This policy is a comprehensive working draft for ITMATIX LexSystems. It must be reviewed against the final contracting entity, operating practices, jurisdictions and applicable law before public launch. Effective date: 22 October 2026, subject to approval.
We will document how “information we collect” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “identity and contact information” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “professional and organisation details” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “enquiry and communication records” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “project and service information” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “technical and usage information” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “cookies and similar technologies” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “sources of information” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “purpose limitation” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “responding to enquiries” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “contract performance” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “service delivery administration” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “billing and accounting” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “security and fraud prevention” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “service improvement” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “legal compliance” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “lawful basis assessment” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “consent and withdrawal” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “data minimisation” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “accuracy and updates” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “sensitive and privileged information” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “children’s information” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “sharing with service providers” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “hosting and infrastructure providers” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “email and communications providers” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “professional advisers” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “legal disclosures” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “business transfers” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “international data transfers” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “transfer safeguards” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “retention principles” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “retention schedules” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “deletion and anonymisation” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “access requests” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “correction requests” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “deletion requests” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “restriction and objection rights” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “portability where applicable” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “identity verification” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “response timelines” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “complaints and regulators” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “security measures” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “incident response” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “no absolute security guarantee” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “third-party websites” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “marketing communications” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “automated processing and ai” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “changes to this policy” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “contact and privacy enquiries” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.
We will document how “effective date and jurisdiction” applies to the actual services and systems in use. Information should be limited to what is necessary, handled for a stated purpose, protected with appropriate safeguards and retained only for a justified period, subject to legal obligations and the final approved privacy notice.