TrustVerify logoTrustVerify
Decorative footer background
TrustVerify logoTrustVerify

Identity and business verification for UK marketplaces. ID document and selfie checks, UK company and director checks, and a recorded decision on every check.

020 4542 7323

Solutions

  • All solutions
  • Identity (IDV/KYC)
  • Business (KYB)
  • Bot detection
  • AML & PEP screening
  • Seller verification (KYS)
  • UK registry checks
  • Ongoing monitoring
  • Review queue & trust score
  • Fraud checks
  • IP geolocation
  • Email validation
  • Escrow (secure transactions)

Industries

  • Marketplaces

Developers

  • Platform
  • Integrations
  • Developer docs
  • API reference
  • Webhooks
  • Changelog
  • API status
  • Help centre

Blog

  • All articles
  • Glossary
  • Compare
  • Sumsub alternatives
  • Onfido alternatives
  • Veriff alternatives

Company

  • About TrustVerify
  • Careers
  • Contact sales
  • Privacy policy
  • Cookie policy
  • Terms of service

© 2026 Magnificentech Solutions Ltd (Company No. 16321180), trading as TrustVerify. Registered in England & Wales. All rights reserved. · trustverify.co.uk

TrustVerify, Willow Farm, Choppington, Northumberland NE62 5EU · 020 4542 7323

POLICIES

Cookie Policy

Version 15 October 2025 — This Cookie Policy sets out how Magnificentech Solutions Ltd trading as TrustVerify (Company No.: 16321180) uses cookies and similar technologies on its digital platforms, in accordance with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

Table Of Contents

1. Purpose and Scope2. Definitions3. Types of Cookies Used4. Platforms and Users Covered5. Legal Basis for Cookie Use6. Cookie Consent and User Preferences7. Categories of Cookies and Examples8. Cookie Retention Periods9. Managing Cookies and User Controls10. Third-Party Cookies11. Cookie Security and Breach Procedures12. User Rights and How to Exercise Them13. Roles and Responsibilities14. Policy Review and Updates15. Notification of Changes16. Contact Information

1. Purpose and Scope

This Cookie Policy sets out the principles, obligations, and procedures adopted by Magnificentech Solutions Ltd trading as TrustVerify (Company No.: 16321180) regarding the use of cookies and similar technologies on its digital platforms, including the main website (trustverify.co.uk), web application, mobile application (iOS/Android), and API platform/developer portal.

The purpose of this Policy is to provide clear, transparent information to all users — including website visitors, registered customers and clients, developers and API users, mobile app users, and employees — about how cookies are used, the types of cookies deployed, the purposes for which they are set, and the choices available to users regarding cookie management and consent.

TrustVerify is a fintech and cybersecurity SaaS provider focused on fraud prevention and compliance tools. As part of its commitment to data protection and privacy, TrustVerify ensures that the use of cookies is compliant with the UK General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications Regulations (PECR), and other applicable laws and regulatory guidance.

This Policy applies to all cookies and similar technologies (including pixels, tags, and local storage) set by TrustVerify or third parties on any device used to access TrustVerify's digital platforms, whether accessed by individuals in the United Kingdom, the European Economic Area, or internationally, subject to applicable data protection laws in each jurisdiction.

The Policy covers the following categories of cookies: strictly necessary cookies, performance/analytics cookies, functionality cookies, targeting/advertising cookies, and third-party cookies. It explains the function and retention period of each category, including session cookies, persistent cookies, first-party cookies, and third-party cookies.

Users are notified of the use of cookies via a cookie notice in the website footer, a link to this Policy in the navigation menu, and a cookie settings or preferences panel. By continuing to use TrustVerify's platforms, users provide implied consent to the use of cookies, except where explicit consent is required by law.

Users may manage or change their cookie preferences at any time through the cookie settings panel, except for strictly necessary cookies which are essential for the operation of the platforms. The Policy details the process for exercising rights under UK GDPR and PECR, including access, rectification, erasure, and objection, which may be exercised by contacting the Data Protection Officer or Privacy Team via the dedicated privacy email address provided in this Policy.

The legal basis for processing personal data via cookies is legitimate interests, as required for the secure and effective operation of TrustVerify's platforms, as well as for analytics, functionality, and marketing purposes where appropriate.

The Policy is binding on all users, employees, and third parties who access or interact with TrustVerify's digital platforms, and forms part of TrustVerify's wider data protection and compliance framework. All staff, contractors, and service providers are required to adhere to the standards and procedures set out in this Policy.

The Data Protection Officer (DPO), Marketing/Communications, and Senior Management are responsible for the implementation, monitoring, and annual review of this Policy. Significant updates will be communicated to users via direct email, in-app notification, website banner, and by updating the date on the Cookie Policy page.

In the event of a cookie security or compliance breach, TrustVerify will conduct an internal investigation, notify affected users and the Information Commissioner's Office (ICO) where required, and implement remediation actions including staff retraining.

Any queries or requests relating to this Policy or the use of cookies should be directed to the dedicated privacy email address or the Data Protection Officer, whose contact details are provided in this Policy.

