Last modified: May 2018
LegitScript LLC (“ LegitScript ” or “ we ”) is committed to complying with all applicable data protection laws, including the data protection requirements introduced by the European Union General Data Protection Regulation (Regulation 2016/679). This Privacy Statement contains information on what data we collect, what we do with that information, and what rights you have.
We do process some personal data in order to run our business. There are some situations where we may share your information with third parties (for example, pursuant to a court order, government request, or with our business partners and service providers who support our business or partner with us).
We take the protection of your information seriously and take steps to make sure your personal information is secure. Please read the full Privacy Statement below. Please feel free to contact us if you have any questions.
You should know that this Privacy Statement does not apply to information about you collected via any third-party site or application (including advertising or similar services) that may link to, or be accessible from, LegitScript’s websites. We are not responsible for the privacy policies or data collection, use, and disclosure practices of those sites. We encourage you to read the written policies of all sites you visit.
By visiting or using any of our websites or services (including email communications), you agree to this Privacy Statement. Our Privacy Statement may change from time to time, at LegitScript’s sole discretion, and these changes can affect the information described below, so please check back periodically for any updates.
LegitScript takes appropriate steps to protect and secure your personal data from unauthorized access, use, and disclosure. We use adequate technical and organizational measures to protect your personal data against unauthorized, accidental or unlawful destruction, loss, alteration, misuse, disclosure, or access and against all other unlawful forms of data processing. We put these measures in place after evaluating current state of the art of the technology, the cost of implementation, risks presented by processing, and the nature of the personal data.
Although we take reasonable security measures to protect your personal information, we cannot guarantee the security of your personal information transmitted to our websites. The transmission of information via the internet is not 100% secure. LegitScript does not ensure or warrant the security of any information you transmit to us. We are not responsible for circumvention of any privacy settings or security measures contained on the websites.
We collect different types of information for our business operations, including but not limited to:
If we ever process any special categories of data relating to you, we will do so because:
We do not use personal data in ways that are inconsistent with those described in this Privacy Statement. We only collect and retain as much personal data as we need for the specific purposes we have described, or to comply with our legal and regulatory obligations. When data retention is no longer necessary, we may delete personal data or retain it in a form that does not personally identify anyone.
It is important to us that we adequately protect your personal information, especially when we disclose information about you. We may disclose or transfer personal information that we collect or you provide as described in this Privacy Statement, including:
You have choices about the personal data you provide us. Here are some ways you can control the data we have:
In some circumstances, you may have the right to access personal data that we hold and ask that we correct, amend, or delete information which is inaccurate or has not been processed in accordance with applicable data protection laws or the Privacy Shield principles, except where the burden or expense of providing access would be disproportionate to the risks to your privacy or where the privacy rights of third parties would be violated. LegitScript may require EU and Swiss residents to provide sufficient (at LegitScript’s discretion) verification of your identity before responding to your request. We may also ask you to provide information that helps us better understand what you are asking. To exercise your rights, send an email to [email protected] We’ll do our best to honor these requests as required by applicable laws, but understand that your data access rights are not absolute. They may not always apply to you and exemptions may be appropriate. For example, LegitScript may have limited access to the data we process on behalf of our customers in connection with our services. Therefore, data access requests should include the name of the LegitScript customer who submitted your personal data to LegitScript. We will forward such requests to the customer you identify to respond directly to you and will provide any necessary assistance in that customer’s response to you. LegitScript specifically reserves all rights under this section. If you are not satisfied with how we process your personal data, please let us know and we will investigate your concern. If you are not satisfied with our response, you have the right to make a complaint to the relevant authority in the jurisdiction where you live or work, or in the place where you think an issue in relation to your data has arisen. The contact details of each Data Protection Authority can be found at the following website: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm.
Our servers are located in the US. If you are located outside of the U.S.A., please be aware that any information provided to us, including personal information, will be transferred from your country of origin to the USA. Except in the case of data transfers under the EU-US Privacy Shield Framework, your decision to provide such data to us, or allow us to collect such data through our websites or products, constitutes your consent to this transfer of data and personal information.
Like many businesses, we sometimes hire other companies to perform services for us. We may need to disclose personal data to certain types of third party companies, but only to the extent it is required for them to perform the services for us. The types of companies that might receive personal data are those that provide: marketing and advertising, billing, data storage and hosting, and sales support businesses. If you have any questions about how these companies use your data, or if you wish to opt out of having your personal data transferred to any or all categories of our agents, please contact us at [email protected] It will take us a reasonable amount of time to process your information. In the event personal data is transferred to a different jurisdiction, we will take appropriate steps to ensure that your personal data receives an adequate level of protection, including putting in place appropriate written data processing terms and/or data transfer agreements, using contractual clauses as approved by the European Commission ( the form for the standard contractual clauses is located here ). Per the Principle of Accountability for Onward Transfer, LegitScript will remain liable if our agents process such personal information inconsistent with Privacy Shield principles, unless LegitScript proves we’re not responsible for the event giving rise to your damages.
People under the age of 18 are not permitted to visit our websites or register for our services. If you become aware that your child has provided us with personal information without your consent, please contact us [email protected] and we will work to delete it. We do not knowingly collect personal information about children under 18. If we learn that a child under 18 has provided us with personal data, we will delete this information, subject to any limitations on our ability to do so.
We may change this Privacy Statement at any time. We encourage you to visit this page often to read the effective version of this Privacy Statement. If you have any concerns or questions about this Privacy Statement, or if you would like to lodge a complaint, please contacting [email protected]
If you have any questions or comments about this Privacy Statement, please contact us by emailing us at
or by writing to us at:
818 SW 3rd Ave, #353
Portland, OR 97204