Privacy notice

This notice covers the public website trustnotch.com. It describes what personal data this site processes, on what basis, and what rights you have. It does not cover the TrustNotch product, API, or customer dashboard (app.trustnotch.com) — those are governed by the service agreement between TrustNotch and its customers.

Last updated: — draft, pending legal review.

Who is responsible for your data

The data controller for this website is Kamala 2024 OOD, a company registered in Bulgaria (ul. Georgi Dimitrov 1, s. Eleshnitsa, obsht. Razlog, obl. Blagoevgrad, Bulgaria).

For privacy-related questions or to exercise your rights, contact us at privacy@trustnotch.com.

No cookies, no analytics, no trackers

This site uses no cookies, no analytics tools, and no third-party trackers or embeds of any kind. All assets — fonts, styles, scripts — are self-hosted; loading a page on trustnotch.com makes no requests to any third-party server.

Because nothing on this site requires your consent under ePrivacy or GDPR, there is no cookie banner or consent pop-up — that is by design, not an oversight.

What we do process

Web server access logs

This website (trustnotch.com) is served as static files and does not keep access logs. The web server is not configured to record visits to the site, so no IP addresses or request metadata from browsing these pages are stored.

Hosting: the site is hosted in the EU (Hetzner, Helsinki, Finland). No data is transferred outside the European Economic Area. TrustNotch's separate API and dashboard services (api.trustnotch.com, app.trustnotch.com) do keep short-lived request logs for security and operation; those are covered by the customer service agreement, not this website notice.

Email contact

If you contact us via the email link on this site, we receive and process whatever you include in that message — typically your email address and the content you write — in order to respond to you.

Legal basis: legitimate interest (Article 6(1)(f) GDPR) — responding to an inbound enquiry you initiated.

We do not add you to any mailing list from a contact email. We retain correspondence for as long as it is reasonably needed for the purpose you contacted us about, then delete it.

Rights under GDPR

Under GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; request erasure where there is no overriding legitimate ground to retain it; restrict processing in certain circumstances; object to processing based on legitimate interest; and, where processing is based on consent, to withdraw that consent without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@trustnotch.com. We will respond within the timeframe required by GDPR (generally one month).

You also have the right to lodge a complaint with your national supervisory authority. As TrustNotch is registered in Bulgaria, the lead supervisory authority is the Commission for Personal Data Protection (CPDP)www.cpdp.bg. If you are based in another EU/EEA member state, you may also contact your local authority.

Updates to this notice

If we change how we process data on this site, we will update this page and revise the "last updated" date at the top. Material changes will be flagged where we reasonably can.