Last updated: [LAST UPDATED DATE]. This is a starting template written with India’s Digital Personal Data Protection Act, 2023 and the EU and UK GDPR in mind. Have it reviewed by a lawyer before launch.
TrustKite (“we”) operates TrustKite. This policy explains what personal data we collect and how we use it.
What we collect
Account data: your name, email address, password and, if you choose to add it, your country and city. Reviews: what you write, your rating and the date of your experience. Technical data: a one-way hash of your IP address, used to detect fake reviews, plus standard server logs. Businesses: business contact details, and documents submitted to claim or verify a profile. Invitations: when a business invites you to review it, it shares your name, email or phone number and order reference with us.
Why we use it
To run your account, publish your reviews under your public name (first name and last initial), prevent fraud, send you emails you have asked for, respond to complaints and meet legal obligations. We rely on your consent, which you give when you create an account or submit a form, and on legitimate uses permitted by law.
Advertising and cookies
We show ads served by Google. Google and its partners may use cookies to show ads based on your visits to this and other sites. You can manage personalised ads at Google Ads Settings.
Who we share it with
Your public name and reviews are public. When you review a business, it can see your review and public name. We use service providers for hosting and email. We do not sell personal data.
How long we keep it
As long as your account is open, and afterwards only as long as needed for legal purposes. Invitation data is deleted after 12 months.
Your rights
You can access, correct and delete your data. You can edit or delete your reviews and delete your account at any time from your account settings. You can withdraw consent, raise a grievance, and nominate someone to exercise your rights. Contact our grievance officer below.
Users outside India
TrustKite is used worldwide and operated from India, so your data is processed in India and in the countries where our hosting and email providers work. If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our contract with you (running your account and publishing your reviews), your consent (where we ask for it), and our legitimate interest in keeping reviews genuine and the site secure. You also have the right to restrict or object to processing, to receive your data in a portable format, and to complain to your local data protection authority.