Privacy Policy

1. Who we are

Trust Revaro provides managed website design, hosting, maintenance, support and browser-based website tools to businesses. Trust Revaro is the data controller for personal information collected through this website and through our own client relationship, which means we decide why and how that information is used.

Contact: hello@trustrevaro.com
Location: Yorkshire, United Kingdom

2. Information we collect

Depending on how you use our website and services, we may collect:

• Your name, email address, telephone number, business name and role.
• Information supplied through our contact and onboarding forms, including your business activities, service area, customers, goals, preferred pages, features, visual style, tone of voice, launch plans and other website requirements.
• Brand materials and website content that you provide, such as copy, photographs, logos and documents.
• Your selected package, add-ons, domain and mailbox requirements, support requests, approvals and other service records.
• Payment status, subscription history, invoices and limited transaction information. Bank and payment-account details are collected and processed by GoCardless or another agreed payment provider rather than stored directly by Trust Revaro.
• Messages, feedback and other correspondence with us.
• Technical information such as IP address, browser and device information, requested pages, timestamps, security events and server logs.

We normally receive this information directly from you. We may also receive payment status from our payment provider and technical or service information from hosting, domain, email and integration providers. Please do not send sensitive or special-category personal information unless it is genuinely necessary and we have agreed to receive it.

3. How and why we use your information

We use personal information only where we have a lawful basis:

• Steps before a contract: to respond to enquiries, review onboarding details and prepare, discuss and revise your free website concept.
• Contract: to set up, host, maintain and support your website; provide agreed updates, web tools, SEO support, domains and mailboxes; manage payments; and communicate about the service.
• Legitimate interests: to operate and improve our business, keep appropriate records, protect our websites and systems, prevent misuse, resolve disputes and understand the performance of the services we provide. We consider and balance these interests against your rights.
• Legal obligation: to meet accounting, tax, fraud-prevention, regulatory and other legal requirements.
• Consent: where we specifically ask for consent for an optional use. You may withdraw that consent at any time.

We do not sell personal information. We do not use information submitted through our enquiry or onboarding forms for unrelated marketing unless we have a valid lawful basis and have provided any required choice or notice.

4. Personal information handled through client websites

Some managed websites include enquiry forms, booking systems, customer portals or other web tools that handle information about our clients' customers and website visitors. In those circumstances, the client normally decides why the information is collected and is the data controller. Trust Revaro normally acts as a data processor and handles the information only to provide and support the agreed service, on the client's documented instructions and under the data-processing terms in our Terms of Service.

Questions about information submitted to one of our clients should normally be directed to that client first. We will assist our client where reasonably required.

5. Who we share information with

We share only what is reasonably necessary with trusted providers and recipients, which may include:

• Website hosting and infrastructure providers, including Hostinger.
• Form-delivery, email and mailbox providers used to receive enquiries and operate communications.
• Payment providers, including GoCardless, which processes payer and bank information under its own privacy information.
• Domain registrars, registries and DNS providers.
• Providers used for agreed website tools, integrations, analytics, search-performance tools or SEO support.
• Professional advisers, insurers, prospective purchasers of the business, regulators, courts, law-enforcement bodies or other authorities where reasonably necessary or legally required.

Our providers may process information outside the United Kingdom. Where UK data-protection law requires it, we use an adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Further information about relevant safeguards is available on request.

6. Cookies and technical services

This website does not currently use advertising or behavioural-tracking cookies. Its fonts and scrolling code are stored locally with the website rather than loaded from Google Fonts or another font service. Our hosting provider may generate essential security and server logs. If we introduce non-essential analytics, advertising cookies or similar technology, we will update this policy and introduce consent controls where required.

7. How long we keep information

We keep information only for as long as reasonably necessary for the purpose for which it was collected:

• Enquiries and website-concept requests that do not proceed are normally kept for up to 12 months after the last meaningful contact.
• Client, contract, billing and service records are kept throughout the relationship and may normally be retained for up to six years afterwards for accounting, contractual, tax and legal purposes.
• Content, form submissions and other information processed for a client website are kept in line with the client's instructions, the service configuration and applicable legal requirements.
• Technical and security logs are normally kept for shorter operational periods unless needed to investigate an incident or legal claim.

We may retain information for longer where the law requires it or where it is reasonably needed to establish, exercise or defend legal claims.

8. Security

We use reasonable technical and organisational measures designed to protect personal information, including access controls, secure connections, maintained hosting and limited access to service data. No internet transmission or storage system can be guaranteed completely secure, and clients remain responsible for keeping their own account credentials and authorised-user access secure.

9. Automated decisions

Trust Revaro does not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Payment, hosting and security providers may use automated checks under their own policies, including for fraud prevention and payment processing.

10. Your data protection rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict or receive a portable copy of your personal information. You may also object to certain processing and withdraw consent where consent is the lawful basis. These rights are not absolute and exemptions may apply.

To exercise a right, email hello@trustrevaro.com. We may need to verify your identity and will normally respond within one month.

11. Questions and complaints

Please contact us first if you have a concern so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

12. Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. The latest version will appear on this page with its updated date. Where a change materially affects how we use existing client information, we will provide additional notice where reasonably appropriate.