Welcome to the Data & Privacy Policy of LexiGuard Legal Policy Solutions ("we," "us," or "our"). We are committed to protecting your personal information and being transparent about how we collect, use, store, and share your data.
This policy applies to all personal information collected through our website (lexiguard.com), services, applications, and any related platforms. By using our services, you agree to the terms outlined in this policy.
⚖️ We adhere to GDPR, CCPA, and other applicable data protection regulations to ensure your information is handled with the highest standards of security and transparency.
Information We Collect
Section 1We collect various types of information to provide, improve, and secure our services. The information we collect falls into the following categories:
1.1 Personal Information You Provide
- Identity Information: Full name, title, job role, and professional designation
- Contact Information: Email address, phone number, mailing address, and business address
- Account Information: Username, password, and authentication credentials
- Professional Data: Company name, industry, size, and business requirements
- Communication Records: Emails, chat messages, and correspondence with our team
1.2 Information Collected Automatically
- Device Information: Hardware model, operating system, browser type, and device identifiers
- Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths
- Log Data: IP address, access times, referring URLs, and error reports
- Location Data: Approximate geographic location based on IP address
1.3 Information from Third Parties
- Professional profiles from LinkedIn and other business networks
- Industry reports and publicly available business information
- Data from analytics partners and service providers
| Category | Examples | Purpose |
|---|---|---|
| Identity | Name, Title | Service delivery |
| Contact | Email, Phone | Communication |
| Technical | IP, Browser | Security & analytics |
| Professional | Company, Industry | Service customization |
| Usage | Page views, Clicks | Improvement |
How We Use Your Information
Section 2We use the information we collect for specific, legitimate purposes related to our business operations and service delivery:
2.1 Service Delivery & Management
We use your information to provide, maintain, and improve our legal policy consulting services, including policy drafting, compliance audits, and governance advisory.
2.2 Client Communication
- Responding to inquiries and providing customer support
- Sending service updates, notices, and administrative messages
- Notifying you about changes to our services or policies
- Delivering newsletters and industry insights (with your consent)
2.3 Business Operations
- Processing transactions and managing client accounts
- Conducting internal analysis and research
- Preventing fraud, abuse, and unauthorized access
- Ensuring compliance with legal and regulatory obligations
2.4 Service Improvement
We analyze usage patterns and feedback to enhance our website, tools, and service offerings. This helps us better understand client needs and deliver more effective solutions.
We will never sell your personal information to third parties. Your data is used solely for the purposes described in this policy or with your explicit consent.
Information Sharing & Disclosure
Section 3We are committed to transparency about when and why we share your information. We may share personal data only in the following circumstances:
3.1 Service Providers
We engage trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you. These providers are bound by contractual obligations to protect your information and use it only for the services they provide to us.
- Cloud Hosting: AWS, Microsoft Azure
- Analytics: Google Analytics, Mixpanel
- Communication: Microsoft 365, Twilio
- CRM & Marketing: Salesforce, HubSpot
3.2 Legal Requirements
We may disclose your information when required by law, regulation, legal process, or governmental request. This includes responding to court orders, subpoenas, or other legal proceedings.
3.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and provide options regarding your data.
3.4 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so, such as when you authorize us to share information with a partner organization.
All third-party recipients of your data are required to maintain appropriate security measures and comply with applicable data protection laws. We conduct regular audits of our service providers to ensure compliance.
Data Security Measures
Section 4At LexiGuard, we implement industry-leading security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.
4.1 Technical Safeguards
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Controls: Role-based access with multi-factor authentication
- Network Security: Enterprise firewalls, intrusion detection, and DDoS protection
- Vulnerability Management: Regular penetration testing and security audits
- Data Backup: Encrypted backups stored in geographically distributed locations
4.2 Organizational Safeguards
- Comprehensive employee training on data protection and privacy
- Strict non-disclosure agreements for all staff and contractors
- Regular privacy impact assessments and risk evaluations
- Dedicated Data Protection Officer (DPO) oversight
- Incident response plan with 24/7 monitoring capabilities
4.3 Data Breach Response
In the unlikely event of a data breach, we are committed to:
- Notifying affected individuals within 72 hours as required by GDPR
- Reporting to relevant supervisory authorities within legal timeframes
- Providing clear information about the nature of the breach and its potential impact
- Implementing remedial measures to prevent future incidents
- Offering credit monitoring services if financial data is compromised
While we employ robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to also take steps to protect your information, such as using strong passwords and keeping your devices updated.
Your Rights & Choices
Section 5Depending on your location and applicable laws, you may have the following rights regarding your personal information:
Right to Access
Request a copy of the personal data we hold about you, including details about how it is being processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
Request that we limit the ways in which we process your personal information.
Right to Data Portability
Receive your personal data in a structured, commonly used, machine-readable format.
Right to Object
Object to the processing of your personal data for direct marketing or other legitimate interests.
Right to Withdraw Consent
Withdraw your consent at any time where processing is based on consent, without affecting lawfulness of prior processing.
Right to Lodge a Complaint
File a complaint with your local data protection authority if you believe your rights have been violated.
How to Exercise Your Rights
To exercise any of these rights, please contact our Data Protection Officer at privacy@lexiguard.com or write to us at the address below. We will respond to your request within 30 days and may ask for additional information to verify your identity.
