Privacy Policy

The website is not intended for or targeted at children, and Lighthouse does not knowingly or intentionally collect personal data about children. If you believe that this website has collected data about a child, please contact Lighthouse, so that Lighthouse may delete the personal data.

Lighthouse uses third party cookies to keep track of the pages you visit within the website, in order to determine what portion of the website is the most popular, or most used, and to provide you with a better experience.

A cookie is a small text file that is placed on your hard disk by a web server. Cookies are not used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you. For more information on cookies: http://www.whatarecookies.com

You have the ability to manage cookies including refusing them by modifying your browser settings.

As an international provider of electronic discovery and related services, Lighthouse places the highest value on ensuring the security of all data entrusted to Lighthouse by law firm clients and corporate clients. Lighthouse respects individual privacy rights and have established internal protocols to assure that Lighthouse’s security and privacy practices and procedures comply with both US and international law.

The following Privacy Shield Privacy Policy (the “Policy”) describes the principles Lighthouse, and its subsidiary Liffey Thames Group, LLC, d/b/a Discovia, agrees to follow with respect to the collection, preservation and transfer of personal data from the European Union (“EU”), the European Economic Area (“EEA”), the United Kingdoms (“UK”), and/or Switzerland (as applicable) to the United States for electronic data discovery processing, web hosting, and related services. All terms in within this Privacy Shield Policy shall have the definition as provided in the Privacy Shield Framework.

Lighthouse commits to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework as set forth by the US Department of Commerce for the collection, use and retention of personal information transferred from the European Union, UK, or Switzerland to the United States. Lighthouse has certified that it complies with each of the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement, and Liability. In the event of any conflict between the provisions of this Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the EU-US Privacy Shield program, and to view Lighthouse’s certification, please visit www.privacyshield.gov.

Lighthouse’s participation in the EU-US Privacy Shield framework and the Swiss-US Privacy Shield framework applies to all personal data that is subject to Lighthouse’s Privacy Policy and is received from the European Union, European Economic Area, UK, and Switzerland. Lighthouse will comply with the Privacy Shield Principles in respect of such personal data. The Federal Trade Commission has jurisdiction over Lighthouse’s compliance with this policy, the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework.

Background
The European Union’s General Data Protection Regulation (“GDPR”) superseded the EU’s 1995 Data Protection Directive on May 25, 2018. Article 45 of the GDPR provides for the continuity of adequacy determinations made under the EU’s 1995 Data Protection Directive, one of which was the adequacy decision on the EU-U.S. Privacy Shield. GDPR limits the transfer of personal data to countries outside of the EU for processing to only those countries that can ensure an adequate level of protection for an individual’s personal data. Swiss data protection law imposes similar limits on the transfer of personal data outside of Switzerland. The United States Department of Commerce, in consultation with the European Union, UK, and separately with Switzerland, has developed the Privacy Shield framework regarding personal data privacy and security that, when followed, permit an organization to certify that it provides adequate protection for the transfer of EU personal data to the US for processing. Lighthouse fully commits to follow the Privacy Shield Principles with respect to all personal data received from any individual or entity in the EU, the EEA, UK, or Switzerland.

The Information Lighthouses Collect
This notice applies to all information collected or submitted on the Lighthouse website and online application portals. On some pages, you can make inquiry requests, and register to receive materials. The types of personal information collected at these pages include:

• Name
• Company Name
• Address
• Email address
• Phone number

The Way Lighthouse Uses Collected Information
Lighthouse uses the information you provide about yourself only to fulfill the request. Lighthouse does not share this information with outside parties except to the extent necessary to complete the request. Lighthouse uses return email addresses to answer the email Lighthouse receives. Such addresses are not used for any other purpose and are not shared with outside parties. Finally, Lighthouse never uses or shares the personally identifiable information provided to Lighthouse online in ways unrelated to the ones described above without also providing you an opportunity to opt-out or otherwise prohibit such unrelated uses.

As an ediscovery company, the majority of the data Lighthouse collects and stores is provided to Lighthouse by Lighthouse’s clients. Any data received from Lighthouse’s clients is used solely for the business purpose defined in Lighthouse agreements with Lighthouse’s clients. It is not shared with third parties unless agreed upon with Lighthouse’s clients. Any individual who is attempting to access data provided to Lighthouse by Lighthouse’s client in order to correct, amend, or delete inaccurate data should contact Lighthouse’s client directly. Any individual who would like to request any limits on sharing or use of their data should contact Lighthouse’s client directly.

Our Commitment to Data Security
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, Lighthouse has implemented appropriate physical, electronic, and managerial procedures to safeguard and secure the information Lighthouse collects online. To protect your privacy and security, Lighthouse will take reasonable steps to verify your identity before granting access to any system.

Notice and Choice
When acting as a data processor within the meaning of GDPR, Lighthouse reserves the right to process personal information on behalf of and under the direction of Lighthouse’s clients without providing notice to individuals or data protection authorities to the extent permitted by the Privacy Shield Principles. When collecting data in the EU, UK, and/or Switzerland, Lighthouse acts on behalf of and under the direction of Lighthouse’s clients, to collect only data relevant to the litigation or other matter at hand. Individuals and business entities from which Lighthouse collects data are provided with information regarding the purpose for which data is being collected, how it will be used and the type of non-agent third parties, if any, to which Lighthouse discloses personal information. These individuals or entities are also provided with information about the choices and means offered by Lighthouse for limiting the use or disclosure of their personal data.

