Privacy notice

AI TrustMark processes personal data to verify reviews, prevent fraud, and operate TrustMark certificates. Publication requires explicit consent. Marketing consent is separate.

Data minimisation

Private reviewer evidence defaults to private storage and is never included in HTML, metadata, structured data, sitemaps, public APIs or search indexes.

Your rights

Subject-access, correction, deletion and consent withdrawal requests can be submitted to the platform operators. Retention periods are configurable for staff workflows.

Security

Transport is encrypted (HTTPS). Evidence objects use encrypted storage where configured. Access is role-based. Material changes are audit-logged.