Legal

Privacy policy

[PLACEHOLDER] Last updated: date. To be reviewed for GDPR compliance.

Who is responsible for your data

Trustivo is the data controller. [PLACEHOLDER] Legal entity, address, contact for data requests. You can reach us at hello@trustivo.cy.

What we collect and why

Order details: name, email, phone and delivery address, to fulfil and deliver your order (contract).
Account details if you create an account: email, name, phone (contract).
Messages you send us through the contact form, to answer you (legitimate interest).
Live chat: your name, email, mobile number and messages, to answer you here or by email and to find your order (legitimate interest). Chats are deleted 12 months after they close.
Payment status from Revolut. We never receive your full card number.

Who we share it with

Our payment provider (Revolut), our email provider, our hosting and authentication providers, and the courier that delivers your order. [PLACEHOLDER] Full list of processors and transfers outside the EU.

How long we keep it

[PLACEHOLDER] Retention periods (e.g. order records kept for accounting/tax obligations).

Your rights

You can ask to access, correct or delete your data, object to processing, or complain to the Cyprus Commissioner for Personal Data Protection. [PLACEHOLDER] How to exercise these rights.

Cookies and local storage

We only use strictly necessary storage, which does not require consent:

Sign-in cookies (Supabase auth): keep you logged in.
Cart id (local storage): remembers your cart between visits.
Cookie notice choice (local storage): remembers that you dismissed the notice.
Chat id (local storage): lets you continue a chat you started, on this device.

We do not use advertising or tracking cookies. If we ever add analytics, we will ask for your consent first.