Last updated: 29 September 2026
These PriView Platform Terms (the “Terms”) are a legal agreement between PRIVIEW LIMITED, a company incorporated in England and Wales with company number 16566134 and registered office at 1 Lyric Square, London W6 0NB (“PriView”, “we”, “us” or “our”), and the person or organisation that accepts these Terms through PriView’s Self Serve signup or account-access process (“Customer”, “you” or “your”).
These Terms govern the Self Serve Services, including any free Trial and any paid Self Serve subscription. You become bound by these Terms when you expressly accept them through PriView’s Self Serve signup or account-access process. You may not access or use the Self Serve Services unless you have accepted these Terms.
If you accept these Terms on behalf of a company, family office, trust, partnership, fund, institution or other organisation, you confirm that you have authority to bind that organisation. If you use PriView for investments you manage personally, you contract with PriView in your own name.
Our Privacy Policy explains how we handle personal data in connection with the website and Services, including the circumstances in which PriView acts as controller or processor, and is available at priview.com/privacy-policy. It is separate from these Terms.
Managed and separately contracted customers. These Terms do not govern Services provided under a separate Data Sharing Agreement, Order Form, services agreement or other written agreement between PriView and a customer, except to the extent that agreement expressly incorporates these Terms. Services provided under such an agreement are governed by that agreement.
Important information about Self Serve. Participation in PriView’s Collective Data Programme is a standard and mandatory part of the Self Serve Services, including during a Trial. PriView uses contributed data to create anonymised and aggregated benchmarks and analytics subject to the protections in clause 8 and Schedule 1.
1.1 In these Terms:
2.1 You must be at least 18 years old and legally capable of entering into these Terms to use the Services.
2.2 If Customer is an organisation, the individual accepting these Terms represents and warrants that they have authority to enter into these Terms on Customer’s behalf. Customer is responsible for its Authorised Users and their use of the Services.
2.3 If Customer is an individual using PriView to manage or analyse investments held personally, Customer enters into these Terms directly. Nothing in these Terms removes or limits any statutory right available to a Consumer Customer that cannot lawfully be excluded or restricted.
2.4 Electronic acceptance of these Terms through PriView’s Self Serve signup or account-access process has the same effect as signing a written agreement. PriView may retain records of acceptance, including the version accepted, timestamp, account identity and relevant technical records.
3.1 PriView grants Customer, for the term of these Terms, a limited, non-exclusive, non-transferable right to access and use the Services for Customer’s own investment-management, portfolio-monitoring, research and related internal or personal purposes, subject to these Terms and any applicable plan limits.
3.2 PriView may make some or all Services available on a Trial basis. A Trial may be limited by time, number or type of documents, portfolio size, storage, functionality, usage or other limits displayed in the Platform or communicated to Customer.
3.3 A Trial is governed by these Terms from the moment Customer expressly accepts them through PriView’s Self Serve signup or account-access process, including before any payment is made.
3.4 Unless Customer actively purchases a paid subscription, PriView will not charge Customer merely because a Trial expires. At the end of a Trial, PriView may restrict or disable access to some or all Services until Customer selects an available paid plan or other eligible plan.
3.5 PriView may change Trial limits, eligibility or availability, or withdraw a Trial, provided that doing so does not affect rights that have already accrued and is subject to applicable law.
3.6 PriView may add, remove or change features as the Platform develops and does not guarantee that any particular feature, integration, data source or functionality will remain available indefinitely. Material changes that adversely affect Customer’s rights or obligations are subject to clause 19.
4.1 Customer must provide accurate account information and keep it reasonably current.
4.2 Customer and each Authorised User must keep login credentials secure, use the Services only through authorised access methods and promptly notify PriView of any suspected unauthorised access.
4.3 Customer is responsible for activity carried out through its Account to the extent caused by Customer or its Authorised Users, except to the extent the activity results from PriView’s breach of these Terms or failure to use reasonable care.
4.4 Customer may not share credentials between individuals where the applicable plan requires named-user access, circumvent usage limits, or permit access by a person whose access has been suspended or terminated.
