Privacy Policy

Last updated: 10/09/2026

‍

This Privacy Policy governs the information collection practices of TRST01 ("Company", "we", "us", or "our"). It outlines the types of information we gather through www.trst01.com and our products - TRST01Chain, Footprint, TRST01Chain MeeS, EUDR Hub, and TRST01Veritas (together, the "Services") - and how we use that information. TRST01 is a SaaS platform that helps organisations ("Users") manage supply-chain traceability, EUDR and ESG/BRSR compliance, and carbon MRV data, including data relating to Users' own suppliers, farmers, and other third parties ("Viewers") who may be asked to submit information into the platform on a User's behalf. We process personal data in line with applicable law and industry good practice.

‍

Purpose and Scope

‍

This Policy applies to information we collect through our website and through the Services, and may also apply to information you give us offline (for example, by phone or email).

Where we provide the Services to a registered organisation (a "User"), and that User asks their own suppliers, farmers, or partners ("Viewers") to submit information into the platform, our handling of that Viewer data is governed primarily by our contract with the User and that User's own privacy practices. We are not responsible for the privacy practices of our Users or of other third parties who are not TRST01.

Some information is collected automatically through cookies and similar tracking technology - see the Cookies section below for what we use and how to control it.

‍

How We Collect Data

‍

What we collect depends on how you interact with our website and Services:

● Account creation and login - if you or your organisation signs up to use TRST01Chain, Footprint, MeeS, EUDR Hub, or TRST01Veritas, we collect your name, work email, organisation name, and password (or SSO identifier).

● Contact and demo requests - if you fill in a contact form, request a demo, or download a free guide from our website, we collect the details you provide (typically first name, last name, work email, and organisation name).

● Data submitted on behalf of a User - Viewers such as farmers, suppliers, or dealers may be asked by a User to submit information (e.g. farm/plot details, geolocation data, documents) directly into the platform. We store this on the User's behalf and process it under our agreement with that User.

● Automated / technical data - device type, browser, operating system, and IP address, collected when you visit our website or use the Services, to help us secure and improve them.

● User-generated content - documents, geolocation/polygon data, images, and records you or your organisation upload into the Services in the course of using them.

● Data from connected third-party systems - where relevant to compliance workflows, the Services may exchange data with systems such as the EU's Information System for the EUDR (EU TRACES NT), satellite/geospatial data providers, or government registries, strictly to deliver the compliance functionality you've asked for.

‍

Types of Personal Information We Collect

‍

● First name and last name

● Work email address

● Organisation name

● General location / IP address

● Where applicable to the Services: farm, plot, or supply-chain data submitted by Users or Viewers (which may include geolocation data)

‍

How We Use Your Personal Information

‍

● To provide, operate, and maintain the Services you or your organisation has signed up for.

● To respond to enquiries, demo requests, and support requests.

● To deliver guides or resources you've requested, and - only if you opt in - to send occasional emails about EUDR, ESG/BRSR, and other regulatory updates.

● To verify your identity and manage your account/login.

● To maintain accurate records and for internal record-keeping.

● To improve our website and Services, including through analytics (only with your consent, see Cookies below).

● To comply with our legal, tax, or regulatory obligations.

‍

Who Has Access to Your Data Within TRST01

‍

Access is limited to team members who need it to deliver the Services, respond to your enquiries, or provide support - for example, our product, engineering, customer success, and sales teams. Access is granted on a need-to-know basis relevant to each team's role.

‍

Who We Share Your Data With, and Why

‍

Processors: We use service providers to operate and improve our website and Services - for example, our form tool (Zoho Forms), our email delivery tool, cloud hosting infrastructure, and Google Analytics. These providers only process your data under our instructions, for the purposes we authorise.

Authorities: We may disclose information where required by law, regulation, legal process, or a government/regulatory request - including, where relevant, submissions required for EUDR due diligence statements to competent authorities, at the direction of the User submitting them.

Business transfers: If TRST01 is acquired, merges, or undergoes a similar change of control, personal data may be transferred as part of that transaction, subject to the same protections described in this Policy.

‍

Why and How Long We Retain Your Data

‍

We keep your information for as long as needed to provide the Services, respond to your enquiry, or meet our legal/tax obligations - typically for the duration of your account or subscription, or, for marketing contacts, until you unsubscribe or after a period of inactivity. Retention periods vary by data category; ask us at any time for specifics relevant to your data.

‍

Security

‍

We use administrative, technical, and organisational measures designed to protect your personal information, including access controls and staff training on data-handling practices. No method of transmission or storage is completely secure, so while we work to protect your information, we also encourage you to take sensible precautions when sharing information online.

Cookies

‍

We use essential cookies needed for the site to function, and analytics cookies (Google Analytics) that help us understand site usage. Analytics cookies only run after you accept them via our cookie banner. You can change your preference at any time using the "Cookie Preferences" link in the site footer.

‍

Your Rights Under the GDPR (EU/EEA visitors)

‍

● Right to be informed - about how your data is collected and used (this Policy).

● Right of access - to request a copy of the personal data we hold about you.

● Right to rectification - to correct inaccurate or incomplete data.

● Right to erasure - to request deletion of your data.

● Right to restrict processing - to limit how we use your data.

● Right to object - including an absolute right to object to direct marketing.

● Right to data portability - to receive your data in a portable format.

● Right not to be subject to solely automated decision-making, including profiling.

To exercise any of these rights, contact us at support@trst01.com.

‍

EU/EEA GDPR Representative (Article 27)

‍

If you are located in the EU and have questions or concerns regarding your personal data, you may contact our appointed GDPR representative:

‍

EU Representative:
Euverify Ltd (Ireland)
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork
T23 AT2P
Ireland

‍

Email: gdpr@euverify.com

‍

To submit a Data Subject Access Request (DSAR), data deletion request, or any other GDPR-related inquiry, please use our secure portal at: https://gdpr.euverify.com/verify/ed5925f9-b070-41db-85a0-2988800eeed9

‍

This link allows you to verify our appointed representative and submit GDPR requests directly. Requests submitted through this portal are logged and tracked to ensure timely response and compliance.

‍

Your Rights Under India's Digital Personal Data Protection Act, 2023 (DPDP Act)

‍

● Right to access a summary of the personal data we hold about you and how it is being processed.

● Right to correction, completion, and updating of your personal data.

● Right to erasure of your personal data, once it is no longer needed for the purpose it was collected.

● Right to withdraw consent at any time, as easily as it was given - withdrawal does not affect the lawfulness of processing carried out before withdrawal.

● Right to nominate another individual to exercise these rights on your behalf in the event of death or incapacity.

● Right to grievance redressal through our named Grievance Officer below.

Grievance Officer: Praveen V, TRST01, support@trst01.com. We will acknowledge and address requests within a reasonable time.

‍

Our Policy Concerning Children's Data

‍

Our website and Services are intended for business use and are not directed to children. We do not knowingly collect personal information from children. If we learn that we've inadvertently collected such information, we will delete it from our records.

‍

Links to Other Websites

‍

Our website may link to third-party sites not operated by us (for example, regulatory resources or partner sites). We are not responsible for the privacy practices of those sites, and encourage you to review their own privacy policies.

‍

Changes to This Policy

We may update this Policy from time to time. Material changes will be notified via email or a notice on our website. The "Last updated" date at the top of this page reflects the latest version.

‍

Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of the rights above, contact us at support@trst01.com.

‍