Last updated: August 31, 2026
Data Controller
- Trustindex Ltd
- Address: 2724 Ujlengyel, Nyari Pal utca 15.
- Established: 2018
- Hungarian VAT ID: 26281186-2-13
- EU VAT ID: HU26281186
- Registration number: 13 09 223096
- E-mail: support@trustindex.io
- WWW: trustindex.io
With this Privacy Policy, we inform you of our privacy practices when you use our websites (any subdomain of trustindex.com and trustindex.io), our software as a service called Trustindex for Business, as well as our additional applications on different platforms, including WordPress, Shopify, Shoptet and WooCommerce, collectively referred to as the “Website” or “Services”.
This Privacy Policy explains what types of personal and non-personal data we collect, how we collect and use such data, our data security measures, data sharing practices, procedures for accessing and modifying your information, and options for restricting certain uses of your data. It also explains specific legal rights associated with your Personal Data.
Where Trustindex processes Personal Data on behalf of a customer in its capacity as a data processor, such processing is governed by the applicable Data Processing Agreement (“DPA”) between Trustindex and that customer.
Definitions
The terms “us”, “we”, and “our” refer to Trustindex Ltd.
“Non-Personal Data” (NPD)
This term encompasses information that does not, by itself, identify or relate to an identified or identifiable natural person.
“Personal Data” (PD)
Personal Data means information relating to an identified or identifiable natural person (“Data Subject”). An individual may be identifiable directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to that individual’s physical, physiological, genetic, mental, economic, cultural, or social identity.
“Special Categories of Personal Data”
Special Categories of Personal Data means the categories of Personal Data identified as special categories under applicable data protection laws, including Article 9 of the GDPR, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used for identification, health data, and data concerning a person’s sex life or sexual orientation.
Your Rights
To exercise any of the legal rights outlined in this Privacy Policy, please contact us using the contact information provided above. We aim to respond to valid requests within 30 days of receipt, unless a different period applies under Applicable Data Protection Law.
Depending on your location and the applicable law, your rights may include:
- The right to receive confirmation as to whether we process your Personal Data.
- The right to access your Personal Data.
- The right to request correction of inaccurate or incomplete Personal Data.
- The right to request deletion of your Personal Data, subject to applicable legal exceptions.
- The right to request restriction of processing of your Personal Data, where applicable.
- The right to receive Personal Data you have provided to us in a structured, commonly used and machine-readable format, where the right to data portability applies.
- The right to object to processing based on legitimate interests, including certain profiling activities.
- The right to object to direct marketing, including related profiling.
- The right to withdraw consent where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
- The right not to be subject to a decision based solely on automated processing, including profiling, where such decision produces legal effects or similarly significantly affects you and where the applicable legal requirements are met.
- The right to lodge a complaint with a competent supervisory authority if you believe that your Personal Data has not been processed in accordance with applicable data protection law.
Additional rights may apply depending on your jurisdiction, including rights provided under applicable United States privacy laws.
When Accessing and Using Our Website
When you visit our Website, we may collect certain information automatically through cookies, similar technologies, and information provided by your browser or device. Depending on your settings and applicable law, some of this information may constitute Personal Data.
Use of Cookies
Cookies are used on our Website. A cookie is a small data file stored on your computer or mobile device when you visit a website. Cookies may contain information that allows a website or service to recognize your browser or device.
Depending on their purpose and applicable law, we may use the following categories of cookies and similar technologies:
- Strictly Necessary Cookies – These cookies are necessary for the operation and security of the Website and for providing requested functionality, such as authentication, session management, and other essential functions.
- Functional Cookies – These cookies allow the Website to remember user preferences and settings.
- Session Cookies – These cookies allow us to associate actions performed during a browser session and generally expire when the browser session ends.
- Persistent Cookies – These cookies remain on your device for a defined period and may be used to remember preferences and settings.
- Performance and Analytics Cookies – These cookies help us understand how visitors use our Website, including information about visited pages, traffic sources, and interactions with the Website.
- Media Cookies – These cookies may be used to provide media-related functionality and other features.
- Advertising or Targeting Cookies – These cookies and similar technologies may be used for advertising, measurement, audience analysis, remarketing, and related purposes, where permitted by applicable law and subject to applicable consent requirements.
Depending on the applicable technology and your settings, these technologies may be used to:
- identify sections of our Website that you have visited;
- understand how users interact with our Website;
- improve Website performance;
- remember preferences and configurations;
- measure the effectiveness of marketing campaigns;
- re-promote our products or services; and
- support advertising and social media functionality.