5.1 If Customer chooses a paid subscription, the applicable plan, price, billing frequency, included usage, renewal terms and any other material commercial terms will be shown at checkout or set out in a Customer Agreement. Those terms form part of these Terms for that subscription.
5.2 Customer authorises PriView and its payment service providers to collect amounts due in accordance with the payment method and billing arrangements selected by Customer. PriView may use third-party payment processors and may not itself receive or store full payment-card details.
5.3 Unless otherwise stated at checkout or in a Customer Agreement, recurring subscriptions continue for successive billing periods until cancelled. Cancellation takes effect at the end of the then-current paid billing period unless applicable law or the applicable checkout terms provide otherwise.
5.4 If payment is overdue or fails, PriView may retry payment, contact Customer and, after reasonable notice where appropriate, restrict or suspend access to paid features until payment is received.
5.5 Prices and taxes will be presented as required by applicable law. Customer is responsible for taxes properly payable by Customer in connection with the Services, except taxes based on PriView’s income.
5.6 PriView may change prices for future billing periods by giving reasonable advance notice. If Customer does not agree to a price change, Customer may cancel before the new price takes effect.
5.7 Consumer Customers may have statutory rights relating to pre-contract information, cancellation, refunds and recurring subscriptions. PriView will provide any additional information or cancellation mechanism required by applicable consumer law at or before checkout. Nothing in these Terms limits those statutory rights.
6.1 As between the parties, Customer retains all rights and interests it has in Customer Data. No ownership of Customer Data is transferred to PriView except for the limited rights expressly granted in these Terms.
6.2 Customer grants PriView, for the term of these Terms and thereafter only to the extent Customer Data is lawfully retained under clause 17, a non-exclusive, worldwide, royalty-free licence, with the right to sublicense solely to PriView’s permitted subprocessors and service providers as reasonably necessary to receive, host, copy, store, extract, organise, classify, normalise, enrich, analyse, display, transmit and otherwise process Customer Data as reasonably necessary to:
PriView’s rights in effectively anonymised Collective Data following deletion or termination are governed by clause 8.7.
6.3 Customer represents and warrants that it has all rights, permissions and lawful bases necessary to provide Customer Data to PriView and to authorise PriView to process and use Customer Data as contemplated by these Terms, including for participation in the Collective Data Programme.
6.4 Customer must not upload or otherwise provide Customer Data where doing so, or PriView’s permitted use of it under these Terms, would breach applicable law, a binding contractual restriction, a duty of confidentiality or a third party’s rights.
6.5 Customer is responsible for obtaining any notices, permissions or consents that Customer is legally required to provide or obtain in relation to personal data or confidential information contained in Customer Data.
6.6 Special-category personal data and criminal-offence data are not intended to be provided through the Services unless expressly agreed with PriView in writing and lawfully provided.
6.7 For Business Customers only, Customer shall indemnify PriView against losses, liabilities, damages, costs and reasonable legal fees arising from a third-party claim to the extent caused by Customer’s material breach of clauses 6.3 to 6.6 or unlawful use of the Services. This clause does not apply to Consumer Customers.
7.1 PriView uses automated systems, including artificial intelligence and machine-learning tools, to extract, classify, map, match, normalise, enrich, summarise, calculate and analyse Customer Data and Third-Party Data.
7.2 Automated processing can produce errors. Outputs may contain omissions, incorrect classifications, mismatched entities, duplicate records, inaccurate calculations, stale information or other inaccuracies, including where source documents are incomplete, inconsistent or difficult to interpret.
7.3 Customer is responsible for reviewing information presented through the Platform and should compare material information against the underlying source documents or other authoritative sources before relying on it. The Platform may provide tools that allow Customer to correct, override or supplement extracted or processed information.
7.4 PriView is not required to manually review, reconcile or independently verify Customer Data, Third-Party Data or outputs for Self Serve Services unless PriView expressly agrees to do so. Any support, review or correction PriView voluntarily provides does not create an ongoing obligation to provide manual verification.
7.5 Corrections, overrides and supplementary information submitted by Customer form part of Customer Data and may be used by PriView in accordance with these Terms, including for the Collective Data Programme after anonymisation in accordance with Schedule 1.
