Privacy notice

Who is responsible

The controller for this website and for Trustwelt accounts is SIAL Networks Limited, 141c High Road, Loughton, England, IG10 4LT, registered as company number 13552665 at Companies House, England and Wales. Contact us about privacy at privacy@trustwelt.com. Where an organisation uses Trustwelt for its people, that organisation is the controller of its organisation data and Trustwelt acts as its processor under the agreement with that organisation.

Visiting this website

trustwelt.com sets no cookies, stores nothing in your browser and runs no analytics, advertising, session recording or tracking pixels.

Our web servers keep a technical log of each request: the IP address, time, requested path, status and browser type. We use it to operate and protect the site (legitimate interest). Query strings are removed before logging. Logs are kept for two years, then deleted.

When you contact us

The contact form sends your name, email address, optional organisation, the topic and your message. We use them only to reply to you, on the basis of our legitimate interest in answering, or to take steps before a contract at your request.

Messages are stored by our contact service, separately from the Trustwelt product systems, and are not written to access logs. They are kept for two years, then deleted.

Trustwelt accounts and services

When you use the Portal or connect Vault Lite to an account, we process:

• account data: email address, display name, sign-in factors (stored as hashes or protected keys), sessions;
• device data: device identity, enrolment dates and the posture results you or your organisation enabled;
• plan and subscription records: plan, period, payment status and the price agreed with you;
• for company logins and cards, the site and username, and a record of each use;
• sealed data you choose to sync or share: vault envelopes, collection items and your activity record, which are encrypted on your computer and which we cannot read.

We never receive the passwords in your vault, your master password or a card security code. Payments are handled by our payment providers on their own pages; we do not see or store your card number.

Vault Lite used without an account sends nothing to Trustwelt.

When your organisation uses Trustwelt

Your organisation sees your membership, your role, the devices it enrolled, their posture, and each use of a company login or card. It does not see your personal items, where you use them, or your activity record; at most it sees how many personal events there were in a period. Your organisation's admins act within the permissions of their role or area, and every privileged action is written to an audit record.

When you are in a family

In a Trustwelt family, the organiser sees which sites were blocked on members' computers and whether each computer is protected, never the sites you visit or your vault. For a child we keep only what protecting their computer needs, and delete it when parental control ends at 18. The details are in the Family plan terms.

Who we share it with

We use a small number of processors, bound by contract: infrastructure hosting in Europe, our payment providers for subscriptions, and email delivery for the messages the service sends. Their names and locations are available on request from privacy@trustwelt.com.

We do not sell personal data or share it for advertising.

Where data is processed

Data is processed in the United Kingdom and the European Economic Area. Where a processor is outside that area, we use the transfer safeguards the law requires.

How long we keep it

• Account data: for as long as the account exists, then deleted with it.
• Usage records of company items: as your organisation sets, a year by default; card records for the life of the card.
• Payment records: for as long as accounting and tax law require.
• Website logs and contact messages: two years.

Your rights

You can ask for access to, correction, deletion or a copy of your data, object to or restrict its processing, and withdraw consent where we rely on it. Write to privacy@trustwelt.com. You may also complain to the Information Commissioner's Office (ico.org.uk).

Changes to this notice

We date every version of this notice and describe material changes at the top.