2. Definitions

For the purposes of this Cookie Policy, the following definitions apply:

•Cookie means a small text file that is placed on a user's device by a website, application, or online service, enabling the platform to recognise the device, store preferences, and collect information about user interactions.
•Strictly Necessary Cookies means cookies that are essential for the operation of the platform, enabling core functions such as security, network management, and accessibility. These cookies cannot be disabled through user preferences.
•Performance/Analytics Cookies means cookies used to collect information about how users interact with the platform, including pages visited, time spent, and error messages. These cookies help improve the performance and functionality of the platform.
•Functionality Cookies means cookies that enable the platform to remember user choices and preferences, such as language, region, or customised settings, to provide enhanced and personalised features.
•Targeting/Advertising Cookies means cookies used to deliver relevant advertisements to users, track the effectiveness of advertising campaigns, and build user profiles based on browsing behaviour across websites and applications.
•Third Party Cookies means cookies set by domains other than TrustVerify's own domain, typically by external service providers, partners, or advertisers, to enable additional functionality or analytics.
•Session Cookie means a cookie that is temporarily stored on a user's device and deleted when the browser or application is closed.
•Persistent Cookie means a cookie that remains on a user's device for a specified period or until manually deleted, enabling the platform to recognise returning users and retain preferences across sessions.
•First-Party Cookie means a cookie set directly by TrustVerify's domain or digital platform, used to support core functionality, analytics, or user experience.
•Third-Party Cookie means a cookie set by a domain other than TrustVerify's, typically for analytics, advertising, or integration with external services.
•API Usage Cookie means a cookie or similar technology used to monitor, authenticate, or analyse activity on TrustVerify's API platform or developer portal.
•User means any individual or entity accessing or using TrustVerify's digital platforms, including website visitors, registered customers, clients, developers, API users, mobile app users, and employees.
•Platform means any digital service, website, web application, mobile application, or API operated by TrustVerify, including trustverify.co.uk, user dashboards, SaaS portals, mobile apps, and developer portals.
•Consent means the indication by a user, by continued use of the platform or by managing cookie preferences, that they agree to the use of cookies as described in this policy.
•Cookie Settings Panel means the interface provided on TrustVerify's platforms that allows users to manage, accept, or reject specific categories of cookies in accordance with their preferences.
•Data Protection Officer (DPO) means the individual or role responsible for overseeing data protection, privacy compliance, and cookie management for TrustVerify.
•Personal Data means any information relating to an identified or identifiable natural person, as defined under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, which may be collected or processed via cookies.
•Legitimate Interests means the legal basis under UK GDPR relied upon by TrustVerify for processing personal data via cookies, where such processing is necessary for the operation, security, or improvement of the platform and does not override the rights and freedoms of users.
•Retention Period means the duration for which a cookie remains active on a user's device, typically up to 30 days unless otherwise specified in this policy or the cookie settings panel.
•Supervisory Authority means the Information Commissioner's Office (ICO) or any other relevant regulatory authority responsible for monitoring and enforcing data protection and privacy laws in the United Kingdom.
•Cookie Security Breach means any unauthorised access, disclosure, alteration, or loss of data collected or processed via cookies, requiring investigation, notification, and remediation in accordance with applicable law and internal procedures.

3. Types of Cookies Used

TrustVerify uses a variety of cookies and similar technologies across its digital platforms, including the main website, web application, mobile application, and API/developer portal. The following categories of cookies may be deployed, each serving distinct purposes to ensure the secure, efficient, and user-friendly operation of our services.

Strictly Necessary Cookies are essential for the operation of our platforms. These cookies enable core functionalities such as user authentication, secure log-in, session management, fraud prevention, and access to protected areas. Without these cookies, our services cannot function properly. They are typically set in response to actions made by users, such as logging in or completing forms, and do not require user consent under applicable law.

Performance/Analytics Cookies collect information about how users interact with our platforms, including pages visited, features used, and error messages encountered. These cookies help us monitor system performance, improve user experience, and identify areas for enhancement. Examples include Google Analytics and error tracking tools such as Sentry. Data collected is aggregated and anonymised wherever possible.

Functionality Cookies allow our platforms to remember user choices and preferences, such as language selection, display settings, and saved log-in details. These cookies enhance the usability and personalisation of our services, enabling features like chatbots, user feedback widgets, and tailored content. Disabling these cookies may impact the availability of certain functionalities.

Targeting/Advertising Cookies are used to deliver relevant advertisements and marketing communications to users based on their browsing behaviour and interests. These cookies may be set by TrustVerify or by third-party advertising partners, such as Facebook Pixel or Google Ads. They track user activity across websites and platforms to build a profile of interests and display targeted content. Users may manage their preferences for these cookies via the cookie settings panel.

Third Party Cookies are set by domains other than TrustVerify's own, typically by external service providers, analytics partners, or embedded content (e.g., video players, social media widgets). These cookies may collect data about user interactions with our platforms and other websites. TrustVerify does not control the use of third-party cookies and recommends reviewing the privacy policies of relevant third parties for further information.

Cookies used on our platforms may be classified as session cookies (which expire when the browser is closed) or persistent cookies (which remain on the device for a defined period, typically up to 30 days). Both first-party cookies (set by TrustVerify) and third-party cookies (set by external domains) are utilised, depending on the function and service provided.

The use of cookies is based on our legitimate interests in ensuring the security, functionality, and improvement of our services, as well as compliance with legal and regulatory obligations. Where required by law, user consent is obtained for non-essential cookies through a cookie notice and settings panel, allowing users to manage their preferences at any time.

TrustVerify uses specific cookies that are essential for platform security, fraud prevention, and trust scoring. These cookies are classified as 'strictly necessary' under the Privacy and Electronic Communications Regulations (PECR) and do not require user consent. They include:

Strictly Necessary Cookies

Cookie Name / TypePurposeThird PartyRetentionConsentApplies To
Session ID CookieUser authentication, session managementNoSessionNot requiredAll users
Security Token CookiePrevent fraud, secure log-inNoSession / 30 daysNot requiredAll users
Trust Scoring CookieCalculate and display trust scoresNoSession / 30 daysNot requiredRegistered users, API users
API Usage Auth CookieAuthenticate API requests, prevent abuseNoSession / 30 daysNot requiredAPI developers

These cookies are deployed automatically when accessing secure areas, logging in, or using API endpoints. For API developers, additional cookies may be set to monitor usage and prevent abuse, but these are also strictly necessary for the secure operation of the API platform.

