At LIVIS, protecting people's privacy is fundamental to how we work.

LIVIS helps organisations better understand the behaviour patterns shaping leadership, communication, trust and decision-making through the responsible analysis of real organisational interactions.

Privacy, transparency and responsible data handling are designed into every engagement. This Privacy Notice explains what personal data we process, why we process it, how we protect it and the rights available to you.

Who We Are

LIVIS Analytics ("LIVIS", "we", "our" or "us") provides Behaviour Intelligence services to organisations.

Depending on the nature of the engagement, LIVIS may act as either:

• Data Controller where LIVIS determines the purposes and means of processing.

  Data Processor where LIVIS processes personal data on behalf of a client organisation, consultancy or delivery partner.

Where LIVIS acts as a Data Processor, the client organisation remains responsible for determining the purpose and lawful basis for processing. The applicable role will be explained before any processing begins.

What Personal Data We Process

Depending on the engagement, we may process:

• Transcripts or recordings of meetings, interviews or organisational conversations.

• Behavioural indicators and patterns identified from those interactions.

• Limited participant information required to deliver the service, such as names, email addresses or job roles.

• Technical information necessary to operate the platform securely, including audit and system logs.

LIVIS is designed to understand behavioural patterns rather than the subject matter of conversations.

Why We Process Personal Data

We process personal data to:

• Analyse behavioural patterns that influence organisational performance.

• Produce Behaviour Intelligence reports and agreed client deliverables.

• Improve the quality, consistency and security of our services.

• Meet our legal, contractual and regulatory obligations.

We only process the minimum personal data necessary to deliver the agreed engagement.

Our Lawful Basis

The lawful basis for processing depends on the type of engagement.

For organisational engagements, processing will normally be based on the client organisation's Legitimate Interests or another lawful basis identified by the client.

Where consent is the lawful basis for processing, it will be obtained before analysis begins and may be withdrawn at any time.

The lawful basis applicable to your participation will be communicated before any analysis takes place.

How We Protect Personal Data

Protecting personal data is central to the design of LIVIS.

Our security measures include:

• Secure processing within Amazon Web Services (AWS) infrastructure using Amazon Bedrock.

• Encryption of data both in transit and at rest.

• AI models operating within secure environments where customer data is not used to train public AI models.

• Access controls that limit personal data to authorised personnel.

• Human oversight of Behaviour Intelligence outputs.

• Anonymisation or redaction where appropriate.

• Security monitoring, logging and governance controls.

How Behaviour Intelligence Is Shared

LIVIS is designed to provide organisational insight responsibly.

Depending on the agreed engagement:

• Organisations may receive aggregated Behaviour Intelligence and behavioural trend analysis.

• Teams may receive anonymised themes and behavioural insights.

• Where an engagement includes individual-level insight, this will only be provided with the appropriate lawful basis, governance arrangements and transparency measures in place.

We do not sell personal data or share identifiable information with third parties except where necessary to deliver the agreed service or where required by law.

Who We Share Data With

Where necessary, personal data may be shared with:

• The client organisation commissioning the engagement.

• Approved technology providers supporting the secure delivery of LIVIS services.

• Professional advisers where required.

• Regulatory or legal authorities where we are legally required to do so.

All third parties are subject to appropriate contractual and security safeguards.

International Transfers

Where personal data is transferred outside the United Kingdom, appropriate safeguards will be implemented in accordance with UK GDPR requirements.

How Long We Keep Personal Data

We retain personal data only for as long as necessary to deliver the agreed services and meet our legal or contractual obligations.

Retention periods are governed by the LIVIS Data Retention Schedule.

When personal data is no longer required, it is securely deleted or anonymised.

Your Rights

Depending on the circumstances, you have the right to:

• Request access to your personal data.

• Request correction of inaccurate information.

• Request erasure of personal data where applicable.

• Request restriction of processing.

• Object to processing where applicable.

• Withdraw consent where consent is the lawful basis for processing.

• Request a copy of your personal data where this right applies.

To exercise any of these rights, please contact us using the details below.

Complaints

If you have concerns about how your personal data has been handled, we encourage you to contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Contact Us

If you have any questions about this Privacy Notice or how LIVIS processes personal data, please contact:

Email: support@livis-analytics.co.uk

This Privacy Notice forms part of the LIVIS Trust by Design Framework and is supported by our governance processes, contractual safeguards, security controls and human oversight.