Legal
Data Processing Terms
Last updated: 6 October 2026
The proposed controller–processor terms for seller buyer records, with the provider schedule required before production.
1. Parties and status
These terms supplement the Terms of Service for a seller acting as PIC and lyv acting as PIP. They are proposed terms for review until the operator’s identity, production provider schedule and acceptance process are finalized. A preview does not establish that a signed outsourcing agreement is already in place.
2. Documented instructions and scope
The seller instructs lyv to collect authorized live-comment data, match claims, manage seller-specific orders and buyer lists, generate payment requests and record payment submissions. Data subjects are sellers’ buyers and commenters. Data includes identifiers, names, comment content, contact and delivery details, orders, list entries and payment references/proofs. Processing continues during the service and any necessary, agreed return or deletion period.
Use outside these instructions requires a separate lawful basis and agreement or applicable law. lyv must flag an apparently unlawful instruction and disclose any legally compelled processing where permitted. The seller remains responsible for lawful instructions, buyer transparency and authorization.
3. Processor obligations
- Restrict access to authorized personnel bound by confidentiality and implement appropriate organizational, physical and technical safeguards.
- Assist the seller with rights requests, correction, privacy impact assessments, security inquiries and applicable regulator obligations.
- Notify the seller promptly of a personal-data incident and provide available facts, affected records, impact and mitigation. The PIC determines and fulfills statutory notifications with processor assistance.
- Provide information reasonably needed to assess compliance and facilitate proportionate reviews while protecting other customers’ data.
- On termination, return or delete data as lawfully instructed, account for files and backups, and identify any legal retention exception and restricted retention period.
4. Providers and international processing
Subcontracting requires documented seller authorization and equivalent confidentiality, security and processing obligations. The operator must give advance information about provider changes and a reasonable opportunity to raise an objection before transfer. lyv remains accountable for its processor obligations.
| Recipient or service | Role and location | Review status |
|---|---|---|
| Meta / Facebook | External platform for identity, Page access and messaging; processing may occur internationally under Meta’s terms | Confirm contracting entity and applicable transfer terms; not represented as lyv’s hosting subprocessor |
| Hosting, database, file storage and backup providers | Provider legal names, services and countries not yet supplied | Must be completed and approved before real data processing |
| Support, email and logging providers | Provider legal names, services and countries not yet supplied | Must be completed, or marked unused with evidence |
For international processing, confirm appropriate safeguards, vendor security, assistance and enforceable duties before transfer.
5. Contacts and priority
Privacy and processor inquiries: privacy@lyv.ph. Applicable Philippine law and mandatory rights take priority. A separately executed agreement may add safeguards but cannot remove non-waivable duties. These terms concern outsourcing, not unrestricted sharing between independent controllers.