1. Who we are
Trustigo B.V. ("Trustigo", "we", "us") operates the website trustigo.com and the Trustigo platform at app.trustigo.com. For the processing described in this policy, Trustigo is the data controller.
For any privacy question or request you can reach us at info@trustigo.com.
2. What data we process
Depending on how you interact with us, we may process:
- Account data: name, business email address, company name, password (stored hashed) and account settings.
- Company profile data: company name, logo, website, description, industry and location that you choose to publish.
- Recommendation data: the name, job title, company and written recommendation of customers who submit a recommendation, plus verification details such as the email address used to confirm it.
- Communication data: the content of emails you send to info@trustigo.com and our replies.
- Billing data: invoice details and payment status for paid plans. Card details are handled by our payment provider and never stored by us.
- Technical data: IP address, browser type, device information and log data needed to keep our services secure and working.
Values you enter in the calculators and checkers on this website are processed in your browser only and are not sent to us.
3. Purposes and legal bases
We only process personal data when we have a legal basis under Article 6 GDPR:
- Performance of a contract: to create and manage your account, publish your trust profile, collect and display recommendations and provide support.
- Legitimate interest: to secure our platform, prevent fraud and fake recommendations, improve our services and answer questions you send us.
- Legal obligation: to keep financial records and comply with tax and accounting laws.
- Consent: for optional communication such as newsletters. You can withdraw consent at any time; this does not affect processing that took place before.
4. Published recommendations
When someone submits a recommendation, they are told in advance which details will be shown publicly on the company's trust profile. A recommendation is only published after verification.
Anyone who submitted a recommendation can ask us to correct, anonymise or remove it at any time via info@trustigo.com.
6. International transfers
We aim to store and process data within the European Economic Area. If a processor transfers data outside the EEA, we make sure appropriate safeguards are in place, such as an adequacy decision or the European Commission's Standard Contractual Clauses.
7. Retention
We keep personal data no longer than necessary:
- Account and profile data: for as long as your account exists. After deletion we remove it within 30 days, except where the law requires longer storage.
- Recommendations: for as long as they are published on an active profile, or until removal is requested.
- Emails: up to 2 years after the conversation ends.
- Financial records: 7 years, as required by Dutch tax law.
- Security logs: up to 90 days.
8. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), hashed passwords, access controls on a need-to-know basis and regular updates of our systems.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent at any time.
Send your request to info@trustigo.com. We respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your country.
11. Changes to this policy
We may update this policy from time to time. The latest version is always available on this page. If changes are significant, we will inform account holders by email.