Version 2010.03.02

Lux Scientiae, Incorporated has created this privacy statement in order to demonstrate our commitment to privacy. The following discloses our information gathering and dissemination practices for this website and our services in general. We reserve the right to modify this privacy statement at any time, so please review it frequently. If we make material changes to this policy, we will notify you here in this policy, by email, or by means of a notice on our LuxSci FYI Blog.

Lux Scientiae is a licensee of the TRUSTe Privacy Program. TRUSTe is an independent organization whose mission is to build users' trust and confidence in the Internet by promoting the use of fair information practices. This privacy statement covers the Web site www.luxsci.com. Because this Web site wants to demonstrate its commitment to your privacy, it has agreed to disclose its information practices and have its privacy practices reviewed for compliance by TRUSTe.

If you have questions or concerns regarding this statement, you should first contact the Lux Sceintiae Privacy Officer at "privacy-officer at luxsci.com". If you do not receive acknowledgement of your inquiry or your inquiry has not been satisfactorily addressed, you should contact TRUSTe at TRUSTe. TRUSTe will then serve as a liaison with us to resolve your concerns.

Lux Scientiae complies with the EU Safe Harbor framework as set forth by the Department of Commerce regarding the collection, use, and retention of data from the European Union.

General usage:

While visiting the Lux Scientiae web site, information is stored in a log file for the purpose of analyzing what pages are accessed, which files are downloaded, and what errors occur. We review which top domain addresses visit our site. This process does not collect any personal information about you or your business.

When you complete any form on our site including personal information such as your name, addresses, email, phone numbers, and other information, your information is written to a secure file or database and/or emailed to our staff. We will respond to your inquiry if applicable.

Members:

We collect the names, addresses, phone numbers, and email addresses of our users in order to identify them and provide billing and support services. Once a user has logged in to Lux Scientiae, cookies are used for authentication and verification purposes. Our cookies reside in a small file stored on your computer, which expire within 1 year (or sooner, depending on your personal preferences). Our cookies are linked to your personal information. Our cookies do not track your movement throughout the Internet and do not, ever, send us information about you when you are not on our site.

Third Party Tracking Technologies

The use of tracking technologies by our partners, tracking utility company, and service providers is not covered by our privacy statement. We do not have access or control over these cookies. Our partners, tracking utility company, and service providers may use session ID cookies to make it easier for you to navigate their web sites or to provide statistics to us on the usage of our web site.

Newsletters

If you wish to subscribe to our newsletter(s), we will use your name and email address to send the newsletter to you. Out of respect for your privacy, we provide you a way to unsubscribe.

Choice/Opt-out

We provide you the opportunity to "opt-out" of having your personally identifiable information used for certain purposes, when we ask for this information. For example, if you purchase a product/service but do not wish to receive any additional marketing material from us, you can indicate your preference on our order form.

If you no longer wish to receive our newsletter and promotional communications, you may opt-out of receiving them by following the instructions included in each newsletter or communication or by emailing us at "support at luxsci.com". We offer an opportunity to opt-out of certain communications on our personal profile update pages, or you may contact us at 1-800-441-6612, "support at luxsci.com", or Lux Scientiae, PO Box 326 Westwood, MA 02090 USA.

OpenID

You can log in to our site using sign-in services such as an Open ID provider. These services will authenticate your identity and provide you the option to share certain personal information with us such as your name and email address to pre-populate our sign up form.

Additionally, we record all logins to Lux Scientiae by our members and the pages visited by them. This is for security purposes and for the purpose of analyzing what pages and features are being used and with what frequency.

Payments:

All payments to Lux Scientiae are made securely online via credit card or PayPal or offline via check, wire transfer, or direct deposit. After you have made a credit card payment, we keep your billing address in our secure database to facilitate future payments. We do not keep any record of your credit card number unless you authorize us to bill you automatically each month. In this case, your credit card information is stored in a PCI-compliant way, not on Lux Scientiae's servers.

