Privacy Policy

Introduction

This Privacy Policy explains how we process personal data when you use the Trust Property Global website, contact us, and/or use our verification-related services (including the verification of entities and property projects).

We process personal data in accordance with:

  • the UK GDPR (as incorporated into UK law),
  • the Data Protection Act 2018,
  • the Data Use and Access Act 2025 (DUAA 2025), and
  • where applicable, the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”), in particular where we offer services to individuals in the EEA/EU or otherwise fall within its scope.
Data Controller

LEGISTRA LTD (trading as LEGISTRA®)
Ground Floor Office, Polish Community Centre
Coventry, CV1 4GR, United Kingdom
Company number: 14760681
ICO registration number: ZB903961
Contact email: contact@trustproperty.global

Trust Property Global (“TPG”) is a brand owned and operated by LEGISTRA LTD. For data protection purposes, the controller remains LEGISTRA LTD.

Person responsible for data protection

Agata Mazur – Data Protection Lead – LEGISTRA®
Email: contact@trustproperty.global

What personal data we process

Depending on your relationship with us, we may process:

Enquiries / prospective clients

  • name, email address, phone number
  • message content and attachments

Clients / verification applicants / verified entities

  • identification and contact data
  • business, corporate and project-related information
  • documents submitted for verification
  • correspondence and verification records
  • billing and payment-related data

Business partners and suppliers

  • contact details
  • contractual and billing data

Website visitors

  • technical data (IP address, device/browser information)
  • website usage/activity data
  • cookies (see our Cookies Policy)

As a rule, we do not request special category (sensitive) data via the website. If such data is provided without necessity, we apply data minimisation.

Purposes and lawful bases (UK GDPR / EU GDPR)

We process personal data only where we have a specific and applicable lawful basis.

Contract / steps before contract

UK GDPR: Article 6(1)(b) / EU GDPR: Article 6(1)(b)
Handling enquiries, preparing an offer, and delivering verification-related services.

Legal obligation

UK GDPR: Article 6(1)(c) / EU GDPR: Article 6(1)(c)
Compliance with legal obligations (including accounting, tax and record-keeping).

Legitimate interests

UK GDPR: Article 6(1)(f) / EU GDPR: Article 6(1)(f)
Limited to: IT and website security (including maintaining access logs, anti-spam measures and protecting our systems), prevention of misuse and fraud, maintaining verification and audit records for accountability and quality assurance, establishing, exercising or defending legal claims, and to respond to enquiries submitted via our contact form, email or telephone, including providing the information you request, clarifying your enquiry, and arranging follow-up communications where needed. We apply proportionality and assess impact where required.

Consent

UK GDPR: Article 6(1)(a) / EU GDPR: Article 6(1)(a)
Consent is relied upon only for:

  • non-essential cookies, and
  • newsletter subscription (if enabled).
    Consent may be withdrawn at any time.
Sources of your data

We obtain personal data:

  • directly from you,
  • from the organisation you represent (where you act on behalf of a business), and
  • from public sources/registries, only where necessary for verification purposes.
Who we share data with

We may share personal data only where necessary with:

  • IT/hosting and technical service providers,
  • professional advisers (e.g. accountants, solicitors) where needed,
  • public authorities where required by law.

We do not sell personal data.

International transfers

Where personal data is transferred outside the UK and/or EEA (as applicable), we apply appropriate safeguards in line with the relevant framework (UK GDPR Chapter V and/or EU GDPR Chapter V), such as adequacy decisions or recognised contractual mechanisms. Transfers are documented.

Automated decision-making and profiling

We do not carry out automated decision-making or profiling within the meaning of UK GDPR/EU GDPR Article 22.

Retention

We retain personal data only as long as necessary for the purposes above:

  • enquiries: up to 12 months
  • service and verification records: 6 years
  • accounting/tax records: as required by UK law
    Data is then securely deleted or anonymised.
Your rights (UK GDPR / EU GDPR)

Subject to conditions and limitations under applicable law, you may have the following rights:

  1. Right to be informed (EU/UK GDPR Articles 12–14)
  2. Right of access (Article 15)
  3. Right to rectification (Article 16)
  4. Right to erasure (Article 17)
  5. Right to restriction of processing (Article 18)
  6. Right to data portability (Article 20)
  7. Right to object (Article 21)
  8. Rights related to automated decision-making and profiling (Article 22)
  9. Right to withdraw consent at any time (where processing is based on consent – Article 6(1)(a))

To exercise your rights, contact us at: contact@trustproperty.global.

SAR / DSAR requests (“stop-the-clock”)

Requests can be submitted by email: contact@trustproperty.global.
We respond as a rule within one month. We may request identity verification and/or clarification. Where clarification is required, the response deadline may be paused until we receive the necessary information (“stop-the-clock”), as permitted by law. We may refuse requests that are manifestly unfounded or excessive, where permitted.

Complaints – internal process first (DUAA 2025)

If you have concerns about our processing of personal data, please submit a complaint to us first:

📧 contact@trustproperty.global

We acknowledge complaints within 72 hours and aim to respond within 30 days.

If you are not satisfied with the outcome of our internal procedure, you may lodge a complaint with the UK Information Commissioner’s Office (ICO). Where EU GDPR applies, you may also have the right to lodge a complaint with your local EU/EEA supervisory authority.

ICO contact details

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
Phone: 0303 123 1113

Changes

We may update this Policy from time to time. The latest version will be published on this page.

Last updated: 01/03/2026

Scroll to Top