Privacy Policy

Trustalis LLC ("Trustalis", "we", "us", "our") is a governance, risk, and compliance consulting firm. This Privacy Policy describes how we collect, use, and protect personal information when you visit this website, contact us, or work with us.

Information you send us: If you email us, including through the contact form (which opens your own mail app), we receive your name, email address, organization, and whatever you include in your message.

Engagement information: If we work together, we receive business contact details and the information needed for the agreed scope.

Technical information: This website is hosted on Cloudflare. When you visit, Cloudflare processes standard request data, such as IP address, browser type, and the pages requested, to deliver and protect the site, and may set strictly necessary security cookies. We do not use analytics, advertising, or tracking cookies, and the contact form does not store anything on a server: it opens a pre-filled email in your own mail app, and we receive nothing unless you send that email.

To respond to inquiries, scope and deliver consulting engagements, manage our business relationship with you, meet legal obligations, and keep this website secure.

Where the GDPR applies, we rely on legitimate interest (responding to inquiries and operating our business), contractual necessity (delivering an engagement), and legal obligation (keeping required records).

Trustalis does not sell personal information. We use a limited number of service providers, such as email, document storage, and website hosting, who process information on our behalf. We may disclose information where required by law.

We keep inquiry correspondence only as long as needed to respond and follow up, and engagement records as long as required by the engagement agreement and applicable law. Contact us for the retention period relevant to you.

We use reasonable administrative and technical measures to protect personal information. See the Security page for how we handle engagement information.

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, or to object to its processing. To make a request, contact [email protected]. We handle requests according to the deadlines, exceptions, and verification requirements of applicable law.

Your information may be processed in countries other than your own. Where required, we rely on appropriate transfer safeguards.

This website is intended for business audiences and is not directed to children. We do not knowingly collect information from children.

We may update this Privacy Policy from time to time. The "Last updated" date shows when it last changed.

For privacy questions or requests, contact [email protected].