Profiling, Fraud Detection, and Trust Scoring: TrustVerify uses certain cookies and similar technologies to perform profiling for the purposes of fraud detection and trust score generation. Profiling involves the automated processing of personal data (such as behavioural, transactional, and device data) to assess the likelihood of fraudulent activity and to generate a trust score for users. This process is essential for the security and integrity of the platform and is based on TrustVerify's legitimate interests (UK GDPR Article 6(1)(f)).

The data processed may include login patterns, device identifiers, transaction history, and usage analytics. The outcome of this profiling may affect access to certain services or trigger additional verification steps. Users have the right to object to profiling and automated decision-making under GDPR Articles 21 and 22, as detailed in the 'User Rights and How to Exercise Them' section of this Policy.

4. Platforms and Users Covered

This Cookie Policy applies to all digital platforms operated by Magnificentech Solutions Ltd trading as TrustVerify, including the main website (trustverify.co.uk), web application (user dashboards and SaaS portal), mobile application (iOS/Android), and the API platform or developer portal. The Policy governs the use of cookies and similar technologies across these platforms, regardless of the device or method of access.

The Policy covers all categories of users who may interact with TrustVerify's digital platforms, including:

•Website visitors accessing public or informational pages.
•Registered customers and clients using the web application, SaaS portal, or mobile app for identity verification, trust scoring, escrow, or related services.
•Developers and API users accessing the developer portal, API documentation, or integrating with TrustVerify's services.
•Mobile app users engaging with TrustVerify's services via iOS or Android applications.
•Employees and staff who access internal or restricted areas of the platforms for operational, administrative, or support purposes.

The Policy applies to all cookies and similar technologies set by TrustVerify (first-party cookies) as well as those set by third parties (third-party cookies) on any of the covered platforms. This includes session cookies, persistent cookies, and cookies used for strictly necessary, performance/analytics, functionality, targeting/advertising, and third-party purposes.

All users, regardless of their role or method of access, are subject to the provisions of this Policy. Users are notified of the use of cookies via a cookie notice in the website footer, a link to the Cookie Policy in the navigation menu, and a cookie settings or preferences panel available on each platform.

Users may manage or change their cookie preferences for all non-essential cookie categories (performance/analytics, functionality, targeting/advertising, and third-party cookies) via the cookie settings panel. Strictly necessary cookies are required for the operation of the platforms and cannot be disabled.

The Policy is binding on all users and forms part of TrustVerify's wider data protection and compliance framework. All employees, departments, and authorised personnel must ensure compliance with this Policy when processing or managing cookies and related data.

External service providers, contractors, or partners who process cookies or related data on behalf of TrustVerify must adhere to contractual obligations and data protection standards equivalent to those set out in this Policy. Any queries regarding the platforms or users covered by this Policy should be directed to the Data Protection Officer or designated contact person, whose details are provided in the Contact section of this Policy.

5. Legal Basis for Cookie Use

The use of cookies and similar technologies on the digital platforms of Magnificentech Solutions Ltd trading as TrustVerify is governed by applicable data protection and privacy laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

TrustVerify processes personal data collected via cookies on the basis of legitimate interests, as permitted under Article 6(1)(f) of the UK GDPR, except where consent is required by law. The company's legitimate interests include ensuring the security and functionality of its platforms, improving user experience, monitoring performance, and supporting business operations such as fraud prevention and compliance monitoring.

For strictly necessary cookies, which are essential for the operation of the website, web application, mobile application, and API platform, TrustVerify relies on its legitimate interests to provide secure, reliable, and effective digital services. These cookies do not require user consent under PECR, but users are informed of their use through the Cookie Policy and website notifications.

For performance/analytics, functionality, targeting/advertising, and third-party cookies, TrustVerify relies on implied consent, in line with regulatory guidance, by providing clear information and enabling users to manage their preferences through a cookie settings panel. Users are notified of cookie use via a persistent cookie notice, policy links, and a settings interface, and may adjust their preferences at any time.

Where cookies are used to process personal data for purposes beyond those strictly necessary for platform operation, such as analytics, advertising, or enhanced functionality, TrustVerify ensures that users are provided with transparent information about the nature, purpose, and duration of such cookies, as well as the identity of any third parties involved. Users are given the opportunity to object to or manage these cookies in accordance with their rights under the UK GDPR and PECR.

TrustVerify maintains records of the categories of cookies used, the legal basis for their deployment, and the mechanisms for obtaining and recording user consent or preferences. The company reviews its cookie practices annually, or more frequently as required by changes in law or business operations, to ensure ongoing compliance with legal requirements and industry best practice.

In the event of a change in the legal basis for processing personal data via cookies, or a material change in the types or purposes of cookies used, TrustVerify will update this policy, notify users through appropriate channels, and, where required, seek renewed consent or provide additional information in accordance with applicable law.

Users may exercise their rights in relation to cookies, including the right to object, withdraw consent, or request further information, by contacting the Data Protection Officer or privacy team using the contact details provided in this policy. All requests will be handled in accordance with statutory timeframes and company procedures.

