Privacy policy

Modified on Tue, 8 Aug, 2023 at 4:36 PM

Effective as of August 3, 2023, Lexx Software Co Ltd. ("Lexx" or "we", "us", "our") have updated Privacy Policy that applies to the visiting our web-sites and to the use of Lexx Services.

For the purposes of this Privacy Policy, the term, “Service”, shall refer to our web-sites that the Lexx operates and that link to this Privacy Policy.

This Privacy Policy applies only to data we collect when interacting with the Service and via email, text, and other electronic communications sent through or in connection with the Service.

We undertake to build the Service and any of its features in such a way that it respects your privacy and are committed to protecting it through our compliance with this Privacy Policy. This Privacy Policy not only allows you to understand what we do with your Personal Data (as defined below), but also to manage your Personal Data effectively.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. By accessing or using the Service, you agree to this Privacy Policy. If you do not agree to this Privacy Policy, do not Use the Service.

If you have any questions about this Privacy Policy or the Service, please contact us (for contact information, please, see How to contact us Section).

This Privacy Policy DOES NOT apply to the information that:

1. the Lexx collects offline or on any other our apps or websites, including websites you may access through the Service which are not a part of the Service;

2. you provide to or is collected by any third party, including through any other application or content that may link to or be accessible through the Service.

This Privacy Policy may change from time to time (see Changes to our Privacy Policy Section). Your continued use of the Service after we make changes is deemed to be your acceptance of those changes, so please check this Privacy Policy periodically for updates.

1. Information we collect and how we collect it

We may collect several types of information, including but not limited to Personal Data, from and about you (“Collected Information”), including information:

1.1. by which you may be personally identified, such as name, postal address, email address, or any other identifier by which you may be contacted online or offline;

1.2. that is about you but individually does not identify you; and

1.3. about your internet connection, the equipment you utilize to use the Service and your usage details.

We collect this information:

1.1. directly from you when you provide it to us;

1.2. automatically when you use the Service. Information collected automatically may include usage details, internet protocol (“IP”) addresses and information collected through cookies and other tracking technologies.

To the extent information is: (i) associated with an identified or identifiable natural person and (ii) protected as personal data under applicable data protection laws, such information is referred to in this Privacy Policy as “Personal Data”.

2. Information you provide to us directly

When you use the Service, we may ask you to provide certain Collected Information:

2.1. information that you provide by interacting with the Service. This includes information provided at the time of using the Service, purchasing certain enhanced features of the Service and requesting further services through the Service;
2.2. records and copies of your correspondence (including email addresses and phone numbers), if you contact us. We may also ask you for information when you report a problem with the Services; and
2.3. details of your subscriptions through the Service (only applicable to authorized use of the Service).

3. Information we collect through automatic data collection technologies

The information we collect automatically under this Privacy Policy may include your Personal Data and information we may maintain or associate with your Personal Data that we collect in other ways. It helps us to improve the Service and to deliver a better service.

If the information covered by this Section 3 is aggregated or de-identified so it is no longer reasonably associated with an identified or identifiable natural person, we may use it for any business purpose.

The technologies we use for automatic data collection may include:

3.1. Third-party analytics. We do not use analytical tools developed by third parties, but these tools are located on our servers and we do not transfer the collected information to third parties. These tools collect information sent by your device or the Services, including log file information, cookies, errors, add-ons and the web pages you visit and other information that assists us in improving the Service.
3.2. Cookies (or mobile cookies) and similar technologies. A cookie is a small file placed on your device. When you use the Service, we may use cookies and similar technologies to collect information about how you use the Service and provide features to you. You may refuse to accept cookies by activating the appropriate browser setting on your device. However, if you select these browser settings you may be unable to access certain parts of the Service. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to the Service. More detailed information please see our Cookies Policy.
3.3. Log file information. Log file information is automatically reported by the Service each time you make a request to use the Service. When you use the Service, we may automatically record certain log file information, including your web request, and how you interact with links on and through the Service, landing pages, pages viewed, and other such information. The information allows us to receive more accurate reporting and improve the Service.