7.6 PriView may use approved enterprise AI services and other subprocessors to provide the Services. PriView will not use Customer Data to train public or general-purpose AI models, and will require relevant providers to process Customer Data under controlled service arrangements consistent with applicable data-protection requirements.
8.1 Participation in the Collective Data Programme is a standard and mandatory condition of the Self Serve Services, including during a Trial. By accepting these Terms, Customer authorises PriView to use Customer Data to produce Collective Data and Collective Outputs in accordance with this clause 8 and Schedule 1. Customer cannot opt out of Collective Participation while using the Self Serve Services.
8.2 Clause 8.1 applies to Self Serve Services. Participation in the Collective Data Programme by a managed, enterprise or other separately contracted customer is governed by that customer’s applicable Customer Agreement.
8.3 PriView shall not produce, display or disclose a Collective Output that:
8.4 Collective Outputs may incorporate information already provided by the viewing Customer and display that information to that Customer, provided no other contributor or source is identifiable.
8.5 PriView will produce Collective Data in accordance with the Anonymisation Standards in Schedule 1 and will not display or disclose a Collective Output unless the applicable minimum aggregation threshold and other disclosure controls are met.
8.6 PriView may use and commercialise Collective Data and Collective Outputs, including through benchmarks, comparative analytics, market intelligence, paid services, reports and product features, provided that such use complies with this clause 8 and Schedule 1.
8.7 Once Customer Data has been effectively anonymised and incorporated into Collective Data so that no Customer, fund, general partner, individual or underlying source is identifiable by means reasonably likely to be used, that Collective Data no longer constitutes Customer Data in its original form and is not subject to Customer Data deletion or ownership provisions. PriView may retain and use such Collective Data after termination.
8.8 PriView will not attempt to re-identify any Customer, fund, general partner, individual or underlying source from Collective Data or Collective Outputs.
8.9 Upon reasonable written request, not more than once in any 12-month period, PriView will provide Customer with a written summary of its compliance with the Anonymisation Standards and the output limitations in this clause 8.
8.10 To the extent production of Collective Data involves processing personal data before effective anonymisation and PriView determines the purposes and means of that processing, PriView acts as an independent controller. PriView ordinarily relies on its legitimate interests in developing and providing anonymised benchmarking, comparative analytics and market intelligence, or another lawful basis where applicable. Collective Data is intended to be effectively anonymised and therefore not personal data.
9.1 Each party shall keep confidential all non-public information disclosed by or on behalf of the other party that is identified as confidential or would reasonably be understood to be confidential (“Confidential Information”). Customer Data is Customer’s Confidential Information. PriView’s non-public technology, methodologies, security information, Collective Data and non-public Collective Outputs are PriView’s Confidential Information.
9.2 Each party may use the other party’s Confidential Information only as permitted by these Terms and may disclose it only to personnel, contractors, professional advisers and permitted subprocessors who need to know it and are subject to appropriate confidentiality obligations.
9.3 PriView shall maintain appropriate technical and organisational measures proportionate to the risk and designed with reference to recognised information-security practices, including the measures described in Schedule 2.
9.4 The confidentiality obligations in this clause do not apply to information that the receiving party can demonstrate:
10.1 Each party shall comply with applicable data-protection law, including the UK GDPR and Data Protection Act 2018 where applicable.
10.2 Where PriView processes personal data contained in Customer Data on behalf of an organisational Customer acting as controller, PriView acts as processor and the data-processing terms in Schedule 2 apply.
10.3 Depending on the relevant processing activity and applicable law, PriView may act as controller in relation to personal data processed in connection with an individual Customer using PriView on their own behalf.
10.4 PriView acts as controller where it determines the purposes and means of processing personal data for its own account administration, billing, security, legal, service-management and similar business purposes. PriView’s Privacy Policy provides further information about that processing.
10.5 Clause 8.10 governs PriView’s role in relation to personal data processed for the Collective Data Programme before effective anonymisation.
10.6 Where a Customer Agreement contains data-protection or processing terms that conflict with this clause or Schedule 2, the Customer Agreement prevails to the extent of that conflict.