6. Cookie Consent and User Preferences

This section sets out the principles, procedures, and user rights relating to the use of cookies and similar technologies on the digital platforms operated by Magnificentech Solutions Ltd trading as TrustVerify (Company No.: 16321180). The purpose is to ensure transparency, user choice, and compliance with applicable UK data protection and privacy laws, including the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

TrustVerify uses cookies and similar technologies across its Main Website (trustverify.co.uk), Web Application (including user dashboards and SaaS portal), Mobile Application (iOS/Android), and API Platform/Developer Portal. This applies to all categories of users, including website visitors, registered customers/clients, developers/API users, mobile app users, and employees/staff.

The following categories of cookies may be deployed:

•Strictly Necessary Cookies: Essential for the operation of the platform, such as session ID cookies and security authentication.
•Performance/Analytics Cookies: Used to collect aggregated data on platform usage, error tracking, and performance monitoring (e.g., Google Analytics, Sentry).
•Functionality Cookies: Enable enhanced features and personalisation, such as user preferences, chatbots, and feedback widgets.
•Targeting/Advertising Cookies: Facilitate delivery of relevant advertising and measurement of campaign effectiveness (e.g., Facebook Pixel, Google Ads).
•Third Party Cookies: Set by external service providers for analytics, advertising, or embedded content.

Cookies may be session-based (expiring after the browser session) or persistent (retained for up to 30 days), and may be set as first-party (by TrustVerify) or third-party (by external domains).

Users are notified of cookie use via a cookie notice in the website footer, a link to the Cookie Policy in the navigation menu, and a cookie settings or preferences panel. By continuing to use TrustVerify's platforms, users provide implied consent to the use of cookies, except where explicit consent is required by law.

Users can manage or change their cookie preferences at any time via the cookie settings panel, except for strictly necessary cookies which are required for platform functionality. Options are provided to enable or disable Performance/Analytics, Functionality, Targeting/Advertising, and Third Party Cookies.

Strictly necessary cookies, including those used for security, fraud prevention, and trust scoring, are exempt from consent requirements under PECR. These cookies are essential for the safe and effective operation of TrustVerify's platforms and cannot be disabled by users.

The legal basis for processing personal data via cookies is TrustVerify's legitimate interests in ensuring platform security, performance, and user experience, balanced with user rights and expectations. Where required, consent will be obtained in accordance with UK GDPR and PECR. TrustVerify may use a dedicated cookie consent management tool or in-house mechanisms to record and manage user preferences, and will ensure that all cookie practices are regularly reviewed for compliance.

Users have the right to request access to, rectification or erasure of, or object to the processing of their personal data collected via cookies, in accordance with UK GDPR. Requests should be submitted via email to the Data Protection Officer or Privacy Team using the contact details provided in this policy.

The Data Protection Officer (DPO), Marketing/Communications, and Senior Management are responsible for cookie management, compliance, and annual policy review. The Cookie Policy will be reviewed at least annually, or sooner if required by changes in law or business practices. Users will be notified of significant updates to the Cookie Policy by direct email to registered users, in-app notifications (web/mobile), a prominently displayed update date on the Cookie Policy page, and a website banner or notification.

In the event of a cookie security or compliance breach, TrustVerify will conduct an internal investigation, notify affected users and the Information Commissioner's Office (ICO) where required, and implement remediation actions including staff retraining. For cookie-related queries or requests, users may contact the Privacy Team or Data Protection Officer at the dedicated privacy email address provided in this policy.

This section should be read in conjunction with the full Cookie Policy, Privacy Policy, and related compliance documentation. TrustVerify reserves the right to update this section in line with legal, regulatory, or operational requirements.

7. Categories of Cookies and Examples

TrustVerify uses a range of cookies and similar technologies across its digital platforms, including the main website, web application, mobile application, and API developer portal. These cookies are categorised according to their function, source, and duration, and are used to support the secure, efficient, and user-friendly operation of our services. The following categories of cookies may be deployed on TrustVerify's platforms:

•Strictly Necessary Cookies: Essential for the operation of our platforms and enable core functionality such as user authentication, session management, and security features. Examples include session ID cookies, authentication tokens, and load balancing cookies.
•Performance/Analytics Cookies: Collect information about how users interact with our platforms, such as pages visited, time spent on site, and error messages encountered. Examples include Google Analytics cookies, error tracking cookies (e.g., Sentry), and API usage analytics.
•Functionality Cookies: Enable enhanced functionality and personalisation, such as remembering user preferences, language settings, and custom configurations. They may also support features like chatbots or user feedback widgets. Examples include user preference cookies and cookies that store accessibility settings.
•Targeting/Advertising Cookies: Used to deliver relevant advertisements to users and to measure the effectiveness of marketing campaigns. Examples include Facebook Pixel, Google Ads cookies, and cookies used for retargeting or behavioural advertising.
•Third Party Cookies: Set by domains other than TrustVerify's own and may be used by third-party service providers to deliver additional functionality, analytics, or advertising. Examples include embedded content cookies, social media integration cookies, and cookies set by external analytics or advertising partners.

Each category of cookie may include session cookies (which expire when the browser is closed), persistent cookies (which remain on the device for a set period, typically up to 30 days), first-party cookies (set by TrustVerify's domain), and third-party cookies (set by external domains).

Users can manage their preferences for Performance/Analytics, Functionality, Targeting/Advertising, and Third Party Cookies via the cookie settings panel available on our platforms. Strictly Necessary Cookies cannot be disabled as they are required for the secure and effective operation of our services.