You can manage your cookie preferences through the “Cookie preferences” option available in the footer of public pages of our Website.
Most web browsers also allow you to manage or disable cookies. Disabling certain cookies may affect the functionality of some parts of the Website.
Web Beacons
To gather general information about how users interact with our Website, communications, newsletters, or promotional materials, we may use technologies such as web beacons or tracking pixels.
These technologies may help us perform statistical analysis, including measuring email open rates and understanding engagement with our communications.
The Data We Collect and Our Methods of Collection
Typically, you determine the amount and nature of the information you provide to us when using our Website and Services. We may also collect certain information automatically or receive information from third-party platforms when you choose to use an applicable integration.
Legal Grounds for Collecting and Handling Personal Data
Depending on the circumstances, we may process Personal Data on one or more of the following legal bases:
- Performance of a contract – where processing is necessary to provide products or services you have requested, manage your account, process purchases, or take steps at your request before entering into a contract.
- Legal obligation – where processing is necessary to comply with applicable legal or regulatory requirements.
- Legitimate interests – where processing is necessary for our legitimate interests or those of a third party, provided that such interests are not overridden by your rights and freedoms.
- Consent – where we have requested and obtained your consent for a specific processing activity.
The applicable legal basis depends on the nature and circumstances of the particular processing activity.
Automatic Information
We may automatically receive certain information from your web browser, computer, or mobile device. This may include your IP address or proxy server information, Internet service provider, browser type and settings, device type, operating system, and information about your browsing activities on our Website.
We use this information for purposes such as operating, securing, maintaining, and improving our Website and Services, as well as understanding Website usage.
Information You Provide
1. Customers and Subscribers
Data we collect:
- Name
- Company details
- Email address
- Billing information
- Payment information
- Login credentials
- Subscription data
- Service usage information
Purpose of processing:
- To create and manage accounts
- To provide and maintain our Services
- To process payments and issue invoices
- To send service and system notifications
- To provide customer support
- To manage subscriptions
- To maintain the security and integrity of our Services
Retention period:
We retain this information for as long as necessary to maintain the account and provide the Services, and thereafter for as long as necessary to comply with applicable accounting, tax, legal, dispute-resolution, security, or other legitimate business requirements.
2. WordPress Plugin Users
For users of our free WordPress plugin, we may collect:
- Website domain
- Place ID
Purpose of processing:
To provide plugin functionality, maintenance and update notifications, and information about related Trustindex services.
Retention period:
We generally retain this information until the plugin is uninstalled or the information is no longer necessary for the relevant purposes, subject to applicable legal requirements.
3. Review Authors
When you directly submit a review through Trustindex, we may collect:
- Name
- Email address
- IP address
- Review content
- Date of submission
- Company being reviewed
- Other information voluntarily included in the review
Purpose of processing:
- To publish and manage reviews
- To maintain the integrity and transparency of the review platform
- To prevent fraud, abuse, and manipulation
- To investigate reports and policy violations
- To communicate with review authors where necessary
Legal basis:
Depending on the circumstances, processing may be based on consent, performance of a contract, or our legitimate interests, including fraud prevention and maintaining the integrity of the review platform.
Retention period:
We retain review-related information for as long as necessary for the purposes described above, including for as long as the review remains published, unless deletion is required or permitted under applicable law.
Review authors may request modification or deletion of their reviews, subject to applicable legal requirements and our review policies.
Customer Data Processed on Behalf of Customers
Where a Trustindex customer uses our Services to collect, manage, synchronize, or display Personal Data relating to its own customers, reviewers, or other individuals, Trustindex may process that data on the customer’s behalf.
In such circumstances, the customer acts as the data controller and Trustindex acts as the data processor. The processing is governed by the applicable Data Processing Agreement between Trustindex and the customer.
Where Trustindex processes Personal Data on behalf of a customer as a data processor, the applicable Data Processing Agreement (“DPA”) sets out the subject matter, duration, nature and purposes of the processing, categories of Personal Data and Data Subjects, applicable retention and deletion requirements, authorised subprocessors, security measures, international transfer mechanisms, and other obligations applicable to such processing.
During User Registration, Company Reviewing, Reporting Reviews, and Purchasing Products or Services
When you register as a user, purchase our products or services, or engage in activities such as reviewing companies or reporting reviews, we may collect some or all of the following information:
- Name
- Email address
- IP address
- Location information
- Password
- Third-party identification codes, such as Google or Facebook IDs
- Other information you voluntarily provide
You may also have the option to upload a photograph or other media.