11.1 The Services may incorporate, link to or display Third-Party Data and may interoperate with third-party services. PriView does not control all such sources and does not warrant that Third-Party Data is complete, accurate, current or suitable for any particular purpose.
11.2 Third-Party Data may be subject to third-party intellectual-property rights, licence terms, usage restrictions or attribution requirements. Customer must comply with any restrictions clearly communicated through the Services or otherwise notified to Customer.
11.3 PriView is not responsible for third-party websites, applications or services that Customer chooses to access, connect or use, except to the extent PriView is legally responsible for its own selection or management of a subprocessor under Schedule 2.
12.1 Customer and Authorised Users must use the Services lawfully and must not:
12.2 PriView may investigate suspected misuse and may restrict or suspend access where reasonably necessary to protect customers, the Services, PriView or third parties, comply with law or address a material breach of these Terms.
13.1 PriView and its licensors retain all rights in the Platform, software, user interfaces, documentation, methodologies, models, taxonomies, workflows, algorithms, product designs, Collective Data and Collective Outputs, except for Customer’s rights in Customer Data and any third-party rights.
13.2 Subject to these Terms and any applicable third-party restrictions, Customer may use reports, dashboards, analyses and other outputs generated for Customer through the Services for Customer’s own personal, internal investment, reporting and decision-support purposes.
13.3 Customer may export or share outputs where the Platform provides that functionality, but may not represent PriView-generated information as independently verified by PriView or remove proprietary notices where doing so would be misleading or unlawful.
13.4 If Customer provides product feedback, suggestions or feature requests, Customer grants PriView a worldwide, perpetual, irrevocable, royalty-free right to use and incorporate that feedback without restriction or obligation, provided PriView does not disclose Customer’s Confidential Information in doing so.
14.1 The Services provide information-management, data-processing and analytical tools. PriView does not provide investment, financial, legal, tax, accounting or other professional advice through the Services unless expressly agreed in a Customer Agreement.
14.2 Nothing in the Services constitutes a recommendation, solicitation or offer to acquire, dispose of or hold an investment, or a representation that any investment, manager, fund, valuation, benchmark or transaction is suitable for Customer.
14.3 Customer remains responsible for its own investment decisions, professional advice and verification of information before acting on it. PriView does not act as Customer’s fiduciary, investment manager, investment adviser, broker or agent merely by providing the Services.
15.1 PriView will provide the Services with reasonable care and skill. Nothing in these Terms excludes any warranty, condition or statutory right that cannot lawfully be excluded.
15.2 Subject to clause 15.1, PriView does not warrant uninterrupted or error-free operation, that all defects will be corrected, or that Customer Data, Third-Party Data or analytical outputs will be complete, accurate or current at all times.
15.3 The Services may occasionally be unavailable because of maintenance, upgrades, incidents, third-party outages or events outside PriView’s reasonable control. PriView will use reasonable efforts to maintain availability appropriate to the nature of the Services but does not provide a service-level commitment unless expressly agreed in a Customer Agreement.
16.1 PriView may temporarily suspend access to all or part of the Services where reasonably necessary because of:
16.2 Where practicable, PriView will give reasonable notice of a suspension and an opportunity to remedy the issue. PriView may suspend immediately where delay would create a material security, legal or operational risk.
17.1 These Terms begin when Customer expressly accepts them through PriView’s Self Serve signup or account-access process and continue until Customer’s Account is closed and any paid subscription has ended, unless terminated earlier under this clause.
17.2 Customer may stop using the Services and close its Account at any time, subject to the billing and cancellation terms applicable to any paid subscription and any statutory cancellation rights.
17.3 PriView may terminate these Terms or close an Account on reasonable notice, including where PriView discontinues the applicable Service. PriView may terminate immediately for a material breach that is incapable of remedy, or if a remediable material breach is not remedied within a reasonable period after notice.
17.4 When a Trial ends without a paid subscription, PriView may restrict access to the Account. PriView may subsequently treat an inactive Trial Account as closed after giving any notice required by law or reasonably appropriate in the circumstances.
