1.Introduction
Last updated 30 March 2026
We are The Trusted Consultancy Ltd t/a Trusted, a company incorporated in England & Wales, with our registered office at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.
Where we decide the means or purpose of processing your personal data, we are the data "controller." If you would like to access this policy in a different or more accessible format, please write to us at hello@thetrusted.io.
We are the controller when, as described in this policy, we:
- collect information through our public website
- respond to feedback or enquiries about our business
- collect analytics through our site, products & services
- process personal data to provide you with an Advocate profile
We are a processor on behalf of our customers, and not the controller, for personal data processed by those customers (or us on their behalf) using our products and services. Our customers are the controller where they:
- upload personal data in the Trusted platform
- manage data relating to contacts in the Trusted platform
- record interactions with advocates in the Trusted platform
If this includes your personal data, and you have queries or concerns, you should contact the organisation who is processing your personal data using Trusted.
This policy explains how we process your personal data as a data controller. Other services, our customers and their suppliers, will have separate policies to explain the same information about decisions they make about your personal data.
We update this policy from time to time so please check back in. If we make material changes affecting you, we will notify you either through a notice on our website, our services, by email or otherwise.
With questions on this policy, any complaints or concerns, or to exercise your rights, write to us at hello@thetrusted.io.
If we can't resolve your issue, you can also get in touch with the Information Commissioner's Office: ico.org.uk/concerns. If you are outside the UK in a European country, you can submit complaints to the supervisory authority in your country - see the European Data Protection Authorities.
You have the following rights, although these may be limited in some circumstances:
- Ask us to send a copy of your data to you or someone else
- Ask us to restrict, stop processing, or delete your data
- Object to our processing of your data
- Object to use of your personal data for direct marketing
- Ask us to correct inaccuracies
If we rely on consent to process data, or send direct marketing, you can withdraw consent by email to our address above (or, for newsletters, by using the unsubscribe links in our emails).
2.Your personal data and how we use it
| Your data | How we use it | Where we get it |
|---|---|---|
Newsletters
Retention We hold this information for as long as you subscribe to our newsletters. | How we use it We process this information to send newsletters to those who subscribe to receive them through our site. Legal basis Our legal basis for this processing is generally consent. However, we may process records of who has subscribed or unsubscribed, as necessary for us to comply with our legal obligation to ensure we record and comply with consents and unsubscribe requests. If you are a corporate subscriber, we may process this information without consent based on our legitimate interests in promoting our services to you. | We collect this information directly from you. |
Enquiry data
Retention We hold onto enquiry data for at least a year after the enquiry has been addressed, for 7 years if you are a customer, and otherwise while we still have a need to do so for purposes set out in this policy. | How we use it We process some or all of the above information so we can collect, record and properly respond to enquiries. Legal basis We process this information because it is necessary for the purposes of our (and your) legitimate interests, being our and your legitimate interests in us being able to respond to your queries. Where we are obliged to respond to your enquiries as part of or in connection with contractual support or similar arrangements, we may also process this data for the purpose of performing or entering a contract with you. | We generally collect this data directly from you, but if you agree to authenticate with LinkedIn and share information from your profile with us, we may receive this from LinkedIn. |
Customer accounts
Retention We generally hold onto account data for 7 years after you (or the customer you work for) cease using your (or their) account, but may continue to retain it where necessary for other purposes set out in this policy. | How we use it We use this information to administer user accounts, provide our platform and services, and to maintain and improve them. Legal basis Our legal basis for processing is legitimate interest, including legitimate interests (of us and our users and customers) in ensuring that our services operate as intended, and maintaining and improving those services. | We collect this information directly from you. |
Advocate accounts
Retention We generally hold onto account data for 7 years after you cease using your account, but may continue to retain it where necessary for other purposes set out in this policy. | How we use it We process this data to allow you to create and use your Advocate account. We also use this to provide our platform to our customers. For example, if you provide profile information to be shared with customers, we will share that information and may use it for the purpose of matching you with relevant customers. Legal basis (a) performance of contractual obligations to you (in particular, our obligation to provide agreed services) or taking steps you request prior to entering a contract; (b) we may also process this personal data to administer user accounts, and provide our services including for matching purposes and by sharing your profile information with customers, on the legal basis of legitimate interest, including interests of you, us, users and customers in facilitating connections with advocates, ensuring that our services operate as intended, and maintaining and improving those services. | We may either: collect this data directly from you; collect some of this data initially from our customers who may send you an invite to register (in which case, we will use that information to pre-populate some of your profile); or, if you agree to authenticate with LinkedIn and share information from your profile with us, we may receive this from LinkedIn. If you provide profile information and connect with our customers or other users, they will receive your profile information. |
Analytics
Retention After 25 months underlying data is deleted, but we may retain aggregated statistics generated from that data which are anonymous. | How we use it We use software to collect analytics data about users of our website and platform, to understand how people use them, where they come from, the devices and operating systems they use, how they interact with our site and platform, and to help improve and maintain our site and services. Legal basis We process this analytics data if you have given your consent. You can withdraw your consent for analytics by using our cookie banner. | We use Piwik PRO and Mixpanel to collect this data from you. |
Notice dismissal and consents A record of whether you have seen our legal notices and whether you have consented to the use of cookies. Retention Held as long as necessary in line with the note below on retention. | How we use it We use this information to perform our legal obligations, in particular our obligations to record whether you have been provided with information and given your consent to the use of cookies. | We, or the processors acting on our behalf, collect this data directly from you. |
Where explicit retention periods are not described above, we hold data for as long as necessary bearing in mind the purpose for which it was collected. To determine the appropriate period, we consider the amount, nature and sensitivity of the data, the potential risk of unauthorised access, and legal requirements.