Note: Some rights may be subject to legal exemptions. For example, we may retain certain data to comply with legal obligations such as tax, accounting, or anti-fraud requirements even after a deletion request.
Cookies & Tracking Technologies
Section 6We use cookies and similar tracking technologies to enhance your experience on our website, analyze usage patterns, and deliver personalized content. Below is a breakdown of the types of cookies we use:
Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to:
- Accept or reject cookies
- Delete cookies that are already set
- Block cookies from specific websites
- Allow cookies from specific websites
- Delete all cookies when you close your browser
Please note that blocking or deleting cookies may affect the functionality of our website and your overall experience.
Data Retention & Deletion
Section 7We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements.
Retention Periods
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Client engagement records | 7 years after engagement ends | Tax & legal compliance |
| Website analytics data | 26 months | Legitimate interest |
| Marketing consent records | Until consent withdrawn | Consent-based |
| Employment data | 6 years after employment ends | Employment law |
| Security logs | 12 months | Security requirements |
| Communication records | 3 years | Business operations |
Data Deletion
When data reaches the end of its retention period, it is securely deleted or anonymized. Secure deletion methods include:
- Digital data: Secure erasure using industry-standard data sanitization
- Physical documents: Shredding by certified destruction services
- Backups: Overwritten and purged according to backup lifecycle policies
We conduct annual data retention reviews to ensure data is not retained longer than necessary. If you believe data is being held beyond what is required, please contact our DPO.
International Data Transfers
Section 8As a global organization, we may transfer your personal information across international borders to provide our services. We ensure that such transfers comply with applicable data protection laws.
Safeguards for Cross-Border Transfers
- EU Standard Contractual Clauses: We use the European Commission's Standard Contractual Clauses (SCCs) for transfers from the EEA to countries without adequacy decisions
- Adequacy Decisions: Where data is transferred to countries with EU adequacy decisions, we rely on these determinations
- Privacy Shield Alternatives: For transfers to the United States, we implement supplementary measures alongside SCCs
- Data Processing Agreements: All international processors are bound by DPAs that meet or exceed GDPR requirements
Regions Where Data May Be Processed
- United States (Primary operations and cloud hosting)
- United Kingdom (European client services)
- European Union (GDPR-compliant processing)
- Canada (Data backup and disaster recovery)
Regardless of where your data is processed, the protections outlined in this privacy policy apply globally. We ensure equivalent data protection standards are maintained across all jurisdictions.
Children's Privacy
Section 9LexiGuard Legal Policy Solutions provides B2B legal consulting services and our website is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.
If You Are a Parent or Guardian
If you believe your child has provided us with personal data, we strongly urge you to contact our Data Protection Officer immediately at privacy@lexiguard.com. If we become aware that we have collected personal data from a child without verified parental consent, we will take steps to delete that information as quickly as possible.
Our services are designed for professional and corporate clients. If you are under 16, please do not submit any personal information through our website or services.
Changes to This Policy
Section 10We may update this Data & Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We encourage you to review this policy periodically.
How We Notify You of Changes
- Material Changes: We will provide prominent notice (e.g., email notification, website banner) at least 30 days before material changes take effect
- Non-Material Changes: Minor clarifications or corrections will be posted directly on this page with an updated revision date
- Version History: We maintain an archive of previous versions of this policy for reference
Effective Date
This policy is effective as of January 15, 2025. The previous version dated July 1, 2024, has been superseded. If you have questions about changes to our privacy practices, please contact our Data Protection Officer.
Version History
| Version | Date | Summary of Changes |
|---|---|---|
| 3.0 | Jan 15, 2025 | Updated cookie policy; expanded international transfer safeguards |
| 2.5 | Jul 1, 2024 | Added CCPA/CPRA compliance details; updated retention periods |
| 2.0 | Jan 10, 2024 | GDPR-aligned revisions; added data portability section |
| 1.0 | Mar 5, 2020 | Initial policy creation |
Contact Us
Section 11If you have any questions, concerns, or requests regarding this Data & Privacy Policy or our data practices, please don't hesitate to contact us:
| Contact Method | Details | Response Time |
|---|---|---|
| privacy@lexiguard.com | Within 48 hours | |
| 📞 Phone | (800) 555-1234 | Mon–Fri, 9 AM–6 PM EST |
| LexiGuard Legal Policy Solutions Attn: Data Protection Officer 1200 Legal Tower, Suite 450 New York, NY 10001 |
Within 15 business days | |
| 🌐 Web Form | /contact | Within 24 hours |
Data Protection Officer (DPO)
Our designated DPO is responsible for overseeing our data protection strategy and ensuring compliance with applicable regulations. The DPO can be reached directly at:
- Email: dpo@lexiguard.com
- Phone: (800) 555-1234 ext. 4200
- Mailing Address: Same as above, Attn: Data Protection Officer
Regulatory Authorities
If you are not satisfied with how we have handled your data or your complaint, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction:
- United States: Federal Trade Commission (FTC) — ftc.gov
- European Union: Your national supervisory authority — edpb.europa.eu
- United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
- California: California Privacy Protection Agency (CPPA) — oag.ca.gov/privacy
We are committed to resolving any concerns you may have about our data practices. We encourage you to first reach out to us directly so we have the opportunity to address your concerns before escalating to a regulatory authority.