Lacework Privacy Statement

Lacework, Inc. and its subsidiaries (collectively, “Lacework”) are committed to protecting your personal information and providing you with a positive experience when visiting our websites and using our products and services (“Solution” or “Solutions”). By using Lacework websites, Solutions, or otherwise providing personal information to us, you agree to the below terms, which may be updated from time to time.

This Privacy Statement applies to Lacework websites and Solutions that link to or reference this Statement and describes how we handle personal information and the choices available to you regarding collection, use, access, disclosure, and how to update and correct your personal information. Additional information on our personal information practices may be provided in offer descriptions, supplemental privacy statements, or notices provided prior to or at the time of data collection. Certain Lacework websites may have their own privacy statement that describes how we handle personal information for those websites specifically. To the extent a notice provided at the time of collection or a website or Solution specific privacy statement conflicts with this Privacy Statement, such specific notice or supplemental privacy statement will control.

California residents click here.

Standard Contractual Clauses for Transfer of Personal Information from the European Union to the United States

Lacework uses Standard Contractual Clauses to fulfill requirements for transfer of personal information from the European Union or European Economic Area (EEA) to the United States.

Compliance with EU-U.S. Data Privacy Framework

In addition to using Standard Contractual Clauses, Lacework complies with the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-US Data Privacy Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and the UK and Switzerland to the United States, respectively. Lacework has certified to the Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles, the UK Extension to the EU-U.S. Data Privacy Framework Principles, and the Swiss-US Data Privacy Framework Principles.

If there is any conflict between the terms in this privacy statement and the EU-U.S. Data Privacy Framework Principles, the UK Extension to the EU-U.S. Data Privacy Framework Principles, and the Swiss-US Data Privacy Framework Principles, then the EU-U.S. Data Privacy Framework Principles, the UK Extension to the EU-U.S. Data Privacy Framework Principles, or the Swiss-US Data Privacy Framework Principles respectively shall govern. To learn more about the EU-U.S. Data Privacy Framework program, the UK extension, and the Swiss-US Data Privacy Framework, and to view our certification, please visit www.dataprivacyframework.gov.

Collecting Your Personal Information

Lacework may collect data, including personal information, about you as you use our websites and Solutions and interact with us. For example, collection occurs when you complete a web form to request information about a Solution.

For purposes of this Privacy Statement, “personal information” is defined as any information that can be used to identify an individual, and may include: name, address, email address, phone number, login information (account number, password), marketing preferences, or social media account information. If we link other data with your personal information, we will treat that linked data as personal information. We also collect personal information from trusted third-party sources and engage third parties to collect personal information to assist us.

Lacework collects personal information for a variety of reasons, including, but not limited to:

Providing customer service and support for Solutions
Processing an order, including payment transactions
Sending marketing communications
Correcting and enhancing contact information Lacework may have for you
Creating an account on a website or within a Solution
Enabling the use of certain features of our Solutions
Personalizing your view of Lacework websites and/or Solution experience, including audio and/or video material that may be presented on our websites
Managing and processing a job application or job transfer
Managing calendaring, meetings, and related communications
Providing you with a newsletter subscription
When a computer-based certification test is administered to you

Lacework and the third parties with whom we engage may combine the information we collect from you over time and across our websites and Solutions with information obtained from other sources. This helps us improve its overall accuracy and completeness, and also helps us better tailor our interactions with you.

If you choose to provide Lacework with a third party’s personal information (such as name, email, and phone number), you represent that you have the third party’s permission to do so and are responsible for such disclosure of that personal information. Examples include forwarding reference or marketing material or sending job referrals. Third parties may unsubscribe at any time from any future communication by emailing privacy@lacework.net.

In some instances, Lacework and the third parties with whom we engage, may automatically collect data through cookies, web logs, web beacons, and other similar applications. This information is used to better understand and improve the usability, performance, and effectiveness of the website and to help tailor content or offers for you. Please read the “Cookies and Web Technologies” section below for more information.

Uses of Your Personal Information

Lacework may use personal information for a variety of reasons, including, but not limited to:

Providing customer service and support for Solutions
Processing an order, including payment transactions
Sending marketing communications
Creating an account on a website or within a Solution
Enabling the use of certain features of our Solutions
Personalizing your view of Lacework websites and/or Solution experience, including audio and/or video material that may be presented on our websites
Managing and processing a job application or job transfer
Providing you with a newsletter subscription
When a computer-based certification test is administered to you
For other legitimate purposes permitted by applicable law or to comply with a legal or mandatory obligation
For providers of services such as website hosting, data analysis, payment processing, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services
For channel partners or resellers if you inquire about our products or services typically fulfilled through channel partners or resellers. These channel partners or resellers may also use this information to inform you about third-party products or services that may be of interest
For Subprocessors that process Lacework information

Rights of Individuals to Access Personal Information

You can exercise your rights of access and request corrections, suppression, or deactivations with applicable data protection laws. If you need additional assistance, or help accessing, correcting, suppressing, or deleting your personal information, please submit a request by clicking here or emailing privacy@lacework.net.