Security

The security of your personal information is important to us. When you enter sensitive information (such as credit card number and/or social security number, national ID, personal health information) on our registration or order forms, we encrypt that information using secure socket layer technology (SSL). [To learn more about SSL, follow this link How Does Secure Socket Layer (SSL or TLS) Work?]

We follow generally accepted industry standards to protect the personally identifiable information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Tell-A-Friend

If you choose to use our referral service to email a friend about our site, we will ask you for your friend.s name and email address. We will automatically send your friend a one-time email inviting him or her to visit the site. Lux Scientiae stores this information for the sole purpose of sending this one-time email and tracking the success of our referral program.

Links to Other Sites

If you click on a link to a third party site, you will leave the Lux Scientiae site you are visiting and go to the site you selected. Because we cannot control the activities of third parties, we cannot accept responsibility for any use of your personally identifiable information by such third parties, and we cannot guarantee that they will adhere to the same privacy practices as Lux Scientiae. We encourage you to review the privacy statements of any other service provider from whom you request services. If you visit a third party website that is linked to an Lux Scientiae site, you should read that site.s privacy statement before providing any personally identifiable information.

Updating/Accessing/Amending/Correcting Personally Identifiable Information

If your personally identifiable information changes, or if you no longer desire our service and would like to have your personally identifiable information deleted, you may update it by making the change on our member profile page or by making a support ticket, or by contacting us by telephone or postal mail at the contact information listed below. We will respond to your request to access within 1 day. You can change your personal information online by logging into your "member portal", under "Account > My profile".

Agents/Service Providers

We use other third parties such as a credit card processing company to bill you for goods and services and data center providers to provide the servers on which our live services reside. When you sign up for services such as Premium Email Filtering, Premium Email Archival, SSL Certificates, DNS Service, Domain and Registration, we may share your name, physical address, and email address as necessary for the third party to provide that service.

These third parties are prohibited from using your personally identifiable information for promotional purposes.

Import Contacts

We provide an import contacts feature to help you keep in touch with your contacts by importing your existing contact list into your address books while you are logged into your portal account.

When logged into the portal, third party personal information may be entered such as name, email, address, and other personal information. This information is only used for the purpose it is collected for.

Non-disclosure:

Lux Scientiae will not release any information about its clients to third parties without the clients' explicit consent, except as required for compliance with local, state, and federal law or as further set forth below.

We reserve the right to disclose your personal information as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, or legal process served on our Web site.

If you use a bulletin board, blog, or chat room on this Web site, you should be aware that any personally identifiable information you submit there can be read, collected, or used by other users of these forums, and could be used to send you unsolicited messages. We are not responsible for the personal information you choose to submit in these forums. Testimonials are also posted on our site and users have given permission to have their personal information submitted in these testimonials.

For Customers using Basic Dedicated Servers:

The Lux Scientiae Acceptable Use Policies specifically prohibit the use of our service for illegal activities. Therefore, you agree that Lux Scientiae may disclose any and all of your information including assigned IP numbers, account history, account use, etc. to any law enforcement agent who makes a verified written request, without further consent or notification to you. LuxSci, or its Basic Dedicated Server Partner, will verify the legitimacy and authenticity of any such request and determine if compliance with the request is required by local, state, or federal law or if, in its sole discretion, the request should be filled even if it is not required by local, state, or federal law. In addition, Lux Scientiae shall have the right to suspend or terminate all services, at its sole discretion, during such a legal investigation.

For all other Customers (i.e. shared hosting, dedicated Cloud, and Premium Dedicated):

You agree that Lux Scientiae may disclose any and all of your information including assigned IP numbers, account history, account use, etc. to any law enforcement agent who makes a verified written request, without further consent or notification to you. LuxSci will verify the legitimacy and authenticity of any such request and determine if compliance with the request is required by local, state, or federal law. Only if the request is verified and compliance is required will the request be filled. In addition, Lux Scientiae shall have the right to suspend or terminate all services, at its sole discretion, during such a legal investigation.

