Privacy Policy

This Privacy Policy describes how Leya AB (also referred to as “Leya”, “we” or “us”) will make use of your data when you interact with us, use our services on our platform (the “Leya Platform”), which includes our software, tools, developer services, data, documentation and our website (“Services'').  It also describes your privacy rights. More information about your rights, and how to exercise them, is set out in the “Rights and Choices” section.

1 Personal information we collect

1.1 We collect information that alone or in combination with other information in our possession could be used to identify you (“Personal Information”) as follows:

1.1.1 Personal Information You Provide: We may collect Personal Information if you create an account to use our Services or communicate with us.

1.1.2 Communication Information: If you communicate with us, we may collect your name, contact information, and the contents of any messages you send (“Communication Information”).

1.1.3 Payment information: When you purchase or subscribe to our Services, we may collect your billing information, such as your credit card number, expiration date, and billing address, or use a third-party payment processor to process your payments (“Payment Information”).

1.1.4 Personal Information We Collect Through Our Social Media Pages: We have postings on social media sites like YouTube and LinkedIn (“Social Media Pages”). When you interact with our Social Media Pages, we will collect Personal Information that you elect to provide to us, such as your contact details (“Social Information”). In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.

1.1.5 Personal Information We Receive Automatically From Your Use of our Services: When you visit, use, and interact with our Services, we may receive certain information about your visit, use, or interactions (“Technical Information”), including the following:

1.1.5.1 Log data: Information that your browser automatically sends whenever you visit the Site (“Log Data”). Log Data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interacted with the Site.

1.1.5.2 Usage data: We may automatically collect information about your use of our Services, such as the types of content that you view or engage with, the features you use, and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, computer connection, IP address, and the like. But will never collect or store any data directly related to your uploaded documents, queries, or other usage that could contain confidential or sensitive information in a way that doesn’t follow our Security Policy, which can be found on our website at https://www.leya.law/legal. 

1.1.5.3 Device information: Includes name of the device, operating system, and browser you are using. Information collected may depend on the type of device you use and its settings.

1.1.5.4 Cookies: A cookie is a small string of information that websites you visit transfer to your computer for identification purposes. Cookies can be used to follow your activity on the website and that information helps us to understand your preferences and improve your website experience. Cookies are also used for such activities as remembering your access credentials for our Services. In addition to the cookies used by Leya and our service providers, some cookies are placed by third parties such as Google (for analytics, described below). These third-party cookies are not under our control so you should check the website of the third-party service providers for more information regarding these cookies. By using our Services you agree to the use of cookies for the following purposes:

- Essential Cookies: these are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. 

- Performance and Analytics Cookies: these include Google Analytics and they keep track of the pages that you visit and the content you access, so we can determine which content is most popular and improve the performance of our website. These cookies primarily record aggregate and anonymous statistical data, but do capture a minimal amount of identifiable information such as order IDs.

- Functional Cookies: they remember the choices you make, such as language options or the region you are in. These cookies help to make your visit more personal and are deleted automatically when you close your browser or the session expires.

You can turn off all cookies, in case you prefer not to receive them. You can also have your computer warn you whenever cookies are being used. For both options, you have to adjust your browser settings (such as Chrome, Safari, Firefox, Edge, or other browser). There are also software products available that can manage cookies for you. Please be aware, however, that when you choose to reject cookies you may limit the features and functionality of our Services.

1.1.6 Customer support information: When you contact us for customer support, feedback, or inquiries, we may collect your name, email address, phone number, and any other information you provide us or that we request from you to assist you or resolve your issue (“Support Information”).

1.1.7 Analytics: We may use various online analytics products that use cookies to help us analyze how users use our Services and enhance your experience when you use them.

1.1.8 Online Tracking and Do Not Track Signals: Our website currently does not respond to “Do Not Track” (“DNT”) signals and operates as described in this Privacy Policy whether or not a DNT signal is received.

1.2 The following disclosures are intended to provide additional information about the categories of Personal Information we collect (as defined above), the type of data, how we use each category of Personal Information, and 

1.3 These disclosures do not limit our ability to use or disclose information as described above.

‍

2 How we use personal information

2.1 We do not sell your Personal Information.

2.2 We may use Personal Information for the following purposes:

2.2.1 To provide, administer, maintain, improve and/or analyze the Services;

2.2.2 To provide you with support services; 

2.2.3 To communicate with you including by discussing with you options to use the Leya Platform;

2.2.4 To develop new features and services;

2.2.5 To prevent fraud, criminal activity, or misuses of our services, and to ensure the security of our IT systems, architecture, and networks; and

2.2.6 To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our Affiliates, you, or other third parties.

2.3 Aggregated Information. We may aggregate Personal Information and use the aggregated information to analyze the effectiveness of our Services, to improve and add features to our Services. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with third parties, publish such aggregated information or make such aggregated information generally available. We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy.

‍

3 Disclosure of personal information

3.1 In certain circumstances, we may share your Personal Information with third parties without further notice to you, unless required by the law, including without limitation in the situations below:

3.1.1 Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Information with vendors and service providers, including providers of hosting services, cloud service providers, and other information technology services providers, event management services, email communication software and email newsletter services, advertising and marketing services, and web analytics services. Pursuant to our instructions, these parties will access, process, or store Personal Information in the course of performing their duties to us.