The use of cookies on TrustVerify's platforms is based on legitimate interests, and user consent is implied through continued use of the platform. Users are notified of cookie usage via a notice in the website footer, a link to the Cookie Policy, and a cookie settings panel. For further information about the specific cookies used on our platforms, including their names, purposes, and retention periods, users may refer to the cookie settings panel or contact our Data Protection Officer or Privacy Team using the details provided in this policy.

8. Cookie Retention Periods

TrustVerify is committed to ensuring that all cookies set on its digital platforms are retained only for as long as necessary to fulfil their intended purposes, in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR). This section outlines the retention periods for each category of cookies used on the Main Website, Web Application, Mobile Application, and API Platform/Developer Portal.

The following principles apply to cookie retention:

•Strictly Necessary Cookies are typically session-based and expire automatically when the user closes their browser or logs out. In some cases, persistent strictly necessary cookies may be retained for up to 30 days to support essential security or authentication functions.
•Performance/Analytics Cookies, such as those used for website analytics (e.g., Google Analytics), are retained for a maximum of 30 days unless a shorter period is required for specific analytics or error tracking purposes.
•Functionality Cookies, which store user preferences or enhance platform features (e.g., language selection, chatbots, feedback widgets), are retained for up to 30 days unless the user deletes them sooner or changes their preferences via the cookie settings panel.
•Targeting/Advertising Cookies, including those set by third-party providers (e.g., Facebook Pixel, Google Ads), are retained for a maximum of 30 days. These cookies are used to deliver relevant advertising and measure the effectiveness of marketing campaigns.
•Third Party Cookies, set by external domains integrated with TrustVerify's platforms (such as analytics, advertising, or embedded content providers), are subject to the retention periods specified by the respective third parties. TrustVerify endeavours to ensure that such cookies do not exceed a 30-day retention period.

All session cookies are automatically deleted when the browser session ends. Persistent cookies are set to expire after 30 days unless otherwise specified in this policy or required by law.

Strictly necessary cookies used for security, fraud prevention, and trust scoring are retained only for the duration necessary to fulfil their purpose, typically for the session or up to 30 days. Profiling and trust scoring data processed via cookies is not retained longer than required for fraud detection and platform integrity.

Users may manage or delete cookies at any time using the cookie settings panel available on each platform, or by adjusting their browser or device settings. Deleting or disabling certain cookies may affect the functionality or performance of TrustVerify's services.

TrustVerify reviews its cookie retention practices annually, or more frequently if required by changes in law, technology, or business operations. Any changes to retention periods will be communicated to users via the methods set out in this policy. In the event of a security or compliance breach involving cookies, TrustVerify will conduct an internal investigation, notify affected users and the Information Commissioner's Office (ICO) where required, and implement remediation actions including staff retraining. For further information regarding cookie retention periods or to exercise your rights under UK data protection law, please contact the Data Protection Officer or Privacy Team at the contact details provided in this policy.

9. Managing Cookies and User Controls

TrustVerify is committed to ensuring transparency and user control in relation to the use of cookies and similar technologies across all digital platforms, including the main website (trustverify.co.uk), web application, mobile application, and API/developer portal. This section sets out the procedures, user rights, and technical measures in place for managing cookies in accordance with the UK General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications Regulations (PECR), and other applicable laws.

Cookies are used to support essential platform functionality, enhance user experience, analyse performance, enable personalisation, and facilitate targeted advertising. The categories of cookies deployed include strictly necessary cookies, performance/analytics cookies, functionality cookies, targeting/advertising cookies, and third-party cookies. Both session and persistent cookies may be set, and cookies may be first-party (set by TrustVerify) or third-party (set by external providers).

Users are notified of cookie usage via a persistent cookie notice in the website footer, a link to the Cookie Policy in the main navigation, and a cookie settings or preferences panel accessible on all platforms. By continuing to use TrustVerify's platforms, users provide implied consent to the use of cookies, except where explicit consent is required by law.

Users may manage or change their cookie preferences at any time through the cookie settings panel. The panel allows users to enable or disable non-essential cookies, including performance/analytics, functionality, targeting/advertising, and third-party cookies. Strictly necessary cookies, which are essential for the operation of the platform, cannot be disabled.

Examples of cookies used on TrustVerify's platforms include session ID cookies, user preferences cookies, analytics cookies (such as Google Analytics), advertising targeting cookies (such as Facebook Pixel and Google Ads), functionality enhancement cookies (such as chatbots and user feedback widgets), API usage cookies, and error tracking/performance monitoring cookies (such as Sentry).

The legal basis for processing personal data via cookies is legitimate interests, except where consent is required for non-essential cookies. Cookie data is retained for a maximum of 30 days unless a shorter or longer period is required for technical or legal reasons.

Users have the right to access, rectify, erase, restrict, or object to the processing of their personal data collected via cookies, in accordance with UK GDPR and PECR. Requests to exercise these rights should be submitted via email to the Data Protection Officer or Privacy Team. Contact details are provided in the Cookie Policy and on the TrustVerify website.

Cookie management, compliance, and policy review are the responsibility of the Data Protection Officer (DPO), Marketing/Communications, and Senior Management. The Cookie Policy is reviewed annually, or more frequently if required by changes in law, technology, or business operations. Significant updates to the Cookie Policy will be communicated to users via direct email to registered users, in-app notifications, a prominently displayed update date on the Cookie Policy page, and a website banner or notification.

In the event of a cookie security or compliance breach, TrustVerify will conduct an internal investigation and reporting process, notify affected users and the Information Commissioner's Office (ICO) where required, and implement remediation actions and staff retraining as appropriate. For all cookie-related queries or requests, users may contact the dedicated privacy email address or the Data Protection Officer.