Lux Scientiae does not give out its client's email addresses or send SPAM. Lux Scientiae may occasionally send important announcements regarding Lux Scientiae services to its clients if they have not opted out of this notification service.

For Customers that have a valid HIPAA Business Associate Agreement (BAA) with Lux Scientiae, in the event of a conflict or inconsistency between the terms of this nondisclosure policy and those of the BAA, the terms of the BAA shall prevail.

Confidentiality:

Lux Scientiae staff will not examine the following classes of data without Customer's explicit consent:

1. Email: The content of sent and received email messages, with the exception of the message metadata including: sender address, recipient addresses, message subject, message size, message id, IP address of the sending or connecting computers, and any message header information removed from messages for the purposes of outbound message anonymization.
2. WebAides: The content of all WebAides, including comments and attachments
3. Widgets: The content of all Widgets, except the content of custom or third party widgets that is defined directly as part of the widget definition.
4. Databases: The content of all databases hosted by Customer in its web hosting account.
5. Files: The content of all files saved to the Customers web/FTP space, except as they may otherwise be publically accessible on the Internet via Customer's web site. Note that this covers only the content of the files, not the list of what files are present and what directories they are located in.

Information that does not fall within the above classes of data (i.e. email message metadata) will still be kept in the strictest confidence in accordance with Lux Scientiae's non-disclosure policy.

Exception 1: in a case where Lux Scientiae becomes aware of evidence of a possible violation by a client of its Acceptable Use Policy and it concludes that analysis of data is necessary in order to determine the facts, in order to prevent the sending of SPAM, Unsolicited Email, excessive utilization of system resources, or other violations of LuxSci's AUPs, Lux Scientiae will examine such client's data solely for such purpose. The contents of client's data will be kept in the strictest confidence in accordance with Lux Scientiae's non-disclosure policy.

Exception 2: from time to time Lux Scientiae may audit High Volume Outbound Email customers' bulk email practices. As stated in the High Volume AUP (HVAUP), Lux Scientiae can and will store and/or review the content of any or all outbound email messages sent via the High Volume service to ensure compliance with the High Volume Email Restrictions (see the HVAUP).

Exception 3: for Customers that have a valid HIPAA Business Associate Agreement (BAA) with Lux Scientiae, in the event of a conflict or inconsistency between the terms of this confidentiality policy and those of the BAA, the terms of the BAA shall prevail.

Medical privacy (HIPAA):

Clients that are legally required to abide by the regulations of HIPAA (i.e. HIPAA Covered Entities and Business Associates of HIPAA Covered Entities, namely, (1) health plans, (2) health care clearinghouses, or (3) health care providers who electronically transmit any health information in connection with transactions for which the U.S. Department of Health and Human Services has adopted standards), Lux Scientiae has the following Addendum to its Master Services Agreement (MSA). This is the "Business Associate Agreement" required for HIPAA compliance between Lux Scientiae, as the "Business Associate", and the Client, as the "Covered Entity".

Due to the Security and Privacy restrictions imposed by the BAA and by HIPAA that are not required for other types of accounts, this Addendum is not automatically incorporated into new or existing Lux Scientiae accounts. If you require a BAA with Lux Scientiae, please print out and sign the BAA and Account Restrictions Agreement using the links below and return them to Lux Scientiae for review and acceptance. LUX SCIENTIAE WILL NOT BE DEEMED A BUSINESS ASSOCIATE OF ANY CUSTOMER FOR PURPOSES OF HIPAA UNLESS AND UNTIL A SIGNED ADDENDUM IS RECEIVED, REVIEWED, AND ACCEPTED BY THE LUX SCIENTIAE HIPAA PRIVACY OFFICER.

• Standard Lux Scientiae HIPAA Business Associate Agreement
• Standard Lux Scientiae HIPAA Account Restrictions Agreement

You may return signed versions of these documents to Lux Scientiae by:

• FAXing to 413-332-0598
• Mailing to Lux Scientiae at PO Box 326 Westwood, MA 02090 USA
• Scanning and attaching digital copies to a support ticket in your Lux Scientiae account.