Privacy Policy
Last updated: June 4, 2026Who We Are
Trustwards is operated by José Antonio Tamudo Bértolo, who is the data controller responsible for the processing of personal data described in this Privacy Policy.
Contact details:
Email: josetamu@trustwards.io
Address: Calle Río Guadarrama, 45, 28939, Arroyomolinos, Madrid, Spain
Data Protection Officer (DPO): José Antonio Tamudo Bértolo
Contact: josetamu@trustwards.io
What Data We Collect
We collect the following categories of personal data when you use the Trustwards website and related services (a Consent Management Platform wrapped as a plugin for WordPress):
Cookie consent preferences: your choices about which cookies and similar technologies you accept or reject, and related consent status information needed to apply your choices.
Device and technical information: IP address, browser type, device information, and technical data needed to load and secure the website and provide the service reliably.
Account data: information you provide to create and manage an account for the service.
Payment and billing information: billing details and payment-related information needed to process purchases and manage invoices and accounting.
Usage data for analytics (only with your consent): information about how you interact with the website and service, collected through analytics technologies that require consent.
Sources of data:
Directly from you: when you create an account, submit information through the website, or contact us.
Automatically: when you access the website, we receive device and technical information as part of normal communications and security operations.
From cookies and similar technologies: we store and read non-essential cookies only when you have given your consent, and we apply your cookie choices through our consent management system.
Providing certain data is necessary to use the service (for example, technical data to load the website, and payment and billing information to complete a purchase). Providing analytics consent is optional, and you can use the website without accepting non-essential cookies.
How We Use Your Data
We use your personal data for the following purposes and legal bases:
Providing the Trustwards service and managing your account (legal basis: contract).
Responding to your inquiries and providing customer support related to the service (legal basis: contract).
Processing payments and managing orders, billing, and invoicing (legal basis: contract).
Recording, storing, and demonstrating your cookie consent choices and applying your preferences on the website (legal basis: legal obligation).
Maintaining tax and accounting records related to transactions (legal basis: legal obligation).
Protecting the website and service against security threats, abuse, and fraud, and maintaining the integrity of our systems (legal basis: legitimate interest).
Collecting analytics data to understand how the website and service are used and to improve performance and user experience, where analytics technologies require consent (legal basis: consent).
Who We Share Your Data With
We share personal data only to the extent necessary to operate the service, meet legal obligations, and process payments.
We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.
Payments: we use Stripe to process payments. Stripe may process payment and billing information and related transaction data, and may also process device and technical information (including IP address) for fraud prevention and security purposes.
Affiliate and referral tracking: we use SureCart Affiliate to support affiliate and referral tracking. Depending on configuration and your interactions, this may involve the use of cookies or similar technologies and the processing of online identifiers (including pseudonymous identifiers), device and technical information, and referral/attribution information. Where required by applicable law (including ePrivacy requirements), non-essential cookies or similar technologies for affiliate/referral tracking will not be set unless you provide consent.
Analytics services: if you consent to analytics, analytics data may be processed using Google Analytics. Google Analytics may use cookies or similar technologies and process data such as online identifiers (including pseudonymous identifiers), device information, and usage data. Analytics will not be set until you provide consent.
International Data Transfers
Some of the providers we use may process personal data outside the EU/EEA, the UK, or Switzerland. Where this involves a transfer of personal data to a country without an adequacy decision, we will ensure that an appropriate transfer mechanism is in place, such as Standard Contractual Clauses approved by the European Commission and/or other safeguards required by GDPR, and we will apply additional measures where required.
Google Analytics is provided by Google, which is US-based. Where personal data is transferred to the United States in connection with Google Analytics, the transfer may be based on the EU-U.S. Data Privacy Framework (where applicable) and/or Standard Contractual Clauses, depending on the relevant Google entity and configuration.
Stripe is provided by Stripe entities that may be located in the United States and/or other countries, depending on the relevant Stripe entity and configuration. Where personal data is transferred outside the EU/EEA, the UK, or Switzerland in connection with Stripe, we will rely on an appropriate transfer mechanism, such as Standard Contractual Clauses and/or other safeguards required by GDPR, depending on the relevant entities and configuration.