10. Third-Party Cookies

Third-Party Cookies are cookies set by domains other than TrustVerify's own digital platforms. These cookies are placed by external service providers and partners to enable additional functionality, analytics, advertising, or integration with third-party services. TrustVerify uses third-party cookies on its Main Website, Web Application, Mobile Application, and API Platform/Developer Portal to support the delivery and enhancement of its fintech and cybersecurity SaaS services.

Third-party cookies may be used for the following purposes:

•Analytics and performance monitoring, such as Google Analytics, to collect aggregated usage data and help us understand how users interact with our platforms.
•Advertising and targeting, including cookies set by advertising networks (e.g., Facebook Pixel, Google Ads) to deliver relevant advertisements and measure campaign effectiveness.
•Functionality enhancements, such as chatbots, user feedback widgets, or embedded content, which may be provided by third-party vendors.
•API usage and developer analytics, including cookies set by third-party tools to monitor API performance and usage patterns.
•Error tracking and performance monitoring, such as Sentry, to identify and resolve technical issues affecting user experience.

Third-party cookies may be session-based (expiring when you close your browser) or persistent (remaining on your device for a set period, typically up to 30 days). They may be set by domains other than trustverify.co.uk and may collect information such as device identifiers, IP addresses, browser types, and user interactions with TrustVerify's platforms.

TrustVerify does not control the operation of third-party cookies and is not responsible for the privacy practices of external providers. Users are encouraged to review the privacy and cookie policies of relevant third parties for further information on how their data is processed.

Users can manage their preferences for third-party cookies via the cookie settings or preferences panel available on TrustVerify's platforms. Where technically feasible, users may opt out of non-essential third-party cookies. However, disabling certain third-party cookies may affect the availability or functionality of some features.

The legal basis for processing personal data via third-party cookies is legitimate interests, as these cookies support the security, performance, and commercial viability of TrustVerify's services. Where required by law, user consent will be obtained before third-party cookies are set.

TrustVerify integrates with certain third-party service providers and enables API interactions for developers. The following table summarises the key data flows, purposes, and legal bases:

Third-Party Integrations

Integration / Third PartyPurposeData SharedLegal BasisApplies To
Google AnalyticsUsage analyticsIP address, usage dataLegitimate interestsVisitors who accept analytics cookies
SentryError trackingError logs, device infoLegitimate interestsAll users
Facebook Pixel / Google AdsAdvertising / retargetingCookie ID, browsing dataConsent (where required)All users
API Developer PortalAPI usage monitoringAPI keys, usage logsLegitimate interestsAPI developers

All third-party integrations are subject to contractual safeguards and data protection standards. TrustVerify reviews the use of third-party cookies annually and updates this policy as necessary to ensure ongoing compliance with UK GDPR, PECR, and other applicable data protection laws. Any significant changes will be communicated to users via direct email, in-app notification, website banner, and by updating the policy date.

Users may exercise their rights regarding third-party cookies, including access, rectification, erasure, or objection, by contacting the Data Protection Officer or Privacy Team at the dedicated privacy email address provided in this policy. In the event of a security or compliance breach involving third-party cookies, TrustVerify will conduct an internal investigation, notify affected users and the Information Commissioner's Office (ICO) where required, and implement remediation actions and staff retraining as appropriate.

11. Cookie Security and Breach Procedures

We, Magnificentech Solutions Ltd trading as TrustVerify, are committed to maintaining the security and integrity of all cookies and similar technologies used across our digital platforms, including the main website, web application, mobile application, and API platform. This section sets out the procedures and controls in place to safeguard cookies, detect and respond to cookie-related security incidents, and ensure compliance with applicable data protection laws.

All cookies, whether strictly necessary, performance, functionality, targeting/advertising, or third-party, are subject to robust technical and organisational security measures. These include:

•Encryption of cookie data in transit and, where applicable, at rest, to prevent unauthorised access or tampering.
•Implementation of secure cookie attributes (e.g., HttpOnly, Secure, SameSite) to mitigate risks of interception, cross-site scripting (XSS), and cross-site request forgery (CSRF) attacks.
•Regular review and minimisation of cookie lifespans, with a standard retention period of 30 days unless a shorter period is required for specific purposes.
•Access controls and authentication requirements for any systems or personnel managing cookie settings, consent, or data.

In the event of a suspected or actual cookie security breach, the following procedures will be followed:

•Immediate internal investigation by the Data Protection Officer (DPO) and relevant technical teams to assess the nature, scope, and impact of the breach.
•Containment and remediation actions, including disabling affected cookies, patching vulnerabilities, and restoring secure operation.
•Notification to affected users without undue delay, providing clear information on the nature of the breach, potential risks, and recommended actions.
•Notification to the Information Commissioner's Office (ICO) where required by law, in accordance with UK GDPR and PECR obligations.
•Comprehensive documentation of the breach, investigation findings, actions taken, and lessons learned, retained for audit and compliance purposes.

All staff involved in cookie management or platform security will receive regular training on secure cookie handling, breach detection, and incident response protocols. Ongoing monitoring and periodic security audits are conducted to identify vulnerabilities, ensure compliance with this policy, and support continuous improvement of cookie security practices.

Users may report suspected cookie security issues or breaches by contacting the Data Protection Officer or privacy team using the contact details provided in this policy. All reports will be treated as confidential and investigated promptly. This section is reviewed annually, or more frequently if required by changes in law, technology, or business operations, to ensure ongoing effectiveness and compliance with industry best practice.

