Lenovo Device Orchestration Privacy Statement

Lenovo Device Orchestration Privacy Statement

Lenovo recognizes that privacy is of great importance to individuals everywhere – our customers, website visitors, product users… everyone. This is why the responsible use and protection of personal and other information under our care is a core Lenovo value.

To learn more about our privacy practices, please click any of the links below.

This Privacy Statement for Lenovo Device Orchestration (LDO) describes: (i) how Lenovo collects, uses, stores or otherwise processes an individual's personal data in the context of the LDO applications; (ii) describes the data sharing relationship between LDO and Lakeside Software.

We want you to know that using Lenovo Device Orchestration will involve certain data processing activities of your personal data by Lenovo and its partners. In this Privacy Statement, “Lenovo”, "we" or "us" refers to Lenovo Group Ltd and its affiliated group companies. Lenovo will process your personal data as a data processor of the endpoint client that is the data controller of your personal information.

This Privacy Statement governs the relationship between you and Lenovo, and the specific personal data processing activities conducted in connection with Lenovo Device Orchestration. To learn more about how Lenovo handles your personal data, please visit the Lenovo Global Product Privacy Statement. Such privacy statement includes among other things, a description of your data protection rights and how you can exercise them, how we may share your personal information or how we protect personal data in our products.

What personal data does the Lenovo Device Orchestration application process?

Please be aware that personal data means any information which is related to an identified or identifiable natural person. When you use the product, data is collected by the Lenovo Device Orchestration endpoint client and summarized in your dedicated customer tenant hosted on one of our AWS and/or Azure data centers. Lenovo does not access or process such data unless providing customer support services. Categories of data can be summarized into: a) Status, health or performance data of the device(s) used or managed by you; b) Software usage data; c) non-precise location data and d) Device inventory. Please see the following table below for more detailed information.

Data type

Application Collect By

Legal basis

Purpose

•  Device ID

Lenovo Device Orchestration

•  Contract performance

•  Legitimate interest

•  To identify the managed device

•  Username

Lenovo Device Orchestration

•  Contract performance

•  Legitimate interest

•  Disabled/anonymized by default

•  To look up a device with username when user is contacting internal IT support.

•  Username necessary for looking up user sessions for root cause analysis and fixes

•  Device configuration

•  OS type

•  Device Type

•  App version

•  Crash event data

Lenovo Device Orchestration

•  Contract performance

•  Legitimate interest

•  Inventory and troubleshooting purposes

•  Status, health or performance data of devices

Lenovo Device Orchestration

•  Contract performance

•  Legitimate interest

•  App runs in system account context for system telemetry collection.

•  Proactively identify issues to be able to improve performance

•  Non-Specific geographic location

•  IP Address Logs

LDI+ Only

•  Contract performance

•  Legitimate interest

•  Geographical area used for operational triage of site-based issues.

•  Historical network data used to troubleshoot device issues.

•  App Usage information and Data

LDI+ Only

•  Contract performance

•  Legitimate interest

•  Application usage to be able to report usage or optimize licensing costs by identifying unused applications.

•  Specific URLs (SaaS app) are to be whitelisted

•  Web Browsing Histories

LDO DEX Only

•  Contract performance

•  Legitimate interest

•  Disabled by default.

•  Web application usage monitoring to optimize licensing costs by identifying web browser behaviors of users. Data collected includes website access date, page title, page load time in seconds, page focus time (time actively engaging with the website) in seconds, and the full URL of the visited sites are collected along with browser and browser version.

In order to process your personal information, when it is necessary, Lenovo may ask for your consent within Lenovo Device Orchestration for specific features. Where applicable, please make sure that you have obtained consent from the end user of the managed devices. The table below describes how you can grant and withdraw your consent to such specific consent items.

Please note that some features would not be available if you do not grant Lenovo Device Orchestration permission. Also, we want you to know that we will not sell nor share your data for marketing related purposes.


How do we share your personal data with Third Parties?

Lenovo Device Orchestration does not share you information with any third parties.

For those customers that have purchased Lenovo Device Intelligence+ (LDI+) and in order to provide LDI+  service within Lenovo Device Orchestration, we will share your information with Lakeside Software as our partner in delivering digital experience insights through LDI+. As part of Lenovo’s data processor arrangement with them, Lenovo requires that Lakeside Software maintains information security best practices, makes all reasonable efforts to secure your data and only processes your data for the purposes specified in this Privacy Statement or on a legitimate basis.

How long do we keep your personal data?

When we design a product, we focus on delivering the best user experience. In order to do so, we will process personal data for the purposes described in this Privacy Statement, but we will only retain your personal information as long as necessary to achieve proper performance of the product. In some cases, we may need to retain your personal data when it is required by law.

Please see below detailed information about the data retention schedule within the context of Lenovo Device Orchestration. Data retention will start the moment the event is logged on the device and will remain for the defined retention period.

Master & Child Items

Location

Retention Period

Device related events

Cloud

365 days

User related events

Cloud

365 days

Group related events

Cloud

365 days

Asset related events

Cloud

365 days

Application related events

Cloud

365 days

System-related events

Cloud

365 days

License related events

Cloud

730 days

Subscription related events

Cloud

730 days

Customer related events

Cloud

730 days

Order related events

Cloud

730 days

Application License related events

Cloud

730 days

Organization related events

Cloud

730 days

Device Insights Hardware Utilization

Cloud

Currently forever, soon 1yr


Changes to this Privacy Statement

Our mission is to be as transparent as possible.

We might update this Privacy Statement to let you know about any changes in the way the product, or Lenovo process your personal data and ask you if you are happy with those changes when necessary by law. We will let you know via in-app push notification or e-mail about such changes to make sure you are up to date.

Contact us

For any privacy related matters please contact the Lenovo Privacy Program at privacy@lenovo.com. We will get back to you as soon as possible.

    • Related Articles

    • Lenovo Device Orchestration Terms & Conditions

      These Lenovo Device Orchestration Terms and Conditions (referred to herein as the “Agreement”) outlines the general terms regarding the access and use of Lenovo Device Orchestration software delivered to you as a SaaS solution accessible via a remote ...

    • Lenovo Device Orchestration FAQ

      How do I create a Lenovo ID account? For instructions on creating a Lenovo ID account or signing in, please see the article Creating and Managing a Lenovo ID Account. Which devices are compatible with the Lenovo Device Orchestration solution? Lenovo ...

    • Lenovo Device Orchestration Requirements

      Lenovo Device Orchestration is a cloud-based solution, enabling customers to access detailed results without the need for infrastructure setup or upfront investment. Data collection is performed through lightweight agents. LDO requires devices to ...

    • Deploying Lenovo Device Orchestration Agent in Intune

      This article provides instructions for creating an Intune application to deploy the Lenovo Device Orchestration Agent. Download the LDO Agent and set the expiry date of the agent. In the LDO console, go to Device Management > Devices. Click on the ...

    • Lenovo Device Orchestration Release Notes v.26.7

      Components Release Version Availability Date Lenovo Device Orchestration 26.7 NA: August 22, 2026 EU: August 22, 2026 User Device Services (UDS) Cloud Portal/Frontend 26.7 NA: August 21, 2026 EU: August 22, 2026 Universal Device Client (UDC) Agent ...