Privacy Policy

1. Scope of this Policy

Language Group Provider LLC, a Delaware limited liability company ("LGP", "we", "us", or "our"), provides language access, workforce management, and related enterprise services to healthcare organizations, government agencies, insurance companies, legal organizations, and other commercial clients. This Privacy Policy describes how we handle personal information that we collect as a business through languagegroupprovider.com (the "Site") and through our commercial, recruiting, and administrative operations.

This Policy does not apply to personal information that we process on behalf of a client under a services agreement. In those engagements, the client is the controller or covered entity, and that client's own privacy notices and our written agreement with the client govern the handling of such information. Section 5 describes this distinction in more detail.

2. Categories of Information We Collect

We collect only the information reasonably necessary for our business purposes. Depending on your interaction with us, this may include:

• Business contact information. Name, employer or organization, job title, business email address, business telephone number, and country or region.
• Inquiry and engagement information. Service interest, language requirements, estimated volumes, timelines, and the contents of messages you submit through our contact, quote, or partnership forms.
• Recruiting information. Information voluntarily submitted by interpreter or staffing applicants. Applications are currently submitted through a third-party form provider; that provider processes application data under its own terms and privacy notice.
• Account information. For the limited number of authorized administrative users of our internal portal, an email address and authentication credentials managed by our hosting and authentication provider.
• Technical information. Information automatically generated by our hosting infrastructure in the ordinary course of delivering the Site, such as IP address, browser and device type, referring page, and request timestamps, retained in server logs for security, diagnostic, and reliability purposes.

We do not knowingly collect sensitive personal information through the Site, and we ask that you not submit health information, government identifiers, financial account numbers, or other sensitive data through our web forms.

3. How We Use Information

• To respond to inquiries, proposals, quotes, and partnership requests.
• To evaluate, negotiate, enter into, and perform commercial agreements.
• To evaluate applicants for interpreter and staffing opportunities.
• To operate, secure, maintain, and improve the Site and our internal systems.
• To send business communications relating to services you or your organization have requested.
• To comply with legal obligations and to establish, exercise, or defend legal claims.

We do not use information submitted through the Site for automated decision making that produces legal or similarly significant effects.

4. Legal Bases and Sources

We collect personal information directly from you, from your organization, and from our service providers acting on our behalf. Where a legal basis is required by applicable law, we rely on our legitimate business interests in operating and marketing a business-to-business service, the performance of a contract, your consent where required, and compliance with legal obligations.

5. HIPAA Considerations

LGP is not a covered entity. Where LGP performs services that involve access to protected health information ("PHI") on behalf of a covered entity or another business associate, LGP acts solely as a business associate or service provider, and only under a written Business Associate Agreement ("BAA") or equivalent contractual terms executed with that client. In those engagements, LGP's use and disclosure of PHI is limited to what the applicable agreement and law permit.

LGP does not represent that it is HIPAA-certified, and no such certification exists under U.S. law. LGP requires HIPAA awareness training for personnel assigned to engagements involving PHI and applies the safeguards described in our Security & Compliance page and in the applicable client agreement. No PHI should be submitted through the Site or through general email.

6. Disclosure of Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We disclose personal information only as follows:

• Service providers and processors. Vendors that host our Site and databases, provide authentication, deliver email, and provide application-intake forms, in each case bound by contract to process information only on our documented instructions.
• Professional advisors. Legal, accounting, insurance, and compliance advisors under duties of confidentiality.
• Legal and safety. Where reasonably necessary to comply with law, respond to lawful requests, enforce our agreements, or protect the rights, property, or safety of LGP, our clients, or others.
• Corporate transactions. In connection with a merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality protections.

A current list of the categories of third-party processors we use for the Site is available on request at the contact address in Section 13.

7. Cookies and Analytics

The Site currently uses only cookies and browser storage that are strictly necessary for core functionality, such as maintaining an authenticated session for authorized administrative users. We do not currently operate analytics, advertising, or cross-site tracking technologies on the Site. If we introduce analytics or marketing technologies in the future, we will update this Policy and our Cookie Policy and, where required by applicable law, present a consent mechanism before activation.

8. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, and thereafter as required for legal, tax, audit, insurance, or dispute-resolution purposes. As general guidance, and subject to change following legal review: website inquiry and quote submissions are retained for up to twenty-four (24) months after the last related communication; recruiting submissions are retained for up to twenty-four (24) months; server and security logs are retained for a shorter operational period. Information processed on behalf of a client is retained and returned or destroyed as provided in the applicable client agreement.

9. Security Measures

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, and loss. These include role-based access controls and least-privilege principles, authentication for administrative systems, encryption in transit for Site traffic, confidentiality agreements with personnel, and periodic review of access. No method of transmission or storage is completely secure, and we cannot and do not guarantee absolute security.

10. Data Breach Notification

We maintain internal procedures for identifying, escalating, and responding to suspected security incidents. Where an incident affecting personal information triggers notification obligations under applicable state or federal law, or under a client agreement, we will provide notice to affected individuals, clients, and regulators within the timeframes and in the manner required by that law or agreement.

11. Your Privacy Rights

Depending on your state of residence, you may have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA") or comparable state privacy laws, including the rights to know or access, to correct, to delete, to obtain a portable copy, to opt out of sale or sharing (LGP does not sell or share personal information as those terms are defined), to limit the use of sensitive personal information, and to be free from unlawful discrimination for exercising these rights.

To exercise a right, contact us using Section 13. We will verify your request using the information reasonably available to us and will respond within the period required by applicable law. An authorized agent may submit a request with proof of authorization. Where information was collected in our role as a service provider or business associate for a client, we will refer your request to that client.

12. International Data Transfers

LGP is based in the United States, and our Site and systems are hosted in the United States. Some of our personnel and contracted providers may be located outside the United States. Where personal information is transferred across borders, we implement contractual and organizational measures appropriate to the transfer. If you access the Site from outside the United States, you acknowledge that your information will be processed in the United States, where data-protection laws may differ from those in your jurisdiction.

13. Children's Privacy

The Site is intended for business use and is not directed to children under the age of thirteen (13). We do not knowingly collect personal information from children through the Site. If we learn that we have inadvertently collected such information, we will delete it. LGP may facilitate interpretation involving minors solely at the direction of, and under agreement with, a client.

14. Changes to this Policy

We may update this Policy to reflect changes in our practices, technology, or applicable law. Material changes will be posted on this page with a revised effective date. Your continued use of the Site after an update constitutes acknowledgment of the revised Policy.

15. Contact

Language Group Provider LLC
Attn: Privacy
254 Chapman Rd, Ste 208 #21693, Newark, DE 19702, United States
Telephone: +1 (302) 391-6561
Email: norman.alvarez@languagegroupprovider.com