Privacy Policy

1. Data Controller

Trustway Group Ltd is a company registered in England and Wales and acts as the data controller for the personal information described in this policy.

ICO Registration Number: ZC092769

We are registered with the UK Information Commissioner’s Office (ICO) and process all personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

View our Data Protection Registration Certificate (PDF) ↗

2. What personal data we collect

We may collect the following categories of personal information:

• Identity data — full name, title
• Contact data — email address, telephone number, postal address
• Professional data — company name, job title, country of residence or operation
• Enquiry data — messages, project descriptions and any supporting information you submit through our contact forms, email or telephone communications
• Technical data — IP address, browser type, operating system, referring URL and pages visited (collected automatically via server logs and, where applicable, analytics cookies)

3. How we collect your data

We collect personal data through:

• Our website contact and enquiry forms
• Direct email, telephone or video communications
• Professional service engagements and retainer agreements
• Automated technologies such as server logs and cookies (see our Cookie Notice)

4. Legal basis for processing

We process your personal data under one or more of the following legal bases:

• Consent — where you have given explicit consent via our contact form or other communication (you may withdraw consent at any time)
• Contractual necessity — where processing is required to perform a contract with you or to take pre-contractual steps at your request
• Legitimate interests — where processing is necessary for our legitimate business interests (e.g. responding to enquiries, improving our services), provided those interests are not overridden by your rights
• Legal obligation — where we are required to process data to comply with applicable law

5. How we use your data

Your personal information is used for the following purposes:

• To respond to your enquiries and provide requested consultancy services
• To communicate about your project, timelines, deliverables and follow-up actions
• To manage our professional relationship, including retainer agreements and billing
• To send service-related correspondence (we do not send unsolicited marketing)
• To comply with legal, regulatory and contractual obligations
• To improve our website, services and internal processes

6. Data sharing and third parties

We do not sell, rent or trade your personal data. We may share data with:

• Professional advisers — solicitors, accountants or insurers where necessary for the delivery of our services or legal compliance
• Service providers — hosting, email delivery and IT support providers who act as data processors on our behalf under appropriate data processing agreements
• Regulatory bodies — where required by law or regulation

We do not transfer personal data outside the United Kingdom unless appropriate safeguards are in place in accordance with UK GDPR requirements.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. In general:

• Enquiry data is retained for up to 24 months after our last communication
• Client engagement data is retained for up to 7 years after the end of the engagement for legal and regulatory purposes
• Technical/analytics data is retained for up to 12 months

When data is no longer required, it is securely deleted or anonymised.

8. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include:

• SSL/TLS encryption for all website communications
• Restricted access to personal data on a need-to-know basis
• Secure email communications
• Regular review of our data handling practices

9. Your rights

Under UK data protection law, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data where there is no compelling reason for continued processing
• Right to restrict processing — to request limitation of processing in certain circumstances
• Right to data portability — to request transfer of your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at info@trustway-global.com. We will respond within 30 days.

10. Cookies

Our website uses cookies to ensure functionality and improve your experience. For full details, please see our Cookie Notice.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first at info@trustway-global.com.

12. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.