Privacy Policy

1.1 Magnificentech Solution Ltd trading as TrustVerify (Company No.: 16321180), a company incorporated and registered in England and Wales, is the data controller responsible for the personal data processed through this website (trustverify.co.uk), the web application, mobile application, and API platform.

1.2 Where TrustVerify processes personal data on behalf of a business customer (a "tenant") — for example, when running identity checks on that customer's end-users — TrustVerify acts as a data processor and the business customer is the data controller. This Policy principally covers TrustVerify's own processing activities as a controller.

1.3 TrustVerify is registered with the Information Commissioner's Office (ICO) under registration reference ZB962144. Any enquiries relating to data protection should be directed to the Data Protection Officer identified in Section 10.

2.1 TrustVerify collects and processes the following categories of personal data, depending on how you interact with our platform:

2.2 Biometric data (face images and liveness signals) is treated as special-category data under UK GDPR Article 9. We process it only with your explicit consent and it is encrypted at rest using a per-tenant data encryption key (DEK).

2.3 We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact our DPO immediately.

3.1 TrustVerify uses personal data for the following purposes:

4.1 TrustVerify does not sell personal data. We share data only as necessary to deliver our services or comply with legal obligations, with the following categories of recipients:

4.2 All third-party processors are bound by data processing agreements that require them to implement appropriate technical and organisational measures to protect personal data.

5.1 TrustVerify retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting requirements. The following principles guide our retention schedule:

5.2 At the end of the applicable retention period, personal data is securely deleted or anonymised. Where deletion is not immediately possible (e.g., backup systems), the data is isolated and protected until deletion can be completed.

6.1 TrustVerify stores personal data in UK or EU cloud regions by default. Certain sub-processors (such as global AML databases or third-party analytics tools) may process data outside the UK.

6.2 Where personal data is transferred outside the UK, TrustVerify ensures that appropriate safeguards are in place as required by UK GDPR Article 46. These safeguards include:

6.3 You may request a copy of the relevant transfer mechanism by contacting our DPO at the details in Section 10.

7.1 As a data subject, you have the following rights in relation to your personal data processed by TrustVerify:

7.2 To exercise any of these rights, please email michael.omotayo@magnificentechsolution.co.uk with the subject line "Data Subject Request". We will acknowledge your request within 5 working days and respond within one calendar month.

7.3 You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at any time. The ICO can be contacted at ico.org.uk or by telephone on 0303 123 1113. We ask that you contact us first so we can try to resolve your concern.

8.1 TrustVerify uses cookies and similar tracking technologies on its digital platforms. Cookies are small text files placed on your device that help us deliver a secure and functional experience.

8.2 We use the following categories of cookies: strictly necessary cookies (required for authentication and security), performance/analytics cookies (to understand how users interact with the platform), functionality cookies (to remember your preferences), and targeting/advertising cookies (to deliver relevant content).

8.3 For full details of the cookies we use, their purposes, retention periods, and how to manage your cookie preferences, please refer to our Cookie Policy.

9.1 TrustVerify may update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, our data processing activities, or our business operations. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.

9.2 Where we make material changes to the Policy — for example, changes to the legal basis for processing, new categories of data, or changes to your rights — we will notify you by:

9.3 Your continued use of TrustVerify's services after the effective date of any changes constitutes your acknowledgement of the updated Policy. If you disagree with any changes, you may close your account and request deletion of your data as described in Section 7.

10.1 For all data protection queries, subject access requests, or concerns about how TrustVerify processes your personal data, please contact:

10.2 All privacy enquiries will be acknowledged within five (5) working days. A substantive response will be provided within one (1) calendar month of receipt, as required by UK GDPR Article 12.