​How do we protect your data?

We prioritize protecting people’s personal data, so we’ve been updating our processes and policies to meet the EU’s sweeping new data privacy rules (the GDPR).

Data privacy is important to us

At Trustpilot, we work hard to keep everyone’s data safe. We want our customers and everyone in our review community to be able to benefit from using our services, confident in the knowledge that we’re serious about protecting people’s personal information.

In line with that, we also strive to be as transparent as possible about the processes we have in place to store, process and protect personal data.

What’s Trustpilot doing to comply with the GDPR?

Our commitment to data security and privacy means that we’ve been making changes to meet the requirements of a new EU law on data protection that came into effect on 25 May 2018.

The General Data Protection Regulation (GDPR) has been described as the most comprehensive data privacy law yet, and it requires businesses across the EU and globally to review and rethink how they handle and protect personal data.

For Trustpilot as a review platform, data plays a central role in our business. Naturally, inviting people to write reviews and share their experiences involves the exchange of information. So, in order to make sure we’re ready for the new rules, we’ve been focusing on putting new processes in place and updating our information about how we process data (see below).

For companies working with Trustpilot reviews

If you’re a business who works with reviews, you’re welcome to download our white paper on Trustpilot and the GDPR (see below — scroll down to Attachments). This paper provides an overview of some of the most important issues to consider in making sure you also meet the GDPR's requirements.

You can also view Trustpilot’s GDPR-compliant Data Processing Agreement (DPA) that regulates how we process data on behalf of companies, and ensures we do it in a compliant way. This is available on our website, together with an overview of the data sub-processors we use.

For details on how we ensure the security of data concerning companies, see also our article on security practices (including the downloadable white paper, Security practices for Trustpilot Review Invitation Services), and our Privacy Policy (US version, UK version) for business users.

For reviewers and consumers

The GDPR extends the rights of individuals and gives them a higher level of control concerning their personal data.

To find out how we ensure the security of data for people who use our platform, see our Privacy Policy (US version, UK version) here.

Questions about data privacy?

Pursuant to the GDPR, Trustpilot has appointed a Data Protection Officer.

Both businesses and consumers with questions on data security and protection are welcome to get in touch with Trustpilot’s Privacy Team and Data Protection Officer by emailing us at privacy@trustpilot.com.