Legal
Privacy notice
What personal data the Truo Trade website collects, why, where it is kept and the rights you have over it.
Who is responsible for your data
Truo Innovations Limited is the controller of personal data collected through www.truotrade.com. We are a private company limited by shares, registered in Ireland under company number 828447, with our registered office at the address shown on the Companies Registration Office public register.
For anything about this notice or your data, contact the Truo team or write to the Data Protection Contact, Truo Innovations Limited, at our registered office.
What we collect and why
| When | What we collect | Why | Legal basis (GDPR) |
|---|---|---|---|
| You send a partnership enquiry | Name, company, work email, country, website (optional), partner type, markets, services, and a record of the consent you gave and when | To assess the partnership and contact you about it. If we go ahead, the enquiry may become a partner lead in a Truo workspace, keeping its source and consent record. | Consent, Art. 6(1)(a), and steps before a contract at your request, Art. 6(1)(b) |
| You complete the export survey | Your answers, company, role, country, email and whether you want a call or a copy of the findings | To understand problems in global trade, to contact you about the research and the free-access offer, and to publish aggregated, anonymised findings | Consent, Art. 6(1)(a) |
| You visit any page | Standard server request data: IP address, browser user agent, page requested, time and response code | To deliver the site, keep it secure and investigate abuse | Legitimate interests, Art. 6(1)(f) |
We do not use advertising or analytics cookies, and we do not sell personal data or use it to build advertising profiles. The site stores one item in your browser, truo-theme, to remember whether you chose the light or dark theme. It never leaves your device.
We do not make decisions about you using only automated processing that have legal or similarly significant effects.
Who processes data for us
- Supabase stores partnership enquiries, in the EU (Ireland, eu-west-1). Access is limited to authorised Truo staff.
- Vercel hosts the website and processes the server request data above. Vercel operates a global network, so request data may be processed outside the EEA. Those transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
Both act as our processors under written data processing terms. Booking links open Calendly, which handles your booking under its own privacy policy.
How long we keep it
- Partnership enquiries and survey contact details: for as long as we are discussing the partnership or research with you, and no longer than 24 months after our last contact unless you become a customer or partner.
- Anonymised, aggregated survey findings carry no personal data and may be kept indefinitely.
- Server request logs: for the hosting provider's standard log retention period.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it to another provider. Where we rely on consent, you can withdraw it at any time; this does not affect anything we did before you withdrew. We answer within one month.
If you are unhappy with how we handle your data, you can complain to the Data Protection Commission, Ireland's supervisory authority, at dataprotection.ie, or to the authority where you live or work.
Security
Enquiries travel over HTTPS to a server function that validates them and writes to a table the public cannot read. See our security page for more.
Changes to this notice
We will update the date at the top when this notice changes, and tell you directly if a change affects data you have already given us.