12. User Rights and How to Exercise Them

Individuals whose personal data is processed through the use of cookies on TrustVerify's digital platforms are entitled to exercise a range of rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). These rights apply to all users, including website visitors, registered customers, developers, mobile app users, and employees.

The following rights are available to users in relation to personal data collected or processed via cookies:

•Right to be Informed: Users have the right to receive clear and transparent information about the use of cookies, the types of data collected, the purposes of processing, and the legal basis for such processing.
•Right of Access: Users may request confirmation as to whether their personal data has been collected via cookies and, if so, request access to that data and information about its processing.
•Right to Rectification: Users may request the correction of inaccurate or incomplete personal data collected through cookies.
•Right to Erasure: Also known as the 'right to be forgotten', users may request the deletion of personal data collected via cookies where there is no lawful basis for its continued processing, subject to certain legal exceptions.
•Right to Restrict Processing: Users may request the restriction of processing of their personal data obtained through cookies in certain circumstances, such as where the accuracy of the data is contested or the processing is unlawful.
•Right to Object: Users may object to the processing of their personal data collected via cookies, particularly where processing is based on legitimate interests or for direct marketing purposes.
•Right to Withdraw Consent: Where processing is based on user consent, users have the right to withdraw their consent to the use of non-essential cookies at any time, without affecting the lawfulness of processing prior to withdrawal.
•Right to Data Portability: Where applicable, users may request to receive their personal data collected via cookies in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.

In addition to the rights set out above, users have the right to object to profiling and automated decision-making under GDPR Articles 21 and 22. Where profiling or automated decisions (such as trust scoring) produce legal or similarly significant effects, users may request human intervention, express their point of view, and contest the decision. Requests should be submitted to the Data Protection Officer using the contact details provided in this Policy.

Users may exercise their rights by contacting the Data Protection Officer or Privacy Team via the dedicated privacy email address provided in this policy. Requests should specify the right(s) being exercised and provide sufficient information to verify the user's identity.

Upon receipt of a valid request, TrustVerify will acknowledge the request and respond within one month, in accordance with statutory timeframes. Where requests are complex or numerous, this period may be extended by a further two months, and the user will be informed of any such extension and the reasons for it.

TrustVerify will provide information or take the requested action free of charge. However, where requests are manifestly unfounded or excessive, particularly if repetitive, TrustVerify reserves the right to charge a reasonable fee or refuse to act on the request, in accordance with applicable law.

In certain circumstances, TrustVerify may be required to retain or restrict access to personal data collected via cookies in order to comply with legal obligations or to establish, exercise, or defend legal claims. Where this applies, users will be informed of the reasons for any refusal or restriction, unless prohibited by law.

Users who are dissatisfied with the handling of their request or the outcome may raise a complaint using the dedicated privacy email address set out in this policy. All complaints will be investigated internally and may be escalated to the Data Protection Officer or senior management as appropriate. If a user remains dissatisfied after internal review, they have the right to lodge a complaint with the Information Commissioner's Office (ICO) or, where applicable, with a supervisory authority in the EEA.

13. Roles and Responsibilities

The following roles and responsibilities apply to the management, implementation, and oversight of the TrustVerify Cookie Policy across all digital platforms, including the main website, web application, mobile application, and API platform.

The Data Protection Officer (DPO) is responsible for:

•Overseeing compliance with all applicable data protection and privacy laws relating to the use of cookies, including the UK GDPR and PECR.
•Reviewing and approving the Cookie Policy and any related procedures, ensuring they reflect current legal requirements and best practices.
•Responding to user queries, requests, or complaints regarding cookies, including the exercise of data subject rights.
•Coordinating internal investigations and reporting in the event of a cookie-related security or compliance breach, including notification to affected users and the Information Commissioner's Office (ICO) where required.

The Marketing/Communications team is responsible for:

•Ensuring that all cookie notices, banners, and preference panels are clear, accessible, and compliant with the Cookie Policy and applicable law.
•Maintaining up-to-date information on the types and purposes of cookies used on all TrustVerify platforms.
•Coordinating with the DPO to communicate significant updates to the Cookie Policy to users via email, in-app notifications, website banners, and policy update dates.

Senior Management is responsible for:

•Approving the Cookie Policy and ensuring that adequate resources are allocated for its effective implementation and review.
•Reviewing the Cookie Policy annually, or more frequently if required by changes in law, technology, or business operations.
•Ensuring that all staff are aware of their responsibilities regarding cookie management, user consent, and data protection obligations.

All employees and staff are required to comply with the Cookie Policy and all related procedures when handling user data or managing cookies on TrustVerify platforms; participate in regular training and awareness sessions on data protection, privacy, and cookie management as directed by the DPO or Senior Management; and promptly report any suspected or actual cookie-related incidents, breaches, or user complaints to the DPO or designated contact.

Where third-party service providers or partners set or access cookies on TrustVerify platforms, the relevant contract owner or relationship manager is responsible for ensuring that appropriate contractual safeguards are in place to require third parties to comply with TrustVerify's Cookie Policy and applicable data protection laws, and for monitoring third-party compliance and escalating any issues or breaches to the DPO and Senior Management.

The Cookie Policy and related procedures will be reviewed at least annually, or sooner if required by changes in law, technology, or business practices. All updates will be communicated to users in accordance with the notification procedures set out in this policy.

14. Policy Review and Updates

This Cookie Policy is subject to regular review to ensure ongoing compliance with applicable data protection laws, regulatory requirements, and industry best practices relevant to the operations of Magnificentech Solutions Ltd trading as TrustVerify.

The policy shall be reviewed at least annually by the Data Protection Officer (DPO), Marketing/Communications, and Senior Management, or more frequently if required by changes in law, regulatory guidance, business operations, or identified risks.