Admin User Registration
Business Admin Users
- Business name
- Business email
- Business website
- Password
- Optional picture upload, such as logos or avatars
- Business description
We may also retain IP address and technical information associated with access to our Website and Services.
Facebook Data Processing
1. Data Collected via Facebook APIs
When users connect their Facebook account or Page to Trustindex through Facebook Login or an applicable Facebook integration, we may collect and temporarily store certain information from their Facebook profile or Pages.
Depending on the functionality used, this may include:
- Name
- Email address
- Profile picture
- Facebook User ID
- Access tokens and their expiration dates
- Page name and ID
- Page access token and its expiration timestamp
- Overall Page rating scores and counts
- Profile ID and name
- Profile access token and its expiration timestamp
- Review creation date and unique ID
- Reviewer’s displayed name and Facebook user ID
- Review rating or recommendation type
- Review text content
- Merchant’s reply to the review
- Timestamp of the reply
These data are retrieved through the Facebook Graph API after the user authorizes the relevant connection.
2. Purpose of Facebook Data Processing
Depending on the functionality used, Facebook-related data may be processed:
- To connect a customer’s Facebook Page to Trustindex
- To authenticate and maintain the integration
- To display Facebook Page reviews through Trustindex Services
- To enable review management functionality supported by the applicable Facebook API
- To maintain secure communication between Trustindex and connected Facebook services
We do not sell Facebook API data or use such data for unrelated advertising or profiling purposes.
Where Facebook-related information constitutes Customer Personal Data processed on behalf of a customer, the applicable processing is governed by the DPA.
3. Facebook Data Deletion
If you wish to request deletion of data obtained through Facebook Login or a Facebook Page connection, you can contact us at support@trustindex.io.
We will process valid deletion requests in accordance with applicable law and our data retention requirements.
Collecting Data About Your Physical Location
When you use our Services, we may collect and process information relating to your physical location.
We may use technologies such as IP-based location information and other available technical information to determine or estimate your location. The type and accuracy of location information may vary depending on the technology used and the circumstances.
Where applicable, location information may be used to provide or improve our Services, understand how our Services are used, maintain security, or comply with applicable legal requirements.
Google API
When you use a Trustindex integration involving Google services, you may also be subject to the Google Privacy Policy and Google Terms of Service.
When collecting and managing user data obtained through Google APIs, we adhere to the applicable Google API Services User Data Policy and its requirements.
Where Google-derived information constitutes Customer Personal Data processed on behalf of a customer, the applicable processing is governed by the DPA.
Chat Software and Contact Forms
Our Website incorporates chat software and contact forms that allow visitors to communicate with us.
When you use our chat software or contact forms, we may collect:
- Email address
- First name
- Last name
- Location information
- IP address
- Subscription ID
- Website
- Troubleshooting information, which may include information about your browser, WordPress installation, and related technical information
- Any additional information you voluntarily provide
We recommend sharing only information that is necessary for us to effectively address your inquiry.
Google Analytics Integration
To enhance our understanding of Website usage, we use Google Analytics and may use related analytics technologies.
Depending on the configuration and applicable consent settings, Google Analytics may collect information such as:
- information about Website visits;
- pages viewed;
- traffic sources;
- interactions with the Website;
- device and browser information;
- approximate location information;
- frequency of visits; and
- other analytics information.
We use this information to understand Website usage and improve our Website, Services, marketing, and advertising activities.
Where applicable, you can manage analytics cookies and related technologies through our cookie preference settings.
Analytics
In addition to Google Analytics, our Website may incorporate analytics services provided by other companies.
These services may collect information such as:
- frequency of visits;
- pages viewed;
- time and duration of visits;
- referring websites;
- IP addresses;
- device and browser information; and
- other technical or usage information.
The information obtained through these services is used to understand how our Website and Services are used and to improve their quality and performance.
Google Ads and Other Advertising
Third-party providers, including Google, may use cookies, pixels, and similar technologies to provide advertising based on previous interactions with our Website or other websites.
Depending on the applicable service and your consent settings, these technologies may be used to measure advertising performance, understand interactions with advertisements or content, and provide or support interest-based or personalized advertising.
You can manage applicable advertising and cookie preferences through our cookie preference settings and through tools provided by the relevant advertising providers.
Sharing of PD for Lookalike or Similar Audience Marketing
We may disclose your Personal Data to third parties for the purpose of similar audience marketing, also known as lookalike audience marketing.
