How we handle your personal data, and the research data you send us.
Lyriat Ltd is the data controller for the contact details and correspondence of people who get in touch with us and, in most cases, a processor for personal data contained in datasets clients send for analysis. We use your information only to respond to you and to deliver the work you ask for, and we never sell it.
Data controller
Who we are
Details
Data controller
Lyriat Ltd, trading as Lyriat Analytics
Company number
13951728, registered in England
Address
27 Old Gloucester Street, London WC1N 3AX, United Kingdom
Contact for data matters
d.schneider@lyriat.com
Categories of data
What we collect
What
When
Why
Name and email address
When you get in touch or order
To reply and to deliver the service
Phone number and messages
If you call us or message us on WhatsApp
To reply, and to arrange and hold a call back
Organisation and role
If you provide it
To invoice and to scope the work
Project details
In your enquiry
To quote accurately and carry out the work
Files and datasets you send
When you share them
Solely to perform the work you asked for
Correspondence
Throughout
To keep a record of what was agreed and delivered
Invoicing and payment records
When you pay
To meet our accounting and tax obligations
UK GDPR Article 6
Our lawful bases
✓Performance of a contract — delivering a service you have ordered
✓Legitimate interests — responding to enquiries, keeping business records and securing the website
✓Legal obligation — retaining invoices and tax records
✓Consent — where you have specifically agreed to something, which you may withdraw at any time
Where we process personal data contained in a dataset you send us, we do so as your processor and on your documented instructions. You remain the controller for that data, and your own lawful basis and participant consent govern it.
Sharing
Who has access
Data you send is accessed only by the people working on your project. We do not sell data, and we do not share it for marketing.
Recipient
What they receive
Why
Our email and file-storage providers
Correspondence and files at rest
To receive and store what you send us
WhatsApp (Meta Platforms)
Your phone number, profile details and information about your messages; message content is end-to-end encrypted
If you contact us on WhatsApp. WhatsApp's own privacy policy also applies
Our website hosting provider
Technical data such as IP addresses in server logs
To serve and secure the website
Our accountants
Invoices and payment records
Statutory accounts
Retention
How long we keep it
✓Research data and files — kept for the duration of the project and a short agreed period afterwards, then deleted. Deleted sooner on request
✓Correspondence, including WhatsApp messages — retained while there is a live working relationship and for a reasonable period after
✓Invoices and financial records — six years, as UK tax law requires
How data is protected
Security
✓Access limited to the people working on your project
✓Transfer by your preferred secure method — we are happy to use your platform rather than requiring ours
✓NDAs and data processing agreements signed before transfer where you require them
✓This website has no forms or upload tools, so nothing you send us is stored on the website
✓Please do not send datasets or sensitive information by WhatsApp or text message; we will arrange a secure transfer instead
This website
Cookies
This website does not use analytics, advertising or tracking cookies. If that changes, we will update this policy and ask for your consent where the law requires it.
UK GDPR
Your rights
You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where that is our basis. Email d.schneider@lyriat.com and we will respond within one month.
If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you raised it with us first, but you are not required to.
Outside the UK
International transfers
Research data you send us is not transferred outside the UK unless you specifically agree to it. Where one of our service providers processes data outside the UK, we rely on the safeguards UK GDPR requires, such as adequacy regulations or the International Data Transfer Agreement.
Common questions
Answers before you ask
Are you a data controller or a processor?+
Both, depending on the data. We are the controller for your contact details and correspondence. For personal data inside a dataset you send us for analysis, we act as your processor on your instructions — you remain the controller.
Will you sign a data processing agreement?+
Yes. Tell us when you get in touch and we will complete your DPA, NDA or information governance schedule before any data is transferred.
How do I ask for my data to be deleted?+
Email d.schneider@lyriat.com. We will delete project data on request, subject only to invoices and financial records we are legally required to keep for six years.