Privacy, confidentiality, and retention

Data may be used to evaluate requests, perform contracts, communicate, bill, provide support, maintain security, and meet applicable obligations. Any optional marketing use requires the corresponding notices and consents.

Only authorized personnel and providers who need the data for their role should access it. Controls appropriate to the sensitivity of the information will apply.

LBS may use hosting, email, billing, analytics, development tools, and other third-party services. The definitive public policy should identify real categories, purposes, and necessary disclosures, without inventing providers.

Closed operational files have an ordinary target retention period of three years from formal closure. This does not mean automatic deletion if tax, accounting, contractual, legal, evidence-preservation, or valid request obligations require another period. Retention for each data type should be reviewed separately.

When appropriate, information will be deleted or anonymized under procedures proportionate to its risk. Backup copies may be subject to documented purge cycles.

When artificial-intelligence tools are used to process client information, LBS shall evaluate confidentiality, contractual authorizations, data protection, and human oversight, and disclose relevant uses as appropriate.