Applicant Privacy Statement

Last updated: January 23, 2023

Privacy Statement for Applicants

Welcome! At Lightspeed, we believe that protecting your Personal Data is very important. This privacy statement explains how Lightspeed Commerce Inc. and all its affiliates (collectively, “Lightspeed”, “we”, “us” or “our”) handle your Personal Data when you apply for a job at Lightspeed (referred to in this policy as “Applicants” or “you”).

If you are located in the EEA, the UK or Switzerland, the data controllers for processing Personal Data you submit are Lightspeed Commerce Inc. and Lightspeed Netherlands B.V.

Definition of Personal Data

Personal Data means any information that relates to an identified or identifiable natural person. This includes data such as name, home address, email address and phone number, as well as IP-address and data specific to the physical, physiological, genetic, economic, cultural or social identity of natural persons.

What Personal Data we collect

Lightspeed collects and uses your Personal Data to process your job application and manage the hiring process. The following are categories of personal data collected at various stages of this process over the past 12 months. Depending on your position in the application and hiring process, we may collect some or all of this Personal Data.

Category of Personal Data

Purpose of Collection

Identification data, such as your name, date of birth, and government identifiers (e.g. Social Security Number);
Contact details, such as your home address, telephone number and email address;
Education and work experience, such as contact details for your current/former employer, information about your educational background, your work experience, and other experience;
Other application data, such as the information included in your cover letter and résumé;
Information collected as part of the hiring process, such as notes taken from your interview or skills assessment;
Health and medical data (where applicable), such as information on a disability for purposes of accommodating your application and interview; and
Any other Personal Data that you voluntarily provide to Lightspeed.

Communicating with you;
Processing your application;
Determining your eligibility for a role at Lightspeed;
Verifying your information and carrying out reference checks, right to work checks, and background checks (where applicable);
Making you a job offer;
Where requested by you, assisting you with obtaining an immigration visa or work permit where required;
Improving Lightspeed’s recruitment process; and
Complying with applicable laws, regulations, legal processes or enforceable governmental requests.

If we ask you to provide any other Personal Data not described above, we will make it clear to you at the time of collection why we are collecting the Personal Data and what it will be used for.

Sources of collection

We may obtain Personal Data from the following sources:

From you directly;
From someone who refers you to us for a role;
From publicly available sources that we believe are relevant to your application or a potential future application (e.g. your LinkedIn profile);
From recruiters;
From your references and previous employers; and
From background checks (where applicable).

Lawful grounds for processing

Depending on the processing activity, we process your Personal Data on the following grounds:

In order to comply with our obligations under an agreement we concluded with you;
Where you have freely given your explicit consent and this consent has not been revoked;
Where we are pursuing a legitimate interest, which is not outweighed by your fundamental rights or freedoms;
Pursuant to a legal obligation; or
In very exceptional cases to protect your vital interests.

Sharing your Personal Data with others

As necessary for the processing purposes described above, Lightspeed may share Personal Data as follows:

Service providers on our behalf. We share Personal Data with third-party service providers to process under our instructions. These service providers may carry out instructions related to recruitment, workforce administration, IT system support and maintenance, training, compliance, and other activities, and are subject to contractual obligations to process the personal information only as instructed.

To facilitate the recruitment process. We share Personal Data to facilitate the recruitment process, such as with third parties with your consent (e.g. references you provide us).

As legally required. We may share Personal Data with a third party (e.g. regulators, courts, law enforcement agencies) if we believe that it is required or permitted under applicable law, including to meet law enforcement requirements, to protect Lightspeed, or to respond to a valid court order, subpoena, discovery request, search warrant, or other law enforcement request.

We do not sell your Personal Data

Lightspeed does not sell or share Personal Data as those terms are defined under California privacy laws.

How long we store Personal Data

We will keep your Personal Data for as long as is needed to carry out the purposes we’ve described above, or as otherwise required by law.

If you are offered and accept a role at Lightspeed, we will retain your Personal Data in order to manage your employment or contract with us, and we will surface a separate privacy notice that will apply to your relationship with Lightspeed.

If your application is not successful (or you withdraw or decline our offer), we will retain your Personal Data for a period after your application. We retain this information for various reasons, including in case we face a legal challenge in respect of a recruitment decision, to consider you for other current or future jobs at Lightspeed and to help us better understand, analyze and improve our recruitment processes.

Location of Personal Data

Lightspeed is a Canadian company, but we have affiliate companies and use service providers located across the globe. As such, your Personal Data may be transferred to and stored on servers located in a country other than where you reside. Personal Data may be subject to the local laws of the jurisdictions within which it is collected, used, disclosed and/or stored, and may be accessed by governmental authorities and law enforcement agencies in those jurisdictions. When the data concerns Personal Data of data subjects from the EEA, Switzerland or the UK, we transfer it outside of Europe in accordance with European laws.

Your rights in relation to your Personal Data

You have various rights with respect to the Personal Data we collect about you. You may have the right to request access to, correct, amend, delete, restrict or object to certain uses of your Personal Data. You may submit your data subject request to us by emailing [email protected] or call 866-932-1801 (toll-free). We will respond to your request as soon as possible, and in any case no later than four weeks after receiving your request.

How to contact us

If you have any other questions or complaints about the processing of your Personal Data, we will be happy to address these. You can email us at [email protected] or send a letter to the attention of the Legal Department at either of the following addresses:

If you are located outside the European Economic Area, Switzerland and the United Kingdom

Lightspeed Commerce Inc.
700 Saint-Antoine St. E., Suite 300
Montréal (Québec)
H2Y 1A6, Canada

If you are located inside the European Economic Area, Switzerland or the United Kingdom

Lightspeed Netherlands B.V.
Haarlemmerweg 331 A
1051 LH Amsterdam
The Netherlands

Data Protection Authority

Besides the option of lodging a complaint with us, you have the right to lodge a complaint with the relevant privacy commissioner or other supervisory authority for the protection of Personal Data. To do so, contact the relevant supervisory authority directly.