Data Protection Statement

This Data Protection Statement applies to the collection, processing, maintenance and disclosure of all information gathered by Living Security and its affiliates as it works to serve its customers and data subjects via its Websites and offerings. Living Security’s responsibility and mission is to work alongside partner companies and allow them to choose how their data is managed, archived, retrieved and deleted. Great care is taken to identify only the required information necessary to operate our tools in the manner desired by our clients. This means we prioritize the secure collection of data, limited to only what is needed to provide the user with a better experience on our products. Living Security extensively documents security practices and policies to align with GDPR, NIST, PCI, COBIT and HIPAA, and strives to improve methods to outpace industry standards. Living Security tolerates only those justifications which enable them to communicate responsibly with company representatives, manage applications at scale, facilitate access to its Offerings, and provide quality customer service. It is unambiguous client consent which gives Living Security the ability to collect and process this information. It is a sense of duty and responsibility which gives Living Security the privilege to protect data like their own. 

DATA COLLECTION and USE 

Living Security Websites and Offerings 

Living Security Websites provide Internet based access for users to learn about Living Security and its Offerings and to communicate with Living Security and with others. When an individual uses our Websites and Web Portals, Living Security gathers information, some of which is personal information. Personal Information collected and used by Living Security may include, among other things, name, department, mailing address, email, job title, as well as data provided through API integrations setup by a user's employer. Further information includes, the Internet Protocol (IP) address, browser information, device ID, the type of computer and technical information about a user’s means of connection to our Websites or Web Portals, such as the operating system and the Internet service providers utilized and other similar information. Information collected is logically segregated and is only used for the services agreed upon and is not sold to any third parties.

We may also use cookies and other tracking technologies (such as scripts and tags) on our Websites and Web Portals. A cookie is a small text file that is stored on a user’s computer for record-keeping purposes. Cookies don’t read or modify data on the user’s computer. We use third party service providers to help us implement and utilize cookies and other tracking technologies to analyze the data they collect. In some cases, we link the information gathered by cookies and other tracking technologies to a user’s personal information. We use cookies, and other tracking technologies to help our Websites and Web Portals function properly, to collect information about how users interact and use our Websites and Web Portals, to personalize or customize the user’s experience (based on preferences or geography, for example) on our Websites and Web Portals, and to gather information about a user’s browsing habits. We may also use cookies, tracking technologies, and the data they collect to tailor our Websites, Web Portal, and communications so they are more relevant to a user’s interests. 

We and our third party partners use Local Storage (HTML5) to provide certain features on our Websites and Web Portals to store content information and preferences. Various web browsers may offer their own management tools for removing HTML5. 

If you opt-in to our mailing list online or in person, you will receive emails that may include company news, updates, related product or service information, and other Living Security related information. We may also associate any personal information you submit to us, including email addresses, with information collected about you through other means such as cookies or social media plugins. We include unsubscribe instructions at the bottom of each email if at any time you would like to unsubscribe from receiving future emails. 

We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout

Our websites use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Some webpages include a Google Custom Search box to enhance your experience. Any queries that you submit through the use of a Google Custom Search will be transmitted to Google. Google’s privacy policy is located at http://www.google.com/policies/privacy/partners 

Offerings

Living Security has numerous Offerings, including but not limited to security escape room experiences and a cloud-based software-as-a-service platform, Training. All of our Offerings are centered on our mission to reimagine security for people. 

Living Security’s mission is managing human risk - the greatest cyber security risk enterprises face - through immersive and intelligence-driven training solutions. Our science-based approach drives user engagement and reinforces positive security behaviors. We apply threat intelligence to train on the most relevant user-facing threats and deliver metrics that enable companies to measure the effectiveness of the program. 

The Living Security Teams is an immersive training experience that builds security awareness concepts into a fun team exercise. Not only will your employee's have a higher retention of the security principles immersed in the escape experience, they will also see your investment in the game as a reward, an opportunity to have some fun, learn some things about securing their lifestyle, and form a deeper positive relationship with you. We collect data related to the game participation and results and store them securely for customer security managers to access. We use Microsoft to perform this data processing and collection. Their privacy statement can be found here: https://privacy.microsoft.com/en-us/privacystatement

Teams, our online cloud-based Offering, uses highly-relevant security concepts to create immersive storylines accessible to real people while teaching valuable lessons in security, safety, and privacy online. Our role-based modules reinforce security concepts and take the pulse of your security culture. Your employees leave armed with valuable tools and techniques to combat the cyber threats of today and tomorrow. To accomplish this mission, we use Amazon Web Services and the Google suite. Amazon’s privacy statement can be found here: https://aws.amazon.com/privacy/ 

However, we only use the data that we collect through our offerings to help our customers and improve our capabilities to help them. Living Security also offers customers the ability to directly provide feedback to Living Security.