17.5 Customer may request deletion of Customer Data at any time. Following account closure or a valid deletion request, PriView will delete relevant Customer Data from active systems within 30 days, except where retention is required by law, regulation, legal claims, fraud prevention, security, documented record-keeping obligations or another lawful basis.
17.6 Residual copies in protected backups may remain until they expire through PriView’s normal backup lifecycle. They will not be used for ordinary processing and, if restored, will be subject to the applicable deletion status.
17.7 Effectively anonymised Collective Data produced before deletion or termination is not subject to Customer Data deletion requirements once no Customer, fund, general partner, individual or underlying source is identifiable by means reasonably likely to be used, as described in clause 8.7.
17.8 PriView will confirm completion of Customer Data deletion on reasonable request.
17.9 Clauses which by their nature are intended to survive termination, including clause 5 in respect of amounts accrued before termination, and clauses 6, 7, 8, 9, 10, 11, 13, 14, 15, 17, 18, 20, 21 and 22 and the relevant Schedules, survive termination to the extent necessary to give them effect.
18.1 Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot lawfully be excluded or limited.
18.2 For Consumer Customers, PriView is responsible for loss or damage that is a foreseeable result of PriView’s breach of these Terms or failure to use reasonable care and skill, subject always to clause 18.1 and applicable consumer law. PriView is not responsible to a Consumer Customer for business losses, including loss of business, profits, revenue or business opportunity, arising from use of the Services for purposes outside the consumer context.
18.3 For Business Customers only, neither party is liable for indirect, special or consequential loss, or for loss of profit, revenue, goodwill, business opportunity or anticipated savings, arising out of or relating to these Terms, except to the extent such exclusion is prohibited by law. The exclusions in this clause 18.3 do not limit amounts payable by a Business Customer under the indemnity in clause 6.7.
18.4 For Business Customers only and subject to clauses 18.1 and 18.5, PriView’s total aggregate liability arising out of or in connection with these Terms, whether in contract, tort (including negligence), breach of statutory duty or otherwise, shall not exceed the greater of: (a) GBP 1,000; and (b) the total fees paid or payable by Customer for the Services in the 12 months preceding the first event giving rise to the liability.
18.5 For Business Customers only, PriView’s total aggregate liability for breach of clause 9 (Confidentiality) or clause 10 and Schedule 2 (Data Protection) shall not exceed the greater of: (a) GBP 10,000; and (b) two times the fees paid or payable by Customer for the Services in the 12 months preceding the first event giving rise to the liability.
18.6 The limitations in this clause reflect the nature and pricing of the Self Serve Services. A Customer Agreement may specify different liability limits for an enterprise engagement.
19.1 PriView may update these Terms from time to time where reasonably necessary to reflect changes to the Services or how they are provided, applicable law or regulation, security or privacy practices, third-party providers, or technical or operational requirements.
19.2 If PriView makes a material change that adversely affects Customer’s rights or obligations, PriView will give reasonable advance notice by email, in-product notice or another appropriate method unless the change is required urgently by law, regulation or security considerations.
19.3 Material changes will apply prospectively. If a material change adversely affects Customer’s rights or obligations, Customer may stop using the Services and close its Account before the change takes effect. A Customer with a paid subscription may also cancel the affected subscription before the change takes effect. PriView will provide any refund required by applicable law. Nothing in this clause limits any statutory rights of a Consumer Customer.
20.1 PriView may send operational, contractual, security and billing communications to the email address associated with Customer’s Account or through the Platform.
20.2 Formal notices to PriView under these Terms should be sent to contact@priview.com, unless PriView provides another notice address. Notices to Customer may be sent to the email address registered to the Account or an address specified in a Customer Agreement.
20.3 An email notice is treated as received when sent, provided the sender does not receive a delivery-failure notification, unless applicable law requires a different method or timing.
21.1 For Business Customers, these Terms and any non-contractual obligations arising out of or in connection with them are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.
21.2 For Consumer Customers, these Terms are governed by the laws of England and Wales, but Customer retains the benefit of any mandatory consumer protections of the country in which Customer is habitually resident. A Consumer Customer may bring proceedings in any court available to them under applicable consumer law.