We make good faith efforts to honor reasonable requests to access, correct, suppress, or delete your data. We will respond to your request within 30 days or as otherwise mandated by applicable data protection laws. If we are unable to honor your good faith request, we will provide you with an explanation. Under certain circumstances, you have rights under applicable data protection laws in relation to the access, correction, suppression, or deletion of your personal information. Should you wish to exercise those rights, please click here or submit a request via privacy@lacework.net.

Please note that we may need to request specific information from you to confirm your identity and right to access your personal information. This is a security measure to ensure personal information is not disclosed to any person or third party who does not have a right to receive it. To efficiently process your request, we may contact you for further information. With your permission, we may also share your personal information with Lacework business partners or vendors and, they may send you information about products or services that may be of interest to you. To opt-out of receiving information from third parties for their marketing purposes, please submit a request here or via privacy@lacework.net.

The Choices Lacework Offers Individuals to Limit the Use and Disclosure of Personal Information

Lacework offers individuals two methods to limit the use of and disclosure of personal information:

Sending us a message through email to: privacy@lacework.net

or by regular mail to:

Lacework, Inc., Attn: Chief Compliance Officer, 391 San Antonio Road, Floor 3, Mountain View, CA 94040.

The Types of Third Parties to Which Lacework Discloses Personal Information and the Purposes for Doing So

Lacework may share your personal information with third parties for the purposes of operating our business, delivering, improving, and customizing our Solutions, sending marketing and other communications related to our business, and for other legitimate purposes permitted by applicable law or otherwise with your consent.

Lacework may disclose personal information to third parties for a variety of reasons, including but not limited to:

Within Lacework and any of our global subsidiaries for purposes of data processing or storage.
With Lacework business partners or vendors, so that they may share information with you about their products or services.
With business partners, service vendors, authorized third-party agents, or contractors to provide a requested Solution, service or transaction, and providing Lacework website and/or Solution content to you including audio and/or video material.
In connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or to another company.
In response to a request for information by a competent authority if we believe disclosure is in accordance with, or is otherwise required by, any applicable law, regulation or legal process.
In aggregated and/or anonymized form which cannot reasonably be used to identify you.
If we otherwise notify you and you consent to the disclosure.

Disclosure of Personal Information in Response to Lawful Requests by Public Authorities

Lacework will disclose personal information with law enforcement officials, government authorities, or other third parties as necessary to comply with legal process or meet national security requirements; protect the rights, property, or safety of Lacework, its business partners, you, or others; or as otherwise required by applicable law.

What is the Possibility of an Individual Invoking Binding Arbitration?

Lacework’s employment offer letters contain binding arbitration provisions for U.S. employees only (for any disputes, claims, or causes of action, in law or equity, arising from or relating to the enforcement, breach, performance, or interpretation of the offer, their employment with the Company, or the termination of their employment). Employees outside the U.S. may be subject to other binding resolution processes.

Lacework’s Liability in Onward Transfers to Third Parties

Lacework uses Standard Contractual Clauses to fulfill contractual requirements for onward transfers to third parties.

Unsubscribing and Selecting Your Communication Preferences

Lacework gives you the choice of receiving a variety of information related to our Solutions. You can manage your communication preferences through the following methods:

By following the instructions included in each promotional email from Lacework to unsubscribe from that particular mailing.
By sending us a message through email to: privacy@lacework.net or by regular mail to: Lacework, Inc., Attn: Chief Compliance Officer, 391 San Antonio Road, Floor 3, Mountain View, CA 94040.

Regardless of which method you choose to select your communication preferences, please be sure to include your name, email address, and specific, relevant information about the material you no longer wish to receive. These choices do not apply to service notifications or other required communications that are considered part of certain Solutions, which you may receive periodically unless you stop using or cancel the Solution in accordance with its terms and conditions.

We may also share your personal information with Lacework business partners or vendors, so they may send you information about products or services that may be of interest to you. To opt-out of receiving information from third parties for their marketing purposes, please submit a request via privacy@lacework.net.

By using our websites, Solutions, or otherwise providing personal information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use.

