Initial Term GBG shall be entitled to increase the Charges by providing at least 30 days’ notice of the change.
4.1 Compliance with Gramm-Leach-Bliley Act
The information that the Services provides to the Customer may contain consumer identification information governed by the Gramm-Leach-Bliley Act (“GLBA”). In accordance with the GLBA, Customer certifies its purposes for requesting such information is necessary for:
(a) Completion of a transaction authorized by the consumer including but not limited to the collection of delinquent accounts; and/or
(b) Fraud detection and prevention.
4.2 Compliance with Driver’s Privacy Protection Act (DPPA)
The Services also contain driver’s license and motor vehicle registration information subject to the protections of the Driver’s Privacy Protection Act (DPPA). In accordance with DPPA, Customer certifies its purposes for requesting such information is necessary for use in the normal course of business, to verify the accuracy of personal information submitted by the individual to the business and, if the submitted information is incorrect, to obtain correct information, but only for the purpose of preventing fraud by, or pursuing legal remedies against, or recovering on a debt or security interest against, the individual. 18 U.S.C. § 2721 (b)(3). Customer shall maintain copies of all written authorizations regarding Acceptable Uses for a minimum of five years from the date of inquiry.
4.3 Compliance with FCRA
Customer agrees to comply with the following limitations on the use of data provided by the Services:
(a) not to use the Services for any “permitted purpose” covered by the Fair Credit Reporting Act (15 U.S.C. Sec. 1681 et seq.) (“FCRA”) or use any of the information it receives through the Services to take any “adverse action”, as that term is defined in the FCRA;
(b) not to use the Services in violation of the Drivers Privacy Protection Act (18 U.S.C. Section 2721 et seq.);
(c) not to use the Services other than pursuant to an exception to the privacy provisions of the Gramm-Leach-Bliley Act (15 U.S.C. Sec. 6801 et seq.);
(d) not to use the Services or submit any consumer data to GBG in violation of any applicable laws related to the collection and disclosure of scanned state issued identity documents and, where required by applicable law, to obtain appropriate consent from any individual who submits their data to GBG in the course of GBG providing the Services;
(e) not to use the Services in violation of such other legislation that may be enacted in the future that GBG determines limits the use of the Services by Customer.
4.4 Customer shall not use the information gathered through the Services for marketing purposes. If at any time, GBG determines, in its sole and reasonable discretion, that Customer is not using the Services provided under this Order Form in compliance with any of the foregoing, GBG may suspend the Services immediately upon notice and without waiving any claim for damages. Upon GBG’s suspension of the Services for the foregoing reason, GBG agrees to work with Customer in good faith to identify any noncompliance arising from Customer’s use of the Services. If GBG determines Customer resolved the noncompliance within thirty days from the suspension, GBG shall reinstate the Services. If GBG determines Customer has not resolved the noncompliance within thirty days from the suspension, GBG may terminate the Order Form immediately upon notice.
5.1 The following terms apply to ExpectID Email License:
(a) Customer Instruction and Authorized Disclosure of Personal Data to Designated Third-Party Email Verification Provider
(b) Customer Election and Instructions. Where Customer elects to use the Email Services utilizing LexisNexis Risk Solutions (“LNRS”), on this Order Form, Customer hereby instructs GBG to disclose to LNRS the following Personal Data submitted for verification: (i) email address (required); and (ii) IP address (optional), solely for the purpose of obtaining a fraud risk score or other risk intelligence associated with such email address.
(c) Independent Processing by LNRS. Customer acknowledges that LNRS performs email verification services as an independent third-party provider. LNRS may retain and process the email address and IP address within its global fraud network for fraud prevention and detection purposes. Such processing is governed solely by LNRS’s own privacy practices, as set forth in its Processing Notice, available at https://risk.lexisnexis.com/group/processing-notices, incorporated herein by reference.
(d) Role of GBG. In connection with the email verification services, GBG acts solely on Customer’s instructions to facilitate the requested email verification service. GBG’s role is limited to (i) transmitting the email address and IP address to LNRS; and (ii) returning the resulting fraud risk score to Customer as part of the Services.
(e) Customer Transparency and Permissions. Customer, in its capacity as the Controller of Personal Data submitted for verification, represents and warrants that it has provided all required notices and obtained all necessary consents or permissions under applicable U.S. Privacy Laws prior to submitting email addresses or IP addresses for verification through LNRS’s email verification services, including with respect to the Processing performed by LNRS as described in this Section 5.
(f) LNRS – Incidental Processing of Personal Data Outside of the United States. Customer acknowledge and agrees that LNRS may utilize global infrastructure, including cloud-based architecture, to support high availability, redundancy and disaster recovery in connection with its performance of the email verification services. As a result, Personal Data submitted for verification may be incidentally stored, processed, or transmitted outside the United States.
Last updated: 29.07.2026
