Snow-covered Alpine peaks above Val d'Isère under a clear blue sky
Lyriat Analytics

Privacy policy

Contact

Last updated 19 October 2026

Privacy policy

How we handle your personal data, and the research data you send us.

Lyriat Ltd is the data controller for the contact details and correspondence of people who get in touch with us and, in most cases, a processor for personal data contained in datasets clients send for analysis. We use your information only to respond to you and to deliver the work you ask for, and we never sell it.

Data controller

Who we are

Details
Data controllerLyriat Ltd, trading as Lyriat Analytics
Company number13951728, registered in England
Address27 Old Gloucester Street, London WC1N 3AX, United Kingdom
Contact for data mattersd.schneider@lyriat.com

Categories of data

What we collect

WhatWhenWhy
Name and email addressWhen you get in touch or orderTo reply and to deliver the service
Phone number and messagesIf you call us or message us on WhatsAppTo reply, and to arrange and hold a call back
Organisation and roleIf you provide itTo invoice and to scope the work
Project detailsIn your enquiryTo quote accurately and carry out the work
Files and datasets you sendWhen you share themSolely to perform the work you asked for
CorrespondenceThroughoutTo keep a record of what was agreed and delivered
Invoicing and payment recordsWhen you payTo meet our accounting and tax obligations

UK GDPR Article 6

Our lawful bases

  • Performance of a contract — delivering a service you have ordered
  • Legitimate interests — responding to enquiries, keeping business records and securing the website
  • Legal obligation — retaining invoices and tax records
  • Consent — where you have specifically agreed to something, which you may withdraw at any time

Where we process personal data contained in a dataset you send us, we do so as your processor and on your documented instructions. You remain the controller for that data, and your own lawful basis and participant consent govern it.

Sharing

Who has access

Data you send is accessed only by the people working on your project. We do not sell data, and we do not share it for marketing.

RecipientWhat they receiveWhy
Our email and file-storage providersCorrespondence and files at restTo receive and store what you send us
WhatsApp (Meta Platforms)Your phone number, profile details and information about your messages; message content is end-to-end encryptedIf you contact us on WhatsApp. WhatsApp's own privacy policy also applies
Our website hosting providerTechnical data such as IP addresses in server logsTo serve and secure the website
Our accountantsInvoices and payment recordsStatutory accounts

Retention

How long we keep it

  • Research data and files — kept for the duration of the project and a short agreed period afterwards, then deleted. Deleted sooner on request
  • Correspondence, including WhatsApp messages — retained while there is a live working relationship and for a reasonable period after
  • Invoices and financial records — six years, as UK tax law requires

How data is protected

Security

  • Access limited to the people working on your project
  • Transfer by your preferred secure method — we are happy to use your platform rather than requiring ours
  • NDAs and data processing agreements signed before transfer where you require them
  • This website has no forms or upload tools, so nothing you send us is stored on the website
  • Please do not send datasets or sensitive information by WhatsApp or text message; we will arrange a secure transfer instead

This website

Cookies

This website does not use analytics, advertising or tracking cookies. If that changes, we will update this policy and ask for your consent where the law requires it.

UK GDPR

Your rights

You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where that is our basis. Email d.schneider@lyriat.com and we will respond within one month.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you raised it with us first, but you are not required to.

Outside the UK

International transfers

Research data you send us is not transferred outside the UK unless you specifically agree to it. Where one of our service providers processes data outside the UK, we rely on the safeguards UK GDPR requires, such as adequacy regulations or the International Data Transfer Agreement.

Common questions

Answers before you ask

Are you a data controller or a processor?

Both, depending on the data. We are the controller for your contact details and correspondence. For personal data inside a dataset you send us for analysis, we act as your processor on your instructions — you remain the controller.

Will you sign a data processing agreement?

Yes. Tell us when you get in touch and we will complete your DPA, NDA or information governance schedule before any data is transferred.

How do I ask for my data to be deleted?

Email d.schneider@lyriat.com. We will delete project data on request, subject only to invoices and financial records we are legally required to keep for six years.