Sharing Your Personal Information

Lacework may share personal information for a variety of reasons, including but not limited to:

Within Lacework and any of our global subsidiaries for purposes of data processing or storage.
With Lacework business partners or vendors, so that they may share information with you about their products or services.
With business partners, service vendors, authorized third-party agents, or contractors to provide a requested Solution, service or transaction. Examples include, but are not limited to: processing of orders and credit card transactions, hosting websites, including audio and/or video material, hosting seminar registration, assisting with sales-related efforts or post-sales support, and providing customer support.
In connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or to another company.
In response to a request for information by a competent authority if we believe disclosure is in accordance with, or is otherwise required by, any applicable law, regulation or legal process.
With law enforcement officials, government authorities, or other third parties as necessary to comply with legal process or meet national security requirements; protect the rights, property, or safety of Lacework, its business partners, you, or others; or as otherwise required by applicable law.
In aggregated and/or anonymized form which cannot reasonably be used to identify you.
If we otherwise notify you and you consent to the sharing.

To opt-out of Lacework sharing with third parties for their marketing purposes, please submit a request via privacy@lacework.net.

Security of Your Personal Information

We intend to protect the personal information entrusted to us and treat it securely in accordance with this Privacy Statement. Lacework implements physical, administrative, and technical safeguards designed to protect your personal information from unauthorized access, use, or disclosure. We contractually require that our suppliers protect such information from unauthorized access, use, and disclosure. Notwithstanding the measures Lacework takes to protect your personal information, it does not guarantee the security of any personal information you provide to us or third parties.

Retention of Personal Information

We will only retain your personal information for as long as necessary to fulfill the purposes for which it was collected, or as necessary to comply with our business requirements and necessary laws; to comply with any legal, accounting or reporting obligations; to resolve disputes; to protect our assets; to efficiently run our business; and to enforce our agreements.

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we collect or process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

Use of Cookies and Web Technologies

Like many websites, Lacework uses automatic data collection tools, such as cookies, embedded web links, and web beacons. These tools collect certain standard information that your browser sends to our website such as your browser type and the address of the website from which you arrived at our website. They may also collect information about:

Your Internet Protocol (IP) address. This is a number automatically assigned to your computer or device whenever you are connecting to the Internet. It allows web servers to locate and identify your device, this is a unique address assigned to your device by your Internet service provider or information systems department on a TCP/IP network.
Clickstream behavior, which helps us better understand your visit to our website and may, in turn, provide you with a more customized experience when you return.

The Lacework website includes widgets, which are interactive mini-programs that run on our site to provide specific services from another company (such as displaying the news, opinions, music, and more). Personal information, such as your email address, may be collected through such widgets. Cookies may also be set by widgets to enable it to function properly. Information collected by widgets is governed by the privacy policy of the company that created the widget.

Some web browsers may give you the ability to enable a “do not track” feature that sends signals to the websites you visit, indicating that you do not want your online activities tracked. This is different than blocking or deleting cookies, as browsers with a “do not track” feature enabled may still accept cookies. There is currently no industry standard for how companies should respond to “do not track” signals, although one may develop in the future. Our websites do not recognize and respond to “do not track” signals at this time. If that changes in the future, it will be reflected in our most updated Privacy Statement.

Linked Websites

We may provide links to other third-party websites and services that are outside our control and not covered by this Privacy Statement. We encourage you to review the privacy statements posted on those websites (and all websites) you visit.

Forums and Chat Rooms

If you participate in a discussion forum, local communities, or chat room on a Lacework website, you should be aware that the information you provide there (i.e., your public profile) may be made broadly available to others, and could be used to contact you, send you unsolicited messages, or for purposes neither Lacework, nor you, have control over. Also, please recognize that individual forums and chat rooms may have additional rules and conditions. Lacework is not responsible for the personal information or any other information you choose to submit in these forums. To request removal of your personal information from our blog or community forum, please submit a request via privacy@lacework.net. In certain circumstances, we may not be able to remove your personal information.

Consent to Transfer, Processing and Storage of Personal Information

As Lacework is a global organization, we may transfer your personal information to Lacework in the United States of America, to any Lacework subsidiary worldwide, or to third parties and business partners as described above that are located in various countries around the world. By using our websites and Solutions or providing any personal information to us, where applicable law permits, you consent to the collection, use, disclosure, sharing, retention, transfer, and processing of such information outside of your country of residence where data protection laws and regulations may be different.

Whenever we transfer your personal information out of the European Economic Area (“EEA”), we ensure a similar degree of protection is afforded to it by the use of specific contracts approved by the European Commission which provides the same protection to personal information as it has in Europe.

Independent Recourse Mechanism for Complaints regarding the EU-U.S. Data Privacy Framework Principles, the UK Extension to the EU-U.S.

In compliance with the EU-U.S. Data Privacy Framework Principles, the UK Extension to the EU-U.S. Data Privacy Framework Principles, and the Swiss-US Data Privacy Framework Principles, Lacework commits to resolve complaints about our collection or use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our Data Privacy Framework policy should first contact Lacework at: privacy@lacework.net.

