Secure Verification Terms

Each secure verification link (/verification/:token) is issued to a specific individual or organisation for a specific verification case. The link is personal to the named recipient and must not be shared, forwarded or used by any other person.

Each individual requiring identity verification receives their own separate link. You cannot complete verification on behalf of another individual.

Each verification link has a defined expiry date. The link will cease to function after expiry. Lycia may also revoke a link at any time. Progress saved through the link before expiry is retained securely and may be resumed if a new link is issued.

You must ensure that all information provided through the verification link is accurate, complete and truthful. Providing false or misleading information may result in:

• Rejection of the verification application
• Termination of the onboarding process
• Reporting to relevant authorities where required by law

Identity documents uploaded through the verification process must belong to the named individual only. Uploading documents that do not belong to you, or that have been altered or forged, is strictly prohibited and may constitute a criminal offence.

Lycia may use third-party verification services to verify the information you provide, including:

• Shufti Pro — for identity, document, facial and liveness verification, and AML/PEP/sanctions screening
• Companies House — for company information verification
• HMRC — for VAT number verification

These services operate under their own terms and privacy policies. Lycia is not responsible for the accuracy of third-party data. A failed automated check does not necessarily indicate fraud — it may trigger manual review.

By using a verification link, you acknowledge that you have read and understood Lycia's Privacy Policy, which explains how your personal data is collected, used and protected during the verification process.

You consent to Lycia conducting verification checks using the information you provide, including identity verification, document verification, AML screening, PEP screening and sanctions screening. Where biometric processing is required (e.g. facial match and liveness), explicit consent will be obtained by the verification provider.

You may withdraw consent for consent-based processing at any time, though this may affect Lycia's ability to complete the verification process. Processing based on legal obligation (e.g. AML requirements) cannot be withdrawn.

The verification process requires a declaration that the information provided is accurate and complete. This declaration includes an electronic signature (your typed name and role). The electronic signature has the same legal effect as a handwritten signature under the Electronic Communications Act 2000.

If you experience technical difficulties with a verification link, or if you have questions about the verification process, contact your Lycia representative or use our contact page.

Lycia may revoke a verification link at any time, including where there is suspicion of misuse, fraud or unauthorised access. If your link is revoked, contact your Lycia representative for assistance.