21.3 Before commencing formal proceedings, each party should use reasonable efforts to resolve any dispute informally, without preventing either party from seeking urgent relief or exercising a statutory right.
22.1 These Terms, the Schedules and any applicable checkout terms constitute the agreement between PriView and Customer concerning the Self Serve Services.
22.2 Where a separate Customer Agreement expressly incorporates these Terms, that Customer Agreement prevails to the extent of any conflict and may vary or disapply provisions of these Terms, including Collective Participation where expressly stated.
22.3 Customer may not assign or transfer these Terms without PriView’s prior written consent, except that a Business Customer may assign them as part of a bona fide merger, reorganisation or sale of substantially all of its relevant business or assets on written notice. PriView may assign these Terms as part of a merger, reorganisation, financing or sale of its business, subject to applicable law and without reducing a Consumer Customer’s mandatory rights.
22.4 If any provision is found unenforceable, it shall be modified to the minimum extent necessary to make it enforceable where permitted, and the remaining provisions remain in effect.
22.5 A delay or failure to enforce a right does not waive that right.
22.6 Neither party is liable for delay or failure caused by events beyond its reasonable control, except that this does not excuse Customer’s obligation to pay amounts already due.
22.7 Nothing in these Terms creates a partnership, joint venture, fiduciary relationship, employment relationship or agency between the parties.
22.8 Headings are for convenience only and do not affect interpretation. References to “including” mean “including without limitation”.
22.9 Third-party rights. A person who is not a party to these Terms has no right under the Contracts (Rights of Third Parties) Act 1999 to enforce any provision of these Terms.
22.10 Non-reliance. For Business Customers only, Customer acknowledges that in entering into these Terms it has not relied on any statement, representation, assurance or warranty that is not expressly set out in these Terms or any Customer Agreement that expressly incorporates these Terms. Nothing in this clause limits or excludes liability for fraud or fraudulent misrepresentation.
PriView Limited
Company No. 16566134
Email: contact@priview.com
Address: 1 Lyric Square, London W6 0NB, United Kingdom
These Anonymisation Standards govern how PriView transforms Customer Data before incorporating it into Collective Data and using it in Collective Outputs.
1.1 PriView will remove, suppress or generalise information so that Collective Outputs do not identify a contributing Customer.
1.2 The identity of a contributing fund or general partner will be omitted or generalised where necessary so that it is not identifiable from a Collective Output.
1.3 Fund-level information will be grouped, generalised or suppressed where necessary to reduce identification risk.
1.4 Personal data will be removed from Collective Data and Collective Outputs where required to achieve effective anonymisation.
1.5 Information that, alone or in combination with information reasonably available to a recipient, would allow identification of a contributing Customer, fund, general partner, individual or underlying source will be removed, generalised or suppressed.
2.1 No Collective Output will be displayed or disclosed unless at least three independent contributors or comparison data sources, as appropriate, are included in the relevant output or comparison set.
2.2 The threshold of three is a minimum. PriView will apply a higher threshold and/or additional statistical disclosure controls where the nature of the data, sample or output creates a greater risk of identification or source inference.
3.1 PriView will apply controls appropriate to the relevant output, which may include aggregation, suppression, generalisation, thresholding, outlier controls, query restrictions, bucketing or statistical noise.
3.2 PriView will maintain technical and organisational controls designed to prevent re-identification or reverse engineering of a contributor’s identity or specific underlying Customer Data.
3.3 PriView will suppress, generalise or withhold an output that does not meet these Anonymisation Standards.
4.1 PriView will review these Anonymisation Standards at least annually and may update them to reflect legal, technical or statistical developments, provided the overall level of protection is not materially reduced.
This Schedule applies to the extent PriView processes personal data on behalf of Customer as a processor under applicable data-protection law.
1.1 Subject matter and duration. PriView processes personal data contained in Customer Data to provide the Services for the term of these Terms and until deletion or return in accordance with clause 17.
1.2 Nature and purpose. Processing may include receipt, hosting, storage, extraction, organisation, classification, normalisation, analysis, enrichment, support, backup, retrieval, display, transmission, correction and deletion as needed to provide the Services.
