privacy

Privacy Policy for 8 Light Technologies (8LT)

When you choose 8 Light Technologies (8LT), you gain the strength, experience, expertise, and reliability of a recognized global IT security and privacy leader.

At 8LT, trust is foundational to all we do, and we are committed to protecting the privacy and confidentiality of your personal information. We will only collect and process personal information relevant to and necessary for the purposes we describe, always in a secure, lawful, and transparent manner.

As a globally integrated enterprise, 8LT's business processes frequently extend beyond the borders of one country. Such globalization demands not only the availability of communication and information systems across the 8LT group of companies (8LT), but also the worldwide processing and use of multiple types of information, including Personal Information.

8LT is committed to protecting the privacy and confidentiality of Personal Information about its Employees, Customers, Business Partners (including contacts within Customers and Business Partners), and other identifiable individuals. Uniform practices for collecting, using, disclosing, storing, accessing, transferring, or otherwise processing such information assist 8LT to process Personal Information fairly and appropriately, disclosing it and/or transferring it only under appropriate circumstances.

This Policy sets forth the general principles that underlie 8LT's specific practices for collecting, using, disclosing, storing, accessing, transferring, or otherwise processing Personal Information, including the general principle of Privacy by Design and Default. These general principles apply to the processing of Personal Information worldwide by 8LT.

In addition, 8LT recognizes the importance of protecting customers' personal information against unlawful access by governments and their agencies in all jurisdictions where 8LT does business.

In general, 8LT expects governments to deal directly with our enterprise customers when requesting access to data held by 8LT on their behalf.

8LT supports measures to increase the transparency, oversight, and appropriate judicial review of government requests for data, including modernized international agreements on legal assistance.

The general principles are:

• Fairness: 8LT will collect and process Personal Information fairly, lawfully, and in a transparent manner.

• Purpose Limitation: 8LT will only collect Personal Information that is relevant to and necessary for a particular purpose(s) and will only process Personal Information in a manner that is not incompatible with the purposes for which it is collected.

• Data Minimization: 8LT will only process Personal Information that is adequate, relevant, and not excessive for the purpose for which it is processed.

• Accuracy: 8LT will keep Personal Information as accurate, complete, and up-to-date as is necessary for the purpose for which it is processed.

• Retention: 8LT will keep Personal Information in a form that permits identification for no longer than necessary for the purpose for which such Personal Information was collected.

• Disclosure: 8LT will only make Personal Information available inside or outside 8LT in appropriate circumstances.

• Security: 8LT will implement appropriate technical and organizational measures to safeguard Personal Information and will instruct third parties processing Personal Information on behalf of 8LT, if any, to process it only in a manner that is consistent with processing it on 8LT's behalf, and to implement appropriate technical and organizational measures to safeguard the Personal Information.

• Individual Rights: 8LT will provide individuals with appropriate rights such as the right of access and correction relating to their Personal Information.

• Custodianship: 8LT will have appropriate policies and practices for the safe handling of Personal Information that it processes on behalf of its customers.

• Accountability: 8LT will have appropriate governance, including corporate instructions, guidelines, appropriately trained personnel, and other measures to be able to demonstrate that the processing of Personal Information is performed in compliance with this Policy.

8LT Employees who come in contact with Personal Information must act consistently with the principles contained in this Policy.

The application of these principles is more particularly described in the applicable 8LT Corporate Instructions (and any accompanying implementation guidelines) relating to processing Personal Information.