3.Cookies, analytics and similar technologies
Cookies, pixels and other technologies store and access data on your device to help websites and apps work. The table below explains their purpose, how long they last, and who else can access their data. We get your consent to use them unless they're essential for our sites or services. You can control cookie preferences via our cookie banner. Most browsers also allow control over cookies - for more information: Google Chrome, Microsoft Edge, Mozilla Firefox, Opera and Apple Safari.
Necessary cookies
These cookies are essential for our website and platform to function properly. They enable core features such as security, network management, accessibility, and your ability to log in or fill out forms. Because they are required, they are always active and do not require your consent. You can block them in your browser settings, but some parts of the site may not work as intended.
Statistical (analytics) cookies
These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously - for example, which pages are visited most often or where users encounter errors. We use Piwik PRO Analytics Suite for our website and Mixpanel to analyse usage within our application. Information generated (such as IP address, device type, pages viewed and usage times) is processed in a way that does not personally identify you.
Data collection and retention
| Service / name | Type | Duration | Purpose | Access |
|---|---|---|---|---|
Cloudflare __cf_bm | Necessary | 30 minutes | Bot management and filtering (via Auth0). | Auth0 uses Cloudflare for the custom domain on our login page - privacy policy. |
Auth0 (Okta) did | Necessary | 6 hours | Device fingerprinting for anomaly detection. | We use Auth0 for user authentication - privacy policy. |
Auth0 (Okta) did_compat | Necessary | 6 hours | Compatibility version of device ID cookie. | We use Auth0 for user authentication - privacy policy. |
Auth0 (Okta) auth0 | Necessary | Session | Maintains user authentication session. | We use Auth0 for user authentication - privacy policy. |
Auth0 (Okta) auth0_compat | Necessary | Session | Backwards-compatible session management. | We use Auth0 for user authentication - privacy policy. |
Auth0 (Okta) auth0-mf | Necessary | Session | Maintains user authentication session with MFA. | We use Auth0 for user authentication - privacy policy. |
Auth0 (Okta) auth0-mf_compat | Necessary | Session | Backwards-compatible MFA session management. | We use Auth0 for user authentication - privacy policy. |
Auth0 (Okta) __session__0 | Necessary | Session | Internal session tracking. | We use Auth0 for user authentication - privacy policy. |
Auth0 (Okta) __session__1 | Necessary | Session | Internal session tracking. | We use Auth0 for user authentication - privacy policy. |
Cookie Information CookieInformationConsent | Necessary & Statistical | 12 months | Supports the website's technical functions. | We use the Cookie Information service - privacy policy. |
Piwik PRO _pk_id.* | Necessary & Statistical | 1 year | Supports the website's analytics. | We use Piwik PRO for analytics - privacy policy. |
Piwik PRO _pk_ses.* | Necessary & Statistical | 30 minutes | Supports the website's analytics. | We use Piwik PRO for analytics - privacy policy. |
Piwik PRO ppms_privacy_* | Necessary | 1 year | Stores the user consent preferences for Piwik PRO Consent Manager. | We use Piwik PRO for analytics - privacy policy. |
Mixpanel Mixpanel | Statistical | Session | Supports the Trusted application's analytics. | We use Mixpanel for behavioural analytics - privacy policy. |
4.Further information, transfers and disclosure
We do not make decisions based solely on automated processing or profiling that produce legal (or similarly significant) effects for you.
Where we use data processors outside the UK and European Economic Area and transfer personal data to a country which does not provide an adequate level of protection, we use contracts approved by the European Commission which give personal data the same protection it has in Europe. For more information, drop us a line using the contact details at the start of this policy.
We use certain third-party services with whom your personal data may be shared. They only process your personal data for our purposes, unless otherwise indicated. Details of the third parties we use are available on our website under the heading "Sub-Processors" in the Trust Centre - click "View All" to see more about each of them.
Other than as set out above, we may use and disclose your personal data:
- Where required by law, government, competent authorities or the courts, or to establish, exercise or defend our legal rights, and to prevent crime and fraud (for example, sharing data with our professional advisors, investigators, or credit reference agencies).
- With members of our corporate group, suppliers and subcontractors, as necessary for the purposes set out in this policy.
- If involved in an investment, merger, acquisition, or sale of our organisation or assets, on the basis of the legitimate interests of us, our shareholders, users, customers and other parties to a transaction - unless those interests are outweighed by prejudicial impacts on you.