3.1.2 Business Transfers: If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively a “Transaction”), your Personal Information and other information may be shared in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or Affiliate as part of that Transaction along with other assets.

3.1.3 Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Services, or the public, or (v) protect against legal liability.

3.1.4 Affiliates: We may share Personal Information with our “Affiliates,” meaning an entity that controls, is controlled by, or is under common control with Leya. Our Affiliates may use the Personal Information we share in a manner consistent with this Privacy Policy.

3.1.5 Other Users: certain actions you take may be visible to other users of our services.

‍

4 Third-party websites and services

Our Services may contain links to other websites not operated or controlled by Leya, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.

‍

5 Request for action

5.1 To request access or deletion of your Personal Information, please contact us at privacy@leya.law.  We reserve our right to limit our facilitating such requests to that which is required by applicable law.  

5.2 In order to protect your Personal Information from unauthorized access or deletion, we may require you to verify your identity before we will process any request to know or delete Personal Information. If we cannot verify your identity (and, where applicable, proof of residency) to our satisfaction, we will not provide or delete your Personal Information.  

5.3 You may submit a request to know or delete your Personal Information through an authorized agent.  Such an agent must present signed written authority to act on your behalf and must be able to verify your identity (and, where applicable, proof of residency) to our satisfaction.  

5.4 We will not discriminate against you for making any such request.  

‍

6 Security

We take significant and appropriate steps to protect your Personal Information in an effort to prevent loss, misuse, and unauthorized access, disclosure, alteration and destruction. We use appropriate technical and organizational measures to protect your personal information which may include: physical access controls, encryption, intrusion detection and network monitoring depending on the nature of the information and the scope of processing. ‍‍

For more information regarding our Security measures, please view our Security Policy which can be found on our website at https://www.leya.law/legal. 

‍

7 Data retention and deletion

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, unless a longer retention period is required or permitted by law. We may also retain your personal information for legitimate business interests, such as to comply with our legal obligations, resolve disputes, and maintain our records. When we no longer need your Personal Information, we will delete it or anonymize it in accordance with our data retention policies and applicable laws, or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing, until deletion is possible.

‍

8 International users

By using our services governed by this Privacy Policy, you understand and acknowledge that your Personal Information will be transferred from your location to our facilities and servers in the EU.

‍

9 Changes to privacy policy

We may update this Privacy Policy from time to time. When we do we will post an updated version on this page, unless another type of notice is required by applicable law or contractual agreement. By continuing to use our service or providing us with Personal Information after we have posted an updated Privacy Policy, or notified you by other means, you consent to the revised Privacy Policy.

‍

10 Data deletion request

If you wish to request the deletion of your Personal Information from our records, you may do so by contacting us at privacy@leya.law. Please note that we reserve the right to limit our facilitating of such requests to the extent required by applicable law.

To protect your Personal Information from unauthorized access or deletion, we may require you to verify your identity before processing any request to know or delete Personal Information. If we are unable to verify your identity (and, where applicable, proof of residency) to our satisfaction, we will not be able to fulfill your request to delete your Personal Information.

If you are unable to submit the deletion request personally, you may authorize an agent to act on your behalf. The agent must present signed written authority to act on your behalf and be able to verify their identity (and, where applicable, proof of residency) to our satisfaction.

Rest assured that we will not discriminate against you for making any such request. Your right to access and delete your Personal Information is important to us, and we will take reasonable steps to verify and process your request promptly.

Please be aware that even if we delete your Personal Information, certain residual data may still remain in our backups or archives for a limited period in accordance with our data retention policies and applicable laws.

If you have any questions or concerns about this process or our data deletion practices, please feel free to contact us at privacy@leya.law.

By using our services, you acknowledge and consent to the transfer of your Personal Information to our facilities and servers in the EU.

‍

11 Information to be provided where personal data are collected from the data subject

When personal data is obtained directly from the data subject (e.g., when creating an account, communicating with us, or purchasing services), Leya AB should provide the following additional information:

- The identity and contact details of the data controller (Leya AB).
- The purposes of the processing for which the personal data are intended, as described in section 2 of the Privacy Policy.
- The legal basis for the processing, including any legitimate interests pursued by the data controller.
- Any recipients or categories of recipients of the personal data (e.g., third-party service providers, affiliates).
- The retention period or criteria used to determine the retention period of the personal data.
- The existence of the data subject's rights to request access, rectification, erasure, restriction of processing, objection to processing, and data portability, as well as the right to lodge a complaint with a supervisory authority.
- The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing.

When personal data is not obtained directly from the data subject (e.g., through social media pages, analytics tools), Leya AB should provide the following additional information:

- The categories of personal data concerned (as described in section 1 of the Privacy Policy).
- The source from which the personal data originate and, if applicable, whether it came from publicly accessible sources.
- The purposes of the processing for which the personal data are intended, as described in section 2 of the Privacy Policy.
- The legal basis for the processing, including any legitimate interests pursued by the data controller.
- Any recipients or categories of recipients of the personal data (e.g., affiliates).
- The retention period or criteria used to determine the retention period of the personal data.
- The existence of the data subject's rights to request access, rectification, erasure, restriction of processing, objection to processing, and data portability, as well as the right to lodge a complaint with a supervisory authority.
- The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing.

‍

12 Contact information

‍If you have any questions about our Privacy Policy or privacy-related issues, please contact us at:

privacy@leya.law.