On this page
1.Data controller
TrustSays Limited, Berkeley Square House, Berkeley Square, London W1J 6BD, United Kingdom. Contact: support@trustsays.com.
2.What data we process
- Email address: for logging in and messages. Stored encrypted and as a keyed hash for look-ups.
- First name and country: shown with your reviews. Your surname is never shown.
- Your reviews, replies to them and your "helpful" votes.
- IP address: never stored in plain text, only as a keyed hash that is deleted after 30 days. Used to prevent abuse.
- Your cookie choice and when you made it, so that we can document your consent.
3.Purpose and legal basis
We process the data to provide the service (contract), to prevent fake reviews and abuse (legitimate interest and legal obligation under consumer protection rules and the DSA) and, if you have said yes, to send the newsletter (consent).
4.How long
- Login codes: 24 hours
- Sessions: 90 days after last use
- IP hash: 30 days
- Unconfirmed newsletter sign-ups: 30 days
- Account and reviews: until you delete them
5.Who processes data on our behalf
The database and the API run on a server in London, United Kingdom, which is covered by an adequacy decision of the European Commission. The website is delivered by Vercel from Stockholm. Emails are sent via Resend. [Data processing agreements with each supplier must be confirmed before the text is approved.]
6.Your rights
You can access your data and get a copy of it (export from your profile), have it corrected or deleted (delete your account from your profile), object to processing and withdraw your consent. You can complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk, our lead supervisory authority, or to the data protection authority in the country where you live.