1.3 Types of personal data. Personal data may include names, business contact details, roles, signatures, identifiers, correspondence and personal or financial information incidentally contained in Customer Data.
1.4 Categories of data subjects. Data subjects may include Customer personnel and representatives, fund or general partner personnel, advisers, signatories, service-provider personnel and other individuals referred to in Customer Data.
1.5 Special-category and criminal-offence data are not intended to be processed except as described in clause 6.6 or otherwise agreed.
2.1 Documented instructions. PriView shall process personal data only on Customer’s documented instructions, including these Terms, Customer’s use and configuration of the Services, and other written instructions agreed by PriView, unless processing is required by law. PriView shall notify Customer where legally permitted if it is required by law to process personal data outside Customer’s instructions.
2.2 Unlawful instructions. PriView shall inform Customer if, in PriView’s reasonable opinion, an instruction infringes applicable data-protection law. PriView may suspend the affected processing while the parties address the issue.
2.3 Confidentiality. PriView shall ensure that persons authorised to process Customer personal data are subject to confidentiality obligations.
2.4 Security. PriView shall implement and maintain appropriate technical and organisational measures as described in section 4 of this Schedule, taking account of the nature, scope, context and purposes of processing and the risks to individuals.
2.5 Data subject rights. Taking account of the nature of the processing, PriView shall provide reasonable assistance to Customer through appropriate technical and organisational measures, insofar as possible, to enable Customer to respond to requests from data subjects exercising their rights.
2.6 Compliance assistance. Taking account of the nature of processing and information available to PriView, PriView shall reasonably assist Customer with applicable security obligations, personal-data-breach assessments and notifications, data-protection impact assessments and regulatory consultations.
2.7 Personal data breaches. PriView shall notify Customer without undue delay after becoming aware of a personal data breach affecting personal data processed by PriView on Customer’s behalf. PriView shall provide available information reasonably required for Customer to assess the breach and shall reasonably cooperate with Customer’s response.
2.8 Return and deletion. At the end of the Services, at Customer’s choice, PriView shall delete or return personal data processed on Customer’s behalf and delete existing copies, unless applicable law requires continued storage. Residual copies held in protected backups may expire through PriView’s normal backup lifecycle, provided they are not used for ordinary processing and remain appropriately protected. This obligation does not apply to information that has been effectively anonymised so that it no longer constitutes personal data.
2.9 Compliance information and audits. PriView shall make available information reasonably necessary to demonstrate compliance with this Schedule. Customer may request an audit or inspection where reasonably necessary to verify compliance. Except where required by law, a regulator or a material security incident, audits will normally be limited to once per 12 months, on reasonable prior notice, during normal business hours, subject to confidentiality, security and minimal-disruption requirements. PriView may first satisfy an audit request through current security documentation, certifications, third-party audit reports or written responses where reasonably sufficient. Customer shall bear its reasonable external audit costs unless the audit identifies a material breach by PriView.
3.1 General authorisation. Customer gives PriView general authorisation to engage subprocessors to process personal data in connection with the Services.
3.2 PriView shall maintain a current list of relevant subprocessors, available on request or through a location PriView publishes for that purpose.
3.3 PriView shall impose data-protection obligations on subprocessors that provide an appropriate level of protection for the processing they perform and shall remain responsible for their performance to the extent required by applicable law.
3.4 Where required by applicable law, PriView will inform Customer of intended additions or replacements of subprocessors and provide a reasonable opportunity to object on legitimate data-protection grounds. A subprocessor change does not require these Terms to be re-executed.
3.5 PriView may transfer personal data outside the United Kingdom or European Economic Area only in compliance with applicable data-protection law, including through adequacy regulations, approved contractual safeguards or another lawful transfer mechanism as applicable.
3.6 PriView may use approved enterprise AI services as subprocessors for document extraction, analytics and related functionality, subject to the protections in these Terms. PriView shall not instruct such providers to use Customer personal data to train public or general-purpose models.
4.1 PriView shall implement and maintain appropriate technical and organisational security measures, including, where applicable to the relevant systems and processing:
4.2 PriView may update its security measures as technology and risks evolve, provided the overall level of protection is not materially reduced.