The review process will include:

•Assessment of the effectiveness of current cookie management practices, user consent mechanisms, and controls.
•Evaluation of any changes in applicable data protection legislation, including but not limited to the UK GDPR, Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
•Consideration of feedback from users, employees, clients, and other stakeholders regarding the adequacy, clarity, and transparency of the Cookie Policy.
•Review of internal audit findings, compliance monitoring results, and incident reports relating to cookie usage and data protection.
•Identification of any new or emerging risks, technologies, or business processes that may impact cookie management or user privacy.

Any amendments to this Cookie Policy will be approved by Senior Management and communicated promptly to all relevant parties, including employees, clients, and third parties as appropriate. Updated versions of the Cookie Policy will be published on the TrustVerify website and made available upon request. The update date will be prominently displayed on the Cookie Policy page.

Where significant changes are made to the policy, TrustVerify will notify users by direct email to registered users, in-app notification (web/mobile), and a website banner or notification. All employees and relevant stakeholders are required to familiarise themselves with the most current version of this policy and adhere to its provisions.

TrustVerify will maintain records of all policy reviews, updates, and approvals in accordance with its record-keeping obligations. Where significant changes are made to the policy or cookie management practices, TrustVerify will provide appropriate training or guidance to ensure continued understanding and compliance. In the event of a cookie security or compliance breach, TrustVerify will conduct an internal investigation and reporting, notify affected users and the Information Commissioner's Office (ICO) where required, and implement remediation actions and staff retraining as necessary.

This section should be read in conjunction with related policies, including but not limited to the Data Protection Policy, Information Security Policy, and Records Retention Policy.

15. Notification of Changes

We, Magnificentech Solutions Ltd trading as TrustVerify, are committed to maintaining transparency and compliance in relation to the use of cookies and similar technologies on all our digital platforms. This section sets out our procedures and obligations for notifying users of any changes to this Cookie Policy or our cookie practices.

We will review and update this Cookie Policy at least annually, or more frequently if required by changes in law, regulatory guidance, business operations, or the introduction of new cookies or technologies. All updates will be approved by the Data Protection Officer (DPO), Marketing/Communications, and Senior Management.

Where material changes are made to the Cookie Policy or our use of cookies, we will provide clear and timely notification to users through one or more of the following methods:

•Direct email notification to registered users, outlining the nature and impact of the changes.
•In-app notifications on the web application, mobile application, or developer portal, alerting users to the update.
•A prominent website banner or notification on the main website and user dashboards, with a summary of the changes and a link to the updated Cookie Policy.

The update date will be clearly displayed at the top of the Cookie Policy page to ensure users are aware of the most recent version. Users are encouraged to review the Cookie Policy regularly to stay informed about our use of cookies and their rights. Continued use of our platforms following notification of changes constitutes acceptance of the updated policy, unless otherwise required by law.

Where required by law, we will seek renewed consent for the use of certain categories of cookies following any material change to the types of cookies used, the purposes for which they are used, or the legal basis for processing. If users have any questions or concerns regarding changes to the Cookie Policy, or wish to exercise their rights in relation to cookies, they may contact the Data Protection Officer or Privacy Team using the contact details provided in this policy.

In the event of a significant change to our cookie practices that may impact user privacy or data protection rights, we will conduct an internal review and, where appropriate, update our records, provide additional staff training, and implement any necessary technical or organisational measures to ensure ongoing compliance. All records of policy updates, notifications, and user communications will be maintained in accordance with our record-keeping obligations and will be available for audit or regulatory review as required.

16. Contact Information

For all queries, requests, or concerns relating to the use of cookies on the digital platforms operated by Magnificentech Solutions Ltd trading as TrustVerify, individuals are encouraged to contact the company's designated privacy contact or Data Protection Officer (DPO). The contact details for cookie-related matters are as follows:

Dedicated privacy email: privacy@trustverify.co.uk
Data Protection Officer: Michael Omotayo (registration reference: ZB962144)
DPO job title: Director

Individuals may use the above contact details to request information about the cookies used on TrustVerify's platforms; exercise their rights under applicable data protection laws (including UK GDPR and PECR), such as the right to access, rectify, erase, or object to the processing of personal data collected via cookies; and submit a complaint or raise a concern regarding the use of cookies, cookie consent, or any aspect of cookie management and compliance.

All cookie-related enquiries will be acknowledged within five (5) working days. A substantive response will be provided within one (1) month of receipt, or the individual will be informed if additional time is required due to the complexity of the request.

Where a complaint or request cannot be resolved to the individual's satisfaction, the matter may be escalated to the DPO or a member of senior management for further review. If the issue remains unresolved, individuals have the right to refer their complaint to the Information Commissioner's Office (ICO) or the relevant supervisory authority.

TrustVerify is committed to transparency and accountability in all aspects of cookie management. All correspondence and actions taken in response to cookie-related queries or complaints will be documented and retained in accordance with the company's data retention policy. The contact information provided in this section will be reviewed annually and updated as necessary to ensure accuracy and accessibility.

Table Of Contents

1. Purpose and Scope2. Definitions3. Types of Cookies Used4. Platforms and Users Covered5. Legal Basis for Cookie Use6. Cookie Consent and User Preferences7. Categories of Cookies and Examples8. Cookie Retention Periods9. Managing Cookies and User Controls10. Third-Party Cookies11. Cookie Security and Breach Procedures12. User Rights and How to Exercise Them13. Roles and Responsibilities14. Policy Review and Updates15. Notification of Changes16. Contact Information