4. How we use Collected Information

In addition to some of the specific uses of information we describe in this Privacy Policy, we may use the Collected Information for the following purposes:

4.1. to present to you the Service and its contents and others services that you request from us;
4.2. to carry out our obligations and enforce our rights arising from any contracts entered into between you and us;
4.3. to provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses in relation to our Service;
4.4. to notify you about changes to the Service, including by sending you technical notices, notices about your subscription, including expiration and renewal notices, updates, security alerts and support and administrative messages;
4.5. to diagnose or fix technology problems in relation to our Service;
4.6. to monitor metrics in relation to our Service such as total number of Users and traffic;
4.7. to provide, improve, test, and monitor the effectiveness of the Service;
4.8. to develop and test new products and features;
4.9. in any other way, we may describe when you provide or when we collect your information or when is indicated in this Privacy Policy;
4.10. to fulfill any other purpose for which you provide it; and
4.11. for any other purpose with your consent.

We will not process your Personal Data in a way that is incompatible with the purposes for which it has been collected or authorized by you in accordance with this Section 4 or collect any Personal Data that is not required for the mentioned purposes (“purpose limitation principle”).

For any new purpose of processing we will ask for your separate consent. To the extent necessary for those purposes, we take all reasonable steps to ensure that your Personal Data is reliable for its intended use, accurate, complete and current. We also undertake to collect only such amount and types of your Personal Data that are strictly required for the purposes mentioned in this Section 4 (“data minimization principle”).

5. Your rights

Access, modification, correction and erasure. You can send us an email at accounts@lexxsoft.com to request access to, modification, correction, update, erasure or deletion of any Personal Data that you have provided to us and that we have about you. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

EEA residents. Individuals residing in the European Economic Area (“EEA”) have certain statutory rights in relation to their Personal Data, such as introduced by the General Data Protection Regulation (“EU GDPR”). You can exercise them by contacting us (for contact information, please, see How to contact us Section).

5.1. Right to be informed under Article 13 and 14 EU GDPR: you have the right to be provided with clear, transparent and easily understandable information about how we use your Personal Data;
5.2. Right to access under Article 15 EU GDPR: the right to obtain access to your information (if we’re processing it), and certain other information (like that provided in this Privacy Policy);
5.3. Right to correct under Article 16 EU GDPR: if your Personal Data is inaccurate or incomplete you have the right to have your Personal Data rectified;
5.4. Right to erasure under Article 17 EU GDPR: this is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions. For example, we have the right to continue using your personal data if such use is necessary for compliance with our legal obligations or for the establishment, exercise or defense of legal claims;
5.5. Right to restrict our use of your information under Article 18 EU GDPR: the right to suspend the usage of your Personal Data or limit the way in which we can use it. Please note that this right is limited in certain situations: When we are processing your Personal Data that we collected from you with your consent you can only request restriction on the basis of: (a) inaccuracy of data; (b) where our processing is unlawful and you don’t want your Personal Data erased; (c) you need it for a legal claim; or (d) if we no longer need to use the data for the purposes for which we hold it. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for restriction of the use of their Personal Data to make sure the restriction is respected in future;
5.6. Right to data portability under Article 20 EU GDPR: the right to request that we move, copy or transfer (where technically feasible) your Personal Data in a structured, commonly used and machine-readable format, for your own purposes across different services;
5.7. Right to withdraw consent under Article 7 (3) EU GDPR: if you have given your consent to anything we do with your Personal Data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your Personal Data with your consent up to that point is unlawful);
5.8. Notification requirements. We commit to notify you promptly and your data protection authority within the timeframe specified in applicable law (72 hours) about any Personal Data breaches in relation to you;
5.9. Notice about automated decision-making. We use automated decision-making tools (e.g. neural networks) that process your Personal Data in order to provide you better services through the Service; and
5.10. Data Protection Authorities. Subject to the EU GDPR, you also have the right to lodge a complaint with your local data protection authority about any of our activities that you deem are not compliant with the EU GDPR.

Please keep in mind that in case of a vague access, erasure, objection request or any other request in exercise of the mentioned rights we may engage you in a dialogue to better understand the motivation for the request and to locate responsive information. In case this is impossible, we reserve the right to refuse granting your request.

Following the provisions of the EU GDPR, we might also ask you to prove your identity (for example, by requesting an ID or other proof) in order for you to invoke the mentioned rights. This is made to ensure that no right of third parties are violated by your request, and the mentioned rights are exercised by an actual Personal Data subject or an authorized person.

Please note that we will grant your request within 30 days after receiving it, but it may take up to 90 days in some cases, for example for full erasure of your Personal Data stored in our backup systems – this is due to the size and complexity of the systems we use to store data.

6. Sharing of Collected Information

We may disclose aggregated information about our Users and information that does not identify any individual without any restriction. We may remove parts of data that can identify you and share anonymized data with any persons.