The third parties with whom we may share Personal Data for this purpose may include Facebook and/or Google.
The use of Personal Data for similar audience or lookalike audience marketing may help us identify audiences with characteristics or interests similar to existing users or customers.
Any such processing will be carried out in accordance with applicable data protection law and any consent requirements that apply to the relevant processing activity.
Consequences of Withholding Your Personal Data
If you do not provide certain Personal Data, we may be unable to provide some or all of our products or services, process a purchase, create an account, respond to an inquiry, or provide certain functionality.
Certain sections of our Website can nevertheless be accessed and used without providing Personal Data.
Using and Sharing Your Personal Data
Depending on the circumstances, we may use Personal Data to:
- Deliver products and services you have requested or purchased.
- Create and manage user accounts.
- Process payments and issue invoices.
- Provide customer support.
- Customize and improve our content and Services.
- Maintain and improve our Website.
- Communicate with you about our Website, products, services, account, or subscription.
- Send marketing communications where permitted by applicable law.
- Address and resolve issues and disputes.
- Detect and prevent fraud, abuse, security incidents, and other misuse.
- Comply with applicable legal obligations.
- Protect our legal rights and interests.
Video Reviews
Videos submitted through Trustindex may be shared with or published through third-party platforms or APIs, including YouTube, where such functionality is provided.
When you submit or publish a video through an applicable integration, you may also be subject to the terms and privacy policies of the relevant third-party platform.
Photo Reviews
Images submitted through Trustindex may be shared with or published through third-party platforms through their API Services, where such functionality is provided.
When you create or submit a media file through an applicable integration, you may also be subject to the terms and privacy policy of the relevant platform.
Communications and Emails
When we need to communicate with you regarding your account, purchases, subscriptions, services, or other matters, we may use the email address you provided during registration or purchase.
We may also send promotional communications about our products, services, or offers where permitted by applicable law.
You can unsubscribe from marketing communications at any time using the unsubscribe mechanism provided in the relevant communication or by contacting us using the contact information provided above.
Service-related communications that are necessary to provide the Services or manage your account may continue where permitted or required by law.
Sharing of Your Data When Logging in via Social Media Websites
We may offer the ability to use third-party services, such as Google, Facebook, Twitter, Instagram, YouTube, or other platforms, to authenticate or connect with Trustindex.
When you use such a service, we may receive certain information from that provider depending on the permissions you grant and the functionality used.
The information may be used to authenticate your account, provide the requested integration, and enable related functionality.
Third-party platforms operate under their own privacy policies and terms, and Trustindex does not control the privacy practices of those third parties.
When using social sharing functionality, information may also be transmitted to the relevant social media platform.
Text Messaging, SMS, Push Notifications, and Telephone Calls
If you provide us with a telephone number or otherwise opt in to receive communications through SMS, push notifications, or telephone calls, we may use those communication methods for the purposes described when you provide your information or consent.
Where consent is required, we will obtain the applicable consent before sending promotional communications through these channels.
You can discontinue receiving promotional text messages, push notifications, or telephone calls at any time by using the applicable opt-out mechanism or contacting us.
Service-related communications may continue where necessary to provide requested Services or where otherwise permitted by applicable law.
Data Sharing with Third Parties
We do not trade or lease your Personal Data to third parties for their own promotional purposes.
We may use Non-Personal Data for aggregation, statistical analysis, and other purposes where permitted by applicable law.
We may also disclose Personal Data to third-party service providers that process information on our behalf or provide services necessary for the operation of our business. Such providers may include, as applicable:
- Payment processors
- Web analytics providers
- Customer support and help desk providers
- Data management providers
- Advertising and marketing service providers
- Accountants and financial service providers
- Legal advisers
- Auditors
- E-commerce and service providers
- Email service providers
- Hosting and infrastructure providers
Where a third party processes Personal Data on behalf of Trustindex, we take appropriate steps to require the provider to process the information in accordance with applicable data protection requirements.
Where Trustindex processes Customer Personal Data on behalf of a customer, the applicable subprocessors and processing activities are governed by the relevant DPA.
Legally Mandated Disclosure of Information
We may disclose Personal Data where such disclosure is necessary or permitted by applicable law, including where:
- required by a subpoena, court order, statutory requirement, or other legal process;
- necessary to assist law enforcement or regulatory authorities;
- necessary to establish, exercise, or defend legal claims;
- necessary to protect our legal rights, property, or interests;
- necessary to protect the safety or security of our users, employees, business partners, or others; or
- otherwise required or permitted by applicable law.
