faceping.aifaceping.aidocs

Privacy and compliance

Who's responsible for what, the consent wording, and what FacePing enforces for you.

Face templates are biometric data. FacePing is built so the lawful way is the default way — but as the organiser, you are the controller and FacePing (Wiretouch Ltd) is your processor.

What FacePing enforces#

  • 1:1 verification by default: the gate checks the face against the scanned ticket only.
  • Every event must offer a non-face entry lane.
  • No consent, no processing: consent is checked before a photo is decoded. Photos are never stored.
  • Face data is deleted 0–30 days after the event (default 7), on the server and on every device, and each deletion is logged.
  • Data stays in your region. Gate devices hold only their own event, encrypted, on a 24-hour lease.

What you do#

  1. Complete a DPIA before your first event (we provide a template).
  2. Publish a face check-in privacy notice and link it in the widget settings.
  3. Offer, and staff, a standard entrance at every event.
  4. Honour withdrawals and erasure requests (remove a guest).
  5. Sign our data processing agreement.

Email [email protected] for the compliance pack: data processing agreement, DPIA template, sub-processor list, retention schedule and accuracy report.

The widget shows this wording, filled in with your organiser name, event and retention. Use the same words, and the same version id, if you collect consent yourself.

UK (uk-v1) and EU (eu-v1) — two separate, unticked boxes:

I agree to [organiser] using my face data to check my ticket at entry. My photo will be turned into a face template, used only for entry to [event], and deleted [7 days after it]. I can withdraw at any time and use the standard entrance instead.

I have read the face check-in privacy notice.

US (us-v1) — a written biometric release:

Biometric data release. I authorise [organiser] and its service provider Wiretouch Ltd (FacePing) to create and store a face template (biometric identifier) from the photo I provide, for the sole purpose of verifying my identity when I enter [event]. It will be permanently destroyed [7 days after the event], and in any case no later than 30 days after it, under the published retention schedule. It will not be sold, leased, traded or shared, and I can withdraw at any time. Using face check-in is optional.

Under 16s: a parent or guardian agrees on their behalf: "I am the parent or guardian of the ticket holder and agree on their behalf."

Guest privacy notice#

Your notice should cover: who you are and how to contact you; that face check-in is optional and how to enter without it; that the photo becomes a face template and isn't kept; that it's used only for entry; the lawful basis (explicit consent); that FacePing processes it for you, in which region; when it's deleted; and how to withdraw or exercise rights. The compliance pack includes a ready-to-edit template.