SureCart Affiliate may involve processing by providers located in the United States and/or other countries, depending on the relevant SureCart entities and configuration. Where personal data is transferred outside the EU/EEA, the UK, or Switzerland in connection with SureCart Affiliate, we will rely on an appropriate transfer mechanism, such as the EU-U.S. Data Privacy Framework (where applicable) and/or Standard Contractual Clauses and/or other safeguards required by GDPR, depending on the relevant entities and configuration.
Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.
How Long We Keep Your Data
Account data: until account is deleted.
Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.
Tax and accounting records: 10 years (legal requirement).
Analytics data: until consent is withdrawn or according to the analytics tool retention settings.
Your Rights
If you are in the EU/EEA, the UK, or Switzerland, you have the right to:
Access your personal data.
Correct inaccurate or incomplete data.
Delete your personal data (the “right to be forgotten”).
Restrict the processing of your personal data.
Receive your personal data in a structured, commonly used format and have it transferred to another controller where applicable (data portability).
Object to processing based on legitimate interests, including where applicable objecting to processing for reasons related to your particular situation.
Withdraw your consent at any time where we rely on consent (this does not affect the lawfulness of processing before you withdrew consent).
Not be subject to automated decision-making or profiling that produces legal effects or similarly significantly affects you.
To exercise your rights, contact us at josetamu@trustwards.io. We will respond within one month.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Children's Privacy
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
Data Security
We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Data Breach Notification
If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. Where notification is required, we will describe the nature of the breach, the likely consequences, and the measures taken or proposed to address it. We maintain procedures to detect, report, and investigate security incidents. If you suspect a security issue, please contact us at josetamu@trustwards.io.
How to Lodge a Complaint
You have the right to lodge a complaint with the competent supervisory authority in your jurisdiction. If you are in Spain, you can lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos).
We encourage you to contact us first at josetamu@trustwards.io so we can try to resolve your concern directly.
Updates to This Policy
We review and update this Privacy Policy periodically. The “Last updated” date at the top of this policy shows when it was last changed. If we make significant changes, we will provide notice on the website and/or by email where appropriate. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.
Contact Us
Email: josetamu@trustwards.io
Address: Calle Río Guadarrama, 45, 28939, Arroyomolinos, Madrid, Spain
Data Controller: José Antonio Tamudo Bértolo
Privacy Notice
Last updated: June 4, 2026Notice at Collection
This Notice at Collection applies to California consumers and explains what categories of personal information Trustwards collects and the business or commercial purposes for collecting and using that information.
Categories of Personal Information We Collect
We collect the following categories of personal information:
Identifiers (name, email, address, phone number)
Internet or other electronic network activity (browsing history, search history, interactions)
Geolocation data
How We Use Your Information
We collect and use personal information for the following business or commercial purposes:
To process transactions
To provide customer support
To improve our services
For marketing purposes
Sale and Sharing of Personal Information
We do not sell personal information as “sell” is defined under the CCPA/CPRA.
We do not share personal information for cross-context behavioral advertising as “share” is defined under the CCPA/CPRA.
Based on our most recent scan, we use the following service providers that may receive personal information (such as online identifiers, including pseudonymous identifiers, and internet or other electronic network activity information) in order to provide services to us:
Stripe
Google Analytics
SureCart Affiliate
Trustwards (our own consent management platform, not a third party)
Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Notice at Collection, to comply with legal obligations, and to resolve disputes.
Your California Privacy Rights
Subject to certain exceptions, California consumers have the following rights under the CCPA/CPRA:
Right to know/access: You can request information about the personal information we collected about you, including the categories of personal information collected and the purposes for which it was collected and used.
Right to delete: You can request that we delete personal information we collected from you.
Right to correct: You can request that we correct inaccurate personal information we maintain about you.
Right to opt-out of sale/sharing: You can direct a business not to sell or share your personal information. Although we do not sell or share personal information as defined by the CCPA/CPRA, you may still submit an opt-out request.
Right to limit use of sensitive personal information: You can request that we limit the use and disclosure of sensitive personal information to what is necessary to provide services or goods reasonably expected by an average consumer. If we collect sensitive personal information, you may submit a request to limit its use.
Right to non-discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA/CPRA rights.
How to submit a request: You may submit a request by emailing josetamu@trustwards.io. We will respond within 45 days of receiving your request, unless an extension is permitted by law.
Global Privacy Control (GPC): We honor opt-out preference signals sent through the Global Privacy Control where required under the CCPA/CPRA.
Contact Us
José Antonio Tamudo Bértolo
Email: josetamu@trustwards.io
Frequently asked questions