To the extent Living Security collects personal information through its Offerings, Living Security collects that information under the authority and direction of its customers, which often are corporate entities. Living Security typically has no direct relationship or contact with an individual whose personal information we may collect or receive from a corporate customer and subsequently analyze and use. Regardless, the use of information collected through our Offerings shall be limited to the purpose of providing the service for which our customers have engaged Living Security. We do not use any personal information collected through our Offerings to contact or market products or services to these individuals. We also do not provide any personal information obtained through the Offerings to third parties for the purpose of contacting or marketing products or services to these individuals. 

If you are a user of one of our Offerings, we will obtain the personal information you provide us during the sales and/or fulfillment process. We may use personal information collected such as name, phone number, mailing address, and email address to contact you and to provide you with Offerings, send you an invoice, perform accounting, auditing and collection activities, answer questions, provide support and tell you about other Offerings. 

If you are an individual who would no longer like to be contacted by one of our customers, please contact the customer that you interact with directly. An individual who seeks access, or who seeks to correct or delete personal information, should direct his/her query to the Living Security’s customer, the data controller. If our customers request Living Security to correct or delete the personal information, we will respond within a reasonable timeframe. 

We may transfer personal information to companies that help us provide our service. Transfers to subsequent third parties are covered by the service agreements with our customers. 

How We Protect Your Information

The security of customer data and your personal information is not only important to us, it is our mission. We adopt data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of customer data and your personal information. We follow industry best practices to protect customer data and the personal information collected and submitted to us, both during transmission and once we receive it. If you have questions about the security of your personal information collected through our Offerings or Websites, you can contact us at privacy@livingsecurity.com 

Retention of Personal Information 

We will retain your personal information for as long as needed to fulfill the purpose for which we collected it and for a reasonable period thereafter in order to comply with audit, contractual, or legal requirements. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We may retain aggregated or de-identified data indefinitely or to the extent allowed by applicable law. We may retain personal information preserved in automatically generated computer back up or archival copies generated in the ordinary course of our information technology systems procedures. 

User Access and Choice 

You may request Living Security provide you with information about whether we hold any of your personal information received or transferred from the EU and/or Switzerland in reliance on each Privacy Shield Framework. You may also request us to correct, update, amend, or remove your personal information that you know or have reason to believe is in our possession by emailing us at privacy@Livingsecurity.com or by contacting us by postal mail at the contact information listed below. This process for submitting a request applies to all and is not reserved solely for EU or Switzerland entities.

When contacting us, please provide us with detailed information about the personal information you are requesting we correct, update, amend, or remove, and the timeframe and manner in which you believe we came to collect it. We will respond to your request within a reasonable timeframe. If we obtained your personal information from a customer or third party acting on your behalf, you should contact the company or person you provided your information to. In certain circumstances, we may be required by law, our auditors, or other legitimate business purposes to keep information about you. 

Sharing Your Personal Information 

We do not sell, trade, or rent the personal information we collect from our Websites to others. We may share aggregated demographic information regarding visitors and users of our Websites with our affiliates, business partners, and advertisers for the purposes outlined above. When we collect personal information through our Offerings, it is made available to the Living Security customer who was the source of the information and we use it as described in the Privacy Notice. We may use third party service providers to help us operate our business; provide, support, maintain, or secure our Offerings and our Websites; or administer activities on our behalf, such as marketing campaigns. It may be necessary to provide or allow access to your personal information to these third party service providers for those purposes. In addition, we provide information regarding our business to our auditors and legal counsel and, in some cases, that information may contain personal information, but they may only use it for the purpose of providing their professional services. 

We may also disclose your personal information as required by law, such as to comply with a subpoena or similar legal process; or when we believe that disclosure is necessary or appropriate to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request. We may transfer any information we have about you in the event we sell or transfer all or a portion of our business or assets. 

Our Websites include links to other websites whose privacy practices may differ from those of Living Security. If you submit personal information to any of those sites or services, your information is governed by their privacy

notices. We encourage you to carefully read the privacy notice of any website service you visit. 

Our Websites include social media features. These features may collect your IP address, which webpage you are visiting on our Websites, and may set a cookie to enable the feature to function properly. Social media features are either hosted by a third party or hosted directly on our Websites. Your interactions with these features are governed by the privacy policy of the company providing it. 

This Privacy Notice does not pertain to personal information of Living Security employees. 

Changes to This Privacy Notice 

Living Security may update this Privacy Notice at any time to reflect changes to our information practices. If we make significant changes in how we use your personal information, we will notify you by email if feasible or by means of a notice on this Website. We encourage you to periodically review this page for the latest information on our privacy practices. 

Your Agreement to This Privacy Notice 

Except to the extent otherwise specified in a specific agreement with you, such as for specific products and services, the terms of this Notice shall govern. By using our Offerings and Websites, you are agreeing to our practices described in this Notice, which includes the collection and use of your personal information worldwide. 

Your continued use of our Offerings and Websites following the posting of changes to this Privacy Notice will be deemed your acceptance of those changes.

Contacting Us 

If you have any questions about this Privacy Notice or our privacy practices, please contact us at: 

LIVING SECURITY
9901 Brodie Lane
Suite 160 PMB1470
Austin, TX 78748
(512) 920-0422 
privacy@livingsecurity.com

# # # # # # # # # # # #