Legal

Privacy Policy

How TrueLine Ltd collects, uses, stores, and protects your personal data.

Last updated: April 2026

1. Data Collection

TrueLine Ltd ("Company", "we", "us") collects and processes personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We collect the following categories of personal data: - Contact information: name, email address, phone number, company name - Account data: login credentials, service preferences, communication history - Technical data: IP addresses, browser type, device information, access logs - Service data: case details, enforcement requests, content ownership documentation - Usage data: website interaction patterns, feature usage, session duration

2. Use of Data

We process personal data for the following purposes: - Service delivery: To provide digital intelligence and enforcement services as contracted - Communication: To respond to inquiries, provide updates, and deliver reports - Platform operation: To maintain and improve our systems and platforms - Legal compliance: To comply with legal obligations and regulatory requirements - Security: To protect our systems, detect fraud, and prevent unauthorized access - Analytics: To analyze service usage patterns and improve our offerings Our legal bases for processing include contractual necessity, legitimate interests, legal obligations, and consent where applicable.

3. Data Storage & Protection

Personal data is stored on secure servers located within the United Kingdom and the European Economic Area. We implement appropriate technical and organizational measures to protect personal data, including: - Encryption of data in transit and at rest - Access controls and authentication mechanisms - Regular security assessments and penetration testing - Employee training on data protection practices - Incident response procedures for data breaches Data retention periods are determined by the nature of the data and the purpose of processing. Service-related data is retained for the duration of the service agreement plus seven (7) years for legal compliance purposes.

4. Third-Party Services

We may share personal data with the following categories of third parties: - Cloud infrastructure providers for data hosting and processing - Analytics services for website usage analysis - Communication platforms for email and notification delivery - Legal partners for enforcement and compliance purposes - Platform operators as required for enforcement actions All third-party processors are bound by data processing agreements that ensure appropriate levels of data protection. We do not sell personal data to third parties.

5. Your Rights

Under applicable data protection laws, you have the following rights: - Right of access: Request a copy of your personal data - Right to rectification: Request correction of inaccurate data - Right to erasure: Request deletion of your personal data - Right to restriction: Request limitation of data processing - Right to portability: Request transfer of your data in a structured format - Right to object: Object to processing based on legitimate interests - Right to withdraw consent: Withdraw consent at any time where processing is based on consent To exercise these rights, contact our Data Protection Officer at [email protected].

6. International Transfers

Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including: - Standard Contractual Clauses approved by the relevant authorities - Adequacy decisions by the UK Secretary of State or European Commission - Binding Corporate Rules where applicable We assess the data protection laws of recipient countries and implement supplementary measures where necessary.

7. Contact

For questions regarding this Privacy Policy or to exercise your data protection rights: Data Protection Officer TrueLine Ltd Email: [email protected] London, United Kingdom You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.