We will not rent or sell your Personal Data to third parties outside Lexx without your consent, except for the parties with whom we may share your information in accordance with this Privacy Policy.

What happens in the event of a change of control. If we sell or otherwise transfer part or the whole of Lexx or our assets to another organization (e.g., in the course of a transaction like a merger, divestiture, restructuring, reorganization, acquisition, bankruptcy, dissolution, liquidation), your Personal Data and any other Collected Information may be among the items sold or transferred. The buyer or transferee will have to honor the commitments we have made in this Privacy Policy.

Responding to legal requests and preventing harm. We may access, preserve and share your information in response to a legal (like a search warrant, court order or subpoena), government or regulatory request if we have a good faith belief that the law requires us to do so. This may include responding to legal, government or regulatory requests from jurisdictions outside of Malta where we have a good faith belief that the response is required by law in that jurisdiction, affects the Users in that jurisdiction, and is consistent with internationally recognized standards.

We may also access, preserve and share information when we have a good faith belief it is necessary to:

6.1. detect, prevent and address fraud and other illegal activity;
6.2. protect ourselves, you and others, including as part of investigations; and
6.3. prevent death or imminent bodily harm. Information we receive about you may be accessed, processed and retained for an extended period of time when it is the subject of a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm.

7. How we store, process and transfer Collected Information

General. Lexx is based in Malta and the information we collect is governed by Maltese law. Please be advised that Maltese law and laws of other countries may not offer the same protections as the law of your jurisdiction.

Data security. We use reasonable and appropriate information security safeguards to help keep the Collected Information secure and to secure it from accidental loss and from unauthorized access, use, alteration and disclosure. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Collected Information, we cannot guarantee the security of the Collected Information transmitted to or through the Service or an absolute guarantee that such information may not be accessed, disclosed, altered, or destroyed. Any transmission of your Collected Information is at your own risk. We are not responsible for circumvention of security measures contained in the Service. Please understand that there is no ideal technology or measure to maintain 100% security.

If you use our Service, available only after authorization, then you should also understand the following:

7.1. the safety and security of your information also depends on you;
7.2. you are responsible for controlling access to emails between you and us at all times;
7.3. we are not responsible for the functionality, privacy, or security measures of any other organization;
7.4. if you provide any personal contact information, including but not limited to such information as an email or phone number, in your account, as information that confirms that the account belongs to you, then you agree that we can contact about your account and the Collected Information, including Personal Data, with you through this contact information. Only you are responsible for the safety and relevance of this contact information;
7.5. if you provide temporary access to certain data by means of sharing opportunities in the Service to third parties, then in this case you are fully responsible for the safety and security of the data with which you shared with third parties; and
7.6. if you shared access to your account with third parties, then only you are responsible for the safety of your data by third parties and for what actions will be performed by these third parties on your behalf through your account.

8. Children’s privacy.

General age limitation. The Service is not intended for or directed at children under 16, and we do not knowingly collect or solicit any information from anyone under the age of 16 or knowingly allow such persons to use the Service.

If you are under 16, do not use or provide any information in the Service or through any of its features, or provide any information about yourself to us, including your name, address, telephone number or email address.

In the event that we learn that we have collected or received any Personal Data from a child under 16 without verification of parental consent, we will delete that information as quickly as possible.

If you believe we might have any information from or about a child under 16, please contact us (for contact information, please, see How to Contact Us Section).

9. Other websites and services

We are not responsible for the practices employed by any websites or services linked to or from the Service, including the information or content contained within them, excluding websites or services controlled by Lexx. Where we have a link to a website or service, linked to or from the Service, we encourage you to read the privacy policy stated on that website or service before providing information on or through it.

10. How to contact us

If you have any questions about this Privacy Policy or the Service, please contact us via email at legal@lexxsoft.com. or our mailing address:

Lexx Software Co Ltd,

Malta, registration number C 100540.

11. Changes to our Privacy Policy

Lexx may modify or update this Privacy Policy from time to time, so please review it periodically. The date this Privacy Policy was last revised is identified at the top of the page. Your continued use of the Service after we make changes to this Privacy Policy is deemed to be acceptance by you of those changes, so please check the policy periodically for updates. In some cases and for some Services, we may require you to expressly accept our new privacy policy in order to continue using the Service (for example, if we expand types of Personal Data collected from you or introduce new purposes of collection and processing).