1. Scope of this policy
This policy applies to visitors, registered users, business representatives, company-team members and administrators who use the Trustora website and its related account, review, complaint, verification, ranking, alert and developer services.
2. Information provided directly
Trustora may collect a person’s name, email address, password credentials, profile preferences, company relationship, review content, complaint details, supporting evidence, verification documents, messages, consent choices and information submitted through account forms.
3. Information created during use
The platform may create login records, security events, device-session details, notification history, moderation decisions, account actions, score history, watchlist preferences, export logs, privacy requests and other records needed to operate and protect the service.
4. Public and private information
Approved reviews, public business responses, company information and reputation scores may appear publicly. Passwords, private evidence, verification documents, security codes and protected complaint information are not intended for public display.
5. Purposes for using information
Information may be used to create and manage accounts, authenticate users, verify businesses, publish genuine reputation content, calculate scores, handle complaints, investigate abuse, operate alerts, provide data exports, maintain audit integrity and respond to support or legal requests.
6. Communication preferences
Essential account, security, moderation and service messages may be sent when needed to operate Trustora. Marketing messages and product announcements are optional and can be changed from the Personal Data, Consent and Privacy Centre.
7. Cookies and similar technologies
Essential cookies support sign-in, session security, language preferences and form protection. Optional preference or analytics cookies should be used only according to the choices made through the cookie controls available on the website.
8. Company reviews and complaint information
Reviewers should avoid publishing private account numbers, identification records, health information, confidential documents or unnecessary personal details. Complaint evidence may be restricted to authorised participants and administrators.
9. Sharing and service providers
Information may be shared with hosting, email, security, analytics or other service providers that support the platform. Information may also be disclosed where reasonably necessary to investigate fraud or abuse, protect users, enforce platform rules or comply with a valid legal requirement.
10. International processing
Hosting and service providers may process information in different countries. Before public deployment, the operator should identify the providers used and confirm that appropriate contractual, organisational and legal safeguards apply.
11. Data retention
Trustora may retain records for periods appropriate to account security, moderation, complaint resolution, business verification, fraud prevention, audit integrity and legal obligations. Retention periods should be reviewed and documented by the platform operator.
12. Account deletion and anonymisation
A deletion request may lead to account anonymisation, session revocation and removal of direct profile attribution. Some non-identifying complaint, review, transaction, security or audit records may be preserved where deletion would undermine platform integrity or a lawful record-keeping obligation.
13. Security measures
Trustora includes password hashing, email verification, optional two-factor authentication, session controls, role permissions, private file storage, security events and administrative audit records. No internet service can guarantee absolute protection against every risk.
14. Personal data choices and rights
Registered users can manage supported communication and visibility preferences, review recent consent choices, download supported account data and submit an account-deletion request through the Privacy Centre. Additional rights may apply under the laws governing the platform operator and the user.
15. Children and restricted users
Trustora is not designed to collect personal information from children without appropriate legal authority or parental involvement. The platform operator should set and publish a suitable minimum age for the countries in which the service is offered.
16. Policy updates and contact information
Material changes should be published with an updated version date and, where appropriate, a notice to registered users. Before commercial launch, this policy should include the legal name, address and privacy contact details of the organisation operating Trustora.
This document is a product template and does not replace advice from a qualified privacy or data-protection professional. It should be reviewed and adapted before public or commercial deployment.