Transfers to Subsequent Entities
In the event of a complete or partial sale, merger, acquisition, reorganisation, bankruptcy, or other transaction involving all or part of our business or assets, we may transfer Personal Data to the relevant successor, purchaser, or other entity involved in the transaction.
Any successor entity will be expected to process Personal Data in accordance with applicable law and the privacy commitments applicable to such data.
Community Forums, Blogs, or Similar Platforms
Our Website may provide users with the option to participate in forums, blogs, review discussions, or similar publicly accessible areas.
You should exercise caution when voluntarily posting Personal Data in publicly accessible areas. Information you choose to publish may be visible to other users and may become publicly accessible on the Internet.
We cannot control how third parties may use information that you voluntarily make publicly available.
Retention and Disposal of Your Personal Data
We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.
Retention periods may depend on the type of information, the purpose of processing, our legal and contractual obligations, dispute resolution requirements, security considerations, and other legitimate business needs.
When Personal Data is no longer required, we will delete or anonymize it where reasonably practicable.
Some information may remain temporarily in backup or archival systems while it is scheduled for deletion or overwritten in accordance with our retention and backup procedures. Such information is not ordinarily available for active use.
Protection of Third-Party Privacy Rights
If you submit or publish information relating to another person through our Website or Services, you are responsible for ensuring that you have the appropriate authorization or legal basis to do so.
If we are notified that content published through our Website infringes another person’s privacy rights, we may take appropriate action, including restricting or removing the relevant content where required or permitted by law.
Disabling Tracking Settings
Some web browsers provide settings that allow users to request that websites do not track their activities.
Our Website may not respond to all browser-based “Do Not Track” signals or similar mechanisms.
You can manage certain tracking technologies through your browser settings and through our cookie preference settings.
Links to External Websites
Our Website may contain links to external websites or services operated by third parties.
These websites are not controlled by Trustindex and are not governed by this Privacy Policy. We are not responsible for the privacy practices, content, security, or policies of external websites.
We recommend reviewing the privacy policy of any external website before providing Personal Data.
Protecting the Privacy of Children
Our Website and Services are not intended for individuals under the age of 16.
We do not knowingly collect Personal Data from children under 16.
If you believe that a child under 16 has provided Personal Data to us, please contact us. Where appropriate and required by applicable law, we will take reasonable steps to delete the information.
We do not generally verify the age of users.
Email Policy
You may unsubscribe from promotional email communications from us at any time by using the unsubscribe mechanism included in the relevant communication or by contacting us.
We do not sell, rent, or trade your email address to unrelated third parties for their own promotional purposes.
This does not prevent us from sharing an email address with service providers that process information on our behalf, where necessary to provide our Services or operate our business, or in connection with a sale, merger, bankruptcy, or similar business transaction.
Security Policy
We maintain technical and organisational measures designed to protect Personal Data against unauthorised access, alteration, loss, misuse, or destruction.
We and the third-party service providers we engage may maintain appropriate technical and physical safeguards to protect Personal Data.
However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.
You are responsible for maintaining the confidentiality of passwords and other credentials associated with your account and should not share them with others.
Use of Your Credit Card
When purchasing products or services through our Website, you may be required to provide payment information.
We use third-party payment and billing service providers to process payments. Payment information may be transmitted directly to or processed by these providers in accordance with their applicable privacy policies and security practices.
Trustindex does not generally store complete payment card information on its own systems where payment processing is handled by a third-party payment provider.
Transfer of Personal Data Between Countries
Personal Data may be stored, processed, and transferred in countries other than the country in which you are located.
Where Personal Data is transferred outside the European Economic Area, the United Kingdom, or Switzerland, we will take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law.
Depending on the circumstances, transfers may rely on:
- an applicable adequacy decision;
- the European Commission’s Standard Contractual Clauses;
- the UK International Data Transfer Addendum or other applicable UK transfer mechanism;
- another legally valid transfer mechanism; or
- another safeguard permitted by applicable law.
Where appropriate, we may enter into data processing agreements and use Standard Contractual Clauses or other appropriate safeguards with service providers.
Modifications to Our Privacy Notice
We may modify this Privacy Policy from time to time.
When we make changes, we will publish the updated version on our Website and update the “Last updated” date.
Where required by applicable law, we will provide additional notice of material changes, including by email or other appropriate means.
Your continued use of our Website and Services after an updated Privacy Policy becomes effective may constitute acceptance of the changes where permitted by applicable law.
If you have questions concerning this Privacy Policy, please contact us using the contact information provided above.