Privacy Policy
Who are we?
“We” refers to Lexora, a Denmark-based cybersecurity company. Lexora’s Privacy Policy explains how and why we collect and process any personal information about you when you use our services, as well as the rights you have regarding your personal data.
If you’d like to talk to us about your personal information, please contact us at privacy@lexoralawfirm.com.
Who’s the Lexora Privacy Policy for?
Different parts of our Lexora Privacy Policy apply to:
- Visitors — If you’re visiting our public websites
- Inquirers – If you’re making an inquiry about one of our services, or raising a support request
- Public Reporters — If you’re reporting a malicious website or other cyberattack as a member of the public such as via report.lexoralawfirm.com, or by emailing us at scam@lexoralawfirm.com
- Client Organization Users — If you’re a member of an organization which is a commercial Lexora client or potential client (“Client Organization”) for our organization-level services (such as our Countermeasures and Fraud Detection services)
Why do we collect personal information?
Legitimate Interest
We process some data for particular legitimate business purposes, such as:
- Monitoring how our services are used through logs, in order to determine their effectiveness and make improvements where necessary
- Notifying you via email when the status of a malicious site submission has been updated. If you do not want to receive these updates, we provide an unsubscribe link in every email sent to you concerning your reports, which can be used to stop any further email updates regarding any and all of your reports
- For recruitment, our legitimate business interests in evaluating your application to ensure that we recruit appropriate employees, verify your information, to contact you in respect of your application, and to improve our processes and recruitment strategy.
Legal Obligations
We might have to process your personal data where it’s necessary for compliance with a legal obligation.
When will we hold onto your personal information?
We only hold on to the personal information that we get from you as long as we need to for the particular purpose we collected it for, or where we have a legitimate business reason for holding onto that data (for example, to provide you with a product or service you’ve requested, to sort out transactions and to identify fraud, for our own audit purposes), or where we have to comply with certain legal, regulatory or tax requirements. Even when you stop using our services, we may have to retain some information to meet our obligations.
Where there’s no longer a legitimate business need for processing your personal information, we’ll either securely destroy, erase, delete it or make it anonymous: if we can’t do that (for example if your personal information has been stored in a backup archive), we’ll store that information securely and keep it isolated from further processing until it can be deleted.
When will we share your personal information with third parties?
We may share your personal information with third parties, but do not grant permission to those third parties to use the information for their own business interests. In particular, we may share your personal information with third parties in the following cases:
To combat cybercrime – data pertaining to threat indicators may be shared (this may entail us disclosing information to the relevant hosting company, registrar, platform, internet or telecoms service provider, any relevant law enforcement authority and any other relevant party capable of helping us stop a particular cyberattack).
If legally required to by government bodies and law enforcement agencies.
If you perform unlawful acts or attempts to conduct such acts or in any dispute, claim, action, demand or legal proceedings concerning you and Lexora.
How secure is your data with us?
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. These people will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
What are your rights?
Under data protection law you have the right to:
- Access – You have the right to ask us for copies of your personal information.
- Rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Restrict processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
We don’t charge you for exercising your rights. If you make a request, we have one month to respond to you.
To talk to us about your personal information, please contact us at privacy@lexoralawfirm.com
What if we update the Lexora Privacy Policy?
Lexora reserves the right to make changes to the Lexora Privacy Policy for emerging legal, regulatory or business reasons. We’ll take appropriate measures to inform you of these changes, depending on their significance and impact. We’ll seek your consent in cases where a material change would require your consent under applicable data protection law.