When Lighthouse is acting as a data controller within the meaning of GDPR, individuals have the choice to opt out of collection or to limit the use and disclosure of their information.

Limits on Disclosure and Transfer
Lighthouse limits access to personal data to those persons in Lighthouse’s organization, or Lighthouse’s agents, who have a specific business purpose for maintaining and processing such personal data. Individuals who have been granted access to personal data are aware of these responsibilities to protect the security, confidentiality and integrity of that information and have been provided training and instruction on how to do so. Lighthouse takes appropriate measures to protect the security of personal data in order to ensure it is only accessed for its intended use.

As a processor, Lighthouse will not disclose an individual’s personal data to any third party without the consent of Lighthouse’s clients unless one or more of the following are true:

• The individual has consented, in writing, to the disclosure;
• The disclosure is required by law or other professional standards;
• The personal data is publicly available;
• The disclosure is reasonably necessary for the establishment or defense of legal claims;
• The transferee provides an adequate level of protection for the personal data within the meaning of GDPR or has agreed in writing to provide an adequate level of protection for the personal data consistent with the options provided in GDPR for transfers pursuant to written agreements;
• In the event of a sale or transfer of assets in connection with an acquisition, merger, reorganization, sale or bankruptcy, Lighthouse reserves the right to make such disclosure upon providing notice to the law firm and/or corporate clients for whom such data is being held.

As a data controller, Lighthouse does not provide an individual’s personal data to any third-parties.

Lighthouse limits disclosure of personal data to employees and other EU-US Privacy Shield and Swiss-US Privacy Shield participants that have a specific business purpose for collecting, maintaining and processing such personal data. Lighthouse may disclose personal data as required by law or regulation. Lighthouse may also disclose personal data to law enforcement officials in response to a lawful request made pursuant to national security interests or law enforcement requirements. Lighthouse acknowledges its potential liability in cases of its onward transfer of personal data to third parties that do not meet the criteria set forth in the above paragraph.

Access
Lighthouse agrees to offer individual citizens of the EU, EEA, UK, or Switzerland with access to their personal data for purposes of correcting, amending or deleting inaccurate information unless the cost or burden of providing the access and changing or deleting the data proves unreasonable in view of the risk to the individual’s privacy. A reasonable fee compensating Lighthouse for resource use related to accessing, changing or deleting the personal information may be imposed. Lighthouse may determine the form of the disclosure. Lighthouse will only deny access requests as allowed by the EU-US Privacy Shield.

Security
Lighthouse takes reasonable precautions to protect personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction. Lighthouse’s security measures include physical, electronic, workflow and managerial protocols to safeguard and secure the personal data Lighthouse processes.

Data Integrity
Lighthouse processes personal information only in ways that are compatible with the purpose for which the data was collected or subsequently authorized by the individual. Lighthouse will take reasonable steps to ensure information is relevant to its intended use and remains accurate, complete and current.

Compliance
Lighthouse will follow any advice given by the Data Protection Authorities, including remedial or compensatory measures for individuals affected by non-compliance, and will provide the Data Protection Authorities with written confirmation that such corrective action has been taken, subject to the Company’s right to dispute the requested actions or remedial measures with the Federal Trade Commission.

Enforcement
Pursuant to the EU-US and Swiss-US Privacy Shield’s recognized approach of self-assessment, Lighthouse understands and agrees that individuals shall have the opportunity to directly submit written complaints regarding Lighthouse’s handling of their personal data. Lighthouse will review all complaints received in writing for purposes of determining whether Lighthouse’s preservation and storage of the individual’s data has been consistent with Lighthouse Privacy Policy. If Lighthouse determines that any actions Lighthouse has taken are in fact inconsistent with Lighthouse’s Privacy Policy, Lighthouse will immediately take appropriate steps to remedy the issue Lighthouse may have caused. Any European Union citizen, a UK citizen, or Swiss individual with inquiries or complaints regarding this Policy and/or his/her personal data should first contact the following Lighthouse representative:

David Binder, CFO
Phone (206) 535-6539
Email: Privacy@lighthouseglobal.com

Lighthouse has further committed to refer unresolved privacy complaints under the EU-US and Swiss-US Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed by Lighthouse, please visit the BBB EU PRIVACY SHIELD web site at www.bbb.org/EU-privacy-shield/for-eu-consumers for more information and to file a complaint. There is no cost to you to utilize the BBB EU PRIVACY SHIELD complaint resolution process. In certain circumstances, there may be the possibility for you to be able to invoke binding arbitration.

Finally, should Lighthouse at any time find that an internal process causes us to be in breach of Lighthouse Privacy Policy, Lighthouse will take immediate action to alleviate the issue. Should Lighthouse determine that any employee of Lighthouse has failed to adhere to the terms of this Policy, such employee may be subject to disciplinary action up to and including termination.