Privacy Policy
TrustHuman Ltd ("TrustHuman", "we", "us", "our") is committed to protecting your personal data. This policy explains what data we collect, why we collect it, and how we use and protect it. It applies to everyone who visits trusthuman.co.uk or uses our assessment service.
1. Who we are
TrustHuman Ltd is the data controller for personal data collected through this website and service. If you have any questions about how we handle your data, contact us at hello@trusthuman.co.uk.
2. What personal data we collect
When you run an assessment
- The domain name of your AI endpoint (e.g.
api.yourcompany.com) — used to connect to your AI tool and send synthetic test probes during the assessment. We do not store your full endpoint URL or any authentication credentials. - AI tool responses — the outputs your AI tool returns in response to our synthetic probes. These are processed by our independent assessment engine to generate your TrustHuman Score™ and are not shared with third parties.
- Assessment results (domain name, industry category, TrustHuman Score™, and pillar-level scores) — stored in our internal admin system for quality assurance and service improvement, and associated with your account so you can view your assessment history in your account dashboard. This data is not shared with third parties.
When you create an account
- Email address — used to create and authenticate your TrustHuman account via Netlify Identity. We do not store passwords; authentication is managed by Netlify Identity, which handles credential storage securely on our behalf.
When you contact us
- Name, email address, and the content of your message — used to respond to your enquiry.
Technical data
- We do not use tracking cookies or third-party analytics. Your browser's local storage may be used to preserve your session state within the assessment tool. This data stays in your browser and is not transmitted to us.
3. Lawful basis for processing
- Contract — we process your email address to create and maintain your account, and we store your assessment results against your account, both of which are necessary to provide the assessment service.
- Legitimate interests — we retain assessment results in our internal admin system for quality assurance and service improvement, and we retain contact form submissions long enough to resolve your enquiry.
4. How long we keep your data
- Account data — your email address is retained for as long as your account exists. To delete your account, email hello@trusthuman.co.uk.
- Assessment results — the domain name of your AI endpoint, your industry category, and your TrustHuman Score™ and pillar scores are retained in our internal admin system for up to 12 months from the date of assessment, then deleted. Your API credentials and full endpoint path are never stored. To request deletion before the 12-month period, email hello@trusthuman.co.uk.
- Contact form messages — retained for up to 12 months after your enquiry is resolved, then deleted.
5. Who we share your data with
We do not sell your personal data. We share it only with the following sub-processor who helps us deliver the service:
- Netlify, Inc. — provides our hosting infrastructure and Identity authentication service (Netlify Identity). Account email addresses are stored and processed by Netlify on our behalf under their standard data processing agreement.
Assessment content is processed entirely by TrustHuman's own independent assessment engine and is not sent to any third-party AI provider.
We may also disclose personal data where required by law or to protect the rights, property, or safety of TrustHuman, our users, or others.
6. Your rights
Under UK GDPR and the Data Protection Act 2018 you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your personal data (subject to legal obligations).
- Restriction — ask us to limit how we use your data while a dispute is resolved.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
To exercise any of these rights, email us at hello@trusthuman.co.uk. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies and local storage
We do not use tracking or advertising cookies. Our site may use strictly necessary browser local storage to maintain your session while using the assessment tool. No personal data stored locally is transmitted to third parties.
8. Data security
We use industry-standard measures to protect your personal data, including encrypted connections (HTTPS), access controls, and secure infrastructure provided by Netlify. No method of transmission or storage is completely secure; in the event of a data breach that affects your rights and freedoms we will notify you and the ICO as required by law.
9. International transfers
Our hosting provider (Netlify) is based in the United States. Transfers are made under appropriate safeguards including standard contractual clauses.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top will reflect the most recent change. Continued use of the service after changes are posted constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions: hello@trusthuman.co.uk
TrustHuman Ltd · trusthuman.co.uk