Privacy Policy

1. Who we are

TrustedIn.uk is a UK business directory operated by Feelter Ltd. When we say "we", "us" or "our", we mean Feelter Ltd, the data controller responsible for personal data collected through this website and its associated services.

For privacy-related enquiries, contact us at [email protected].

2. The standard we apply

We apply the EU General Data Protection Regulation (GDPR) as our baseline for all personal data processing. EU rules are stricter than UK rules in several respects, and by meeting the EU standard we are also fully compliant with the UK GDPR and the Data Protection Act 2018. In practice this means you benefit from the stronger of the two frameworks regardless of where you are based.

3. What data we collect

We collect only what is necessary to operate the platform:

• Account information: your name, email address and a securely stored password when you register for a business account.
• Business listing data: business name, address, phone number, email address, website and description submitted by business owners. This information is published publicly on the directory as its primary purpose.
• Verification documents: if you submit a claim on a listing, we may collect proof-of-ownership documents to verify the relationship between you and the business. These are used solely for verification and are not published.
• Subscription and marketplace records: the plan you hold, any marketplace items purchased, and the dates and status of those transactions. We do not store any payment card data — see section 5.
• Communications: messages sent to us via support or contact forms, including the content and your contact details.
• Usage data: anonymised or pseudonymous data about how the platform is used, such as pages visited and general geographic region, to help us improve the service.
• Cookies and similar technologies: please see our Cookie Policy for full details.

4. How we use your information

• To create and manage your business account.
• To publish and maintain your business listing in the directory.
• To process and administer your subscription or marketplace purchases.
• To verify ownership claims on business listings.
• To power AI-assisted features that enrich listing content such as descriptions and imagery, where you have enabled those features.
• To contact you about your account, your listing or changes to our service.
• To detect and prevent fraud, abuse or misuse of the platform.
• To improve the platform based on aggregated, anonymised usage patterns.

5. Payment processing

All payment card processing is handled exclusively by Stripe. We never see, handle or store your card number, expiry date, CVV or any other sensitive payment credential. Stripe operates its own secure, PCI-DSS-compliant infrastructure. You can read Stripe's privacy policy at stripe.com/en-ro/privacy.

We do retain a record of what was purchased, when and at what price, as well as Stripe's transaction reference — this is necessary for subscription management, receipts and dispute resolution.

6. How we protect your data

Network traffic to TrustedIn.uk is routed through Cloudflare, which provides firewall protection, DDoS mitigation and threat filtering before any request reaches our servers. We apply industry best practices for encryption and data handling throughout the platform, and limit access to personal data to only those systems and people that genuinely need it. We do not share the specifics of our security architecture publicly, as doing so would reduce rather than improve your protection.

7. Legal basis for processing

Under the EU GDPR (and UK GDPR), we process personal data on the following legal bases:

• Contract: processing your account data, listing data and subscription records is necessary to deliver the services you have signed up for.
• Legitimate interests: detecting fraud, improving the platform, and ensuring the security and integrity of the service — where these interests are not overridden by your rights.
• Legal obligation: retaining certain records as required by applicable law (for example, transaction records for tax purposes).
• Consent: where you have explicitly opted in to something, such as marketing communications. You may withdraw consent at any time.

8. Publicly visible information

Business listings on TrustedIn.uk are public by design. If you claim a listing or submit a new one, the business name, address, category and description are visible to all visitors. Phone numbers and email addresses associated with a listing are displayed only after a visitor completes a verification step, helping to reduce automated scraping while keeping the information accessible to genuine users.

If you have submitted business information and believe it is inaccurate or should be removed, please see section 10 below.

9. Data sharing

We do not sell your personal data to third parties. We share data only in the following circumstances:

• Stripe: for payment processing, as described in section 5.
• Cloudflare: network traffic passes through Cloudflare infrastructure as described in section 6.
• Hosting and infrastructure providers: our cloud infrastructure providers process data on our behalf under appropriate data processing agreements and are not permitted to use your data for their own purposes.
• Legal authorities: where we are legally required to disclose data, or where disclosure is necessary to protect the rights, safety or property of TrustedIn.uk or others.

10. Your rights and how to exercise them

Under the EU GDPR and UK GDPR, you have the following rights regarding your personal data:

• Access: you can request a copy of the personal data we hold about you.
• Rectification: you can ask us to correct inaccurate or incomplete data.
• Erasure: you can ask us to delete your personal data, subject to legal retention obligations.
• Restriction: you can ask us to pause processing of your data in certain circumstances.
• Portability: you can ask us to provide your data in a structured, machine-readable format.
• Objection: you can object to processing based on legitimate interests.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

11. Data retention

We keep account data for as long as your account is active. Business listing data remains on the platform while the listing is live. Where you request deletion, we remove your data from active systems promptly, subject to any legal obligation to retain records — for example, transaction records may be kept for up to 7 years for tax and accounting purposes. Anonymised and aggregated data that cannot be linked back to you may be retained indefinitely.

12. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. If you are based in the EU, you may also contact the supervisory authority in your country of residence.

We would, however, always welcome the opportunity to resolve any concern directly — please contact us first at [email protected].

13. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Where changes are material, we will notify registered users by email or via a notice on the platform before the changes take effect.