Scope
– This Privacy Policy applies generally to personal data received by Applied Lingo, Inc., and all of its affiliated and subsidiary entities (collectively, “Applied Lingo”, “we”, “us” or “our”) in any format, including electronic, physical, or verbal. Applied Lingo is committed to ensuring that all global data handled by its offices adheres to this Privacy Policy. The manner in which we process your personal data varies depending on your relationship with us (e.g., client, vendor, employee, or job applicant). For a comprehensive understanding of our privacy practices, please select the appropriate category below to review the corresponding detailed Privacy Notice:
Who are we?
Applied Lingo may act as a data controller (or equivalent under applicable law) of your personal data, meaning we determine the purposes and means of processing your information. In certain circumstances, such as when providing services to clients under contractual agreements, Applied Lingo may also act as a data processor or sub-processor, handling personal data on behalf of third parties. Our role is defined by the context of your interaction with us, and specific details are outlined in the applicable Privacy Notice linked above.
Your personal data – what is it?
Personal data refers to any information that relates to an identifiable living individual, either directly (e.g., name, email address) or indirectly (e.g., IP address, device identifiers). The collection, use, storage, and transfer of your personal data are governed by applicable privacy laws, including, but not limited to, the European Union’s General Data Protection Regulation (GDPR) for EU residents, the California Consumer Privacy Act (CCPA) as amended by the CPRA for California residents, and other regional or national frameworks. Applied Lingo adheres to the strictest standards required by these laws to protect your privacy.
How do we process your personal data?
Applied Lingo complies with all obligations under applicable privacy laws by: (1) ensuring personal data is accurate, up-to-date, and retained only as long as necessary; (2) implementing robust technical and organizational safeguards to prevent unauthorized access, disclosure, alteration, or destruction; (3) conducting regular audits to verify compliance with internal policies and external regulations; and (4) providing transparency about data practices through notices like this policy. Personal data provided to Applied Lingo may be stored in our secure data centers located in the United States or other jurisdictions where we operate. For specifics about processing purposes and locations, refer to the relevant Privacy Notice under “Scope.”
What personal data do we collect?
The categories of personal data we collect depend on your relationship with Applied Lingo. Examples include contact details (e.g., name, email, phone number), professional information (e.g., job title, employer), financial data (e.g., payment details for vendors or clients), technical data (e.g., IP addresses, cookies), and sensitive information (e.g., biometric data for security purposes, where legally permitted). Detailed lists are available in the applicable Privacy Notice linked above.
Why are we collecting your personal data?
We process personal data to fulfill contractual obligations (e.g., providing translation services), comply with legal requirements (e.g., tax reporting), pursue legitimate business interests (e.g., improving our platforms), or with your explicit consent (e.g., marketing communications). For a full breakdown of purposes, consult the relevant Privacy Notice under “Scope.”
What is the legal basis for processing your personal data?
Under the GDPR and similar laws, processing is justified by one or more of the following: contractual necessity, legal obligation, vital interests, public task, legitimate interests (balanced against your rights), or consent. For California residents, we process data as permitted under the CCPA/CPRA, including for business purposes or commercial activities with appropriate disclosures. Specific legal bases are detailed in the applicable Privacy Notice.
Further processing
If Applied Lingo intends to use your personal data for a purpose not originally disclosed, we will notify you through an updated Privacy Policy or direct communication, explaining the new purpose, legal basis, and any relevant details. Where required by law (e.g., for GDPR-covered data), we will obtain your prior consent before proceeding with such processing.
Sharing your personal data
We may share your data with: (1) affiliated entities within the Applied Lingo corporate family; (2) third-party service providers (e.g., cloud hosting, payment processors); (3) regulators or law enforcement agencies as required by law; or (4) business partners in joint ventures, with appropriate safeguards in place. For a complete list of recipients and circumstances, refer to the applicable Privacy Notice.
Sale of personal data
Applied Lingo does not sell, rent, or trade your personal data to third parties for monetary or other valuable consideration, as defined under the CCPA/CPRA. We may share data with advertising partners for targeted marketing, but such sharing is not classified as a “sale” under applicable laws.
How long do we keep your personal data?
Retention periods vary based on the purpose of processing and legal requirements. For example, client project data may be retained for 7 years to comply with tax or audit obligations, while job applicant data may be deleted after 2 years if no employment relationship is established. Specific retention schedules are outlined in the applicable Privacy Notice.
Onward Transfers and Transfer of Data Abroad
As a global organization, Applied Lingo may transfer personal data across borders, including to countries outside the European Economic Area (EEA) or the United Kingdom. Such transfers are safeguarded through mechanisms like the EU Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements (IDTAs), or adherence to binding corporate rules (BCRs). All Applied Lingo entities are contractually bound to process data in compliance with applicable laws, regardless of location. The term “processing” includes any operation performed on personal data, such as collection, storage, analysis, or deletion.
Cookies and Website Privacy Practices
Applied Lingo’s website employs cookies, web beacons, and similar technologies to enhance user experience, analyze traffic, and deliver personalized content. Cookies are categorized as: (1) Strictly Necessary (essential for site functionality); (2) Performance (analytics); (3) Functional (preference-based); and (4) Targeting (advertising). We do not use cookies to track personal identifiers (e.g., names, emails) without consent. Aggregate data, such as visitor counts or geographic trends, is collected to improve site performance and is anonymized.
Opting-out
You may manage cookie preferences via your browser settings or our Cookie Consent Manager. To opt out of targeted advertising, use the Network Advertising Initiative (NAI) . To unsubscribe from marketing communications, send an e-mail to Applied Lingo’s privacy@applied-lingo.com. Note that opting out may limit access to certain platform features or services.
Your rights and your personal data
Depending on your jurisdiction, you may exercise the following rights:
Right to Access: Request a copy of the personal data we hold about you (GDPR, CCPA).
Right to Rectification: Correct inaccurate or incomplete data (GDPR).
Right to Erasure: Request deletion of data under specific conditions (GDPR, CCPA).
Right to Restrict Processing: Limit how we use your data (GDPR).
Right to Data Portability: Receive your data in a machine-readable format (GDPR, CCPA).
Right to Object: Challenge processing based on legitimate interests (GDPR).
Right to Non-Discrimination: Exercise CCPA rights without retaliation.
To submit a request, email privacy@applied-lingo.com. We will respond within 45 days, with extensions permitted under law.
Confidentiality and Security Measures
Applied Lingo maintains strict confidentiality agreements with clients, vendors, and employees. All third-party vendors (e.g., freelance linguists, IT providers) undergo rigorous due diligence and sign data protection agreements requiring compliance with Applied Lingo’s policies. Sensitive data in translation projects is anonymized where possible, and access is restricted to authorized personnel. Emails sent to Applied Lingo are routed through a U.S.-based third-party SPAM filter (e.g., AppRiver) for security, even if originating outside the U.S.