Lacework has further committed to cooperate with the panel established by the EU data protection authorities (DPAs) with regard to unresolved Data Privacy Framework complaints concerning human resources data and non-human resources data transferred from the EU.

Lacework has committed to cooperate with the UK ICO with regard to unresolved Data Privacy Framework complaints concerning human resources data and non-human resources data transferred from the UK.

Lacework has committed to cooperate with the panel established by the Swiss Federal Data Protection and Information Commissioner with regard to unresolved Data Privacy Framework complaints concerning human resources data and non-human resources data transferred from Switzerland.

Subject to Investigatory and Regulatory Powers of the FTC

Lacework is subject to the investigatory and enforcement powers of the United States Federal Trade Commission (FTC).

Liability for Onward Transfers to Third Parties

Lacework has liability for onward transfers to third parties unless we can prove we were not a party to the events giving rise to the damages.

Additional Information for California Residents

This section provides information organized in accordance with the California Consumer Privacy Act (“CCPA”) for residents of California about how we handle certain personal information we have collected over the past 12 months.

Categories of Personal Information. This Privacy Policy discloses the categories of personal information that we collect, use, and disclose in order to operate our business over the past 12 months.

Collect. The section above entitled Collecting Your Personal Information discloses the categories of personal information that we collect.

Use. The section above entitled Uses of Your Personal Information discloses how we use your personal information.

Disclose. The sections above entitled The Types of Third Parties to Which Lacework Discloses Personal Information and the Purposes for Doing So and Disclosure of Personal Information in Response to Lawful Requests by Public Authorities discloses how we may share your personal information.

Do Not Sell My Personal Information

Lacework does not sell and has not sold Personal Information within the preceding 12 months, as “sale” is defined in the CCPA. Lacework does not knowingly sell or share the Personal Information of minors. Since Lacework sells enterprise products to businesses, and not directly to consumers, we do not knowingly collect any information from minors.

Lacework may share your personal information with third parties and third parties may collect your personal information as described above in the Uses of Your Personal Information. In addition, as described in the section Use of Cookies and Web Technologies, we may work with third parties who may use cookies to provide personalized content to you.

Requests for Deletion, Copy and Right to Know or Correct Your Information. California consumers have the right to make the following requests, which we endeavor to honor from non-California residents as well:

For California residents, you may submit deletion, copy and right to know or correct requests via emailing privacy@lacework.net or via the Lacework Privacy Hotline: 1-866-I-OPT-OUT (1-866-467-8688) and Enter 1796 (Service Code).

Deletion. You have the right to request deletion of personal information that we have collected about you.

Copy and Right to Know. You have the right to request a copy of the specific pieces of personal information that we have collected about you over the past 12 months, including the categories of information, sources, and purposes of collection, as well as categories of third parties we have shared it with.

Right to Correct. You may request that we correct inaccuracies in your Personal Information.

Request to Opt Out of “Sharing”. You may request to opt out of any future “sharing” or your Personal Information for purposes of cross-context behavioral advertising.

Authorized Agents

If you want to make a request as an authorized agent on behalf of a California resident, you may use the submission methods noted above. As part of our verification process, we may request that you provide, as applicable:

Proof of your registration with the California Secretary of State to conduct business in California;
A power of attorney from the California resident pursuant to Probate Code sections 4121-4130;
Written permission that the California resident has authorized you to make a request on the resident’s behalf. This permission must be signed (via physical or e-signature) by the California resident.

If you are making a Deletion, Copy, Right to Know, or Correct Your Information request on behalf of a California resident and have not provided Lacework with a power of attorney from the resident pursuant to Probate Code sections 4121-4130, Lacework may also require the resident to:

Verify the resident’s own identity directly with Lacework; or
Directly confirm with Lacework that the resident provided you permission to submit the request.

Non-Discrimination. Lacework will not discriminate against you, including by denying or providing a different level or quality of goods or services should you choose to exercise your options under the CCPA.

Your California Privacy Rights Under California’s Shine-the-Light Law. California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the types of personal information disclosed to those parties. If you are a California resident and would like to request this information, please submit your request in an email to privacy@lacework.net or via the Lacework Privacy Hotline: 1-866-I-OPT-OUT (1-866-467-8688) and Enter 1796 (Service Code)

How to Contact Us

We value your opinions. Should you have questions or comments related to this Privacy Statement, please email privacy@lacework.net.

For California residents, you contact via emailing privacy@lacework.net or via the Lacework Privacy Hotline: 1-866-I-OPT-OUT (1-866-467-8688) and Enter 1796 (Service Code)

Updates to this Lacework Privacy Statement

We may update this Privacy Statement from time to time. Your use of the Lacework webpage and Services following these changes means that you accept the revised Privacy Statement. Please check this page regularly to keep up-to-date.

This Privacy Statement was last updated on July 29, 2024.