One Click. You're In. One Click. You're Safe.

This Privacy Policy explains how Trustus Technologies Group (referred to as "we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at https://TrustusSecurity.com (the "Website"). We are committed to protecting your privacy and handling your personal information in a transparent manner, in accordance with applicable data protection and privacy laws around the world.

1. Personal Information We Collect

We collect personal information from and about you in various ways, depending on how you interact with our Website and services.

• Information You Provide Directly:
  • Contact Information: Such as your name, email address, phone number, and mailing address when you create an account, subscribe to our newsletter, fill out a contact form, or make an inquiry.
  • Account Information: If you create an account, this may include your username, password, and preferences.
  • Transaction Information: Details about products or services you may purchase from us, including payment information (though we may use third-party payment processors, and do not store your full payment card details).
  • Communications: Records of your correspondence with us, such as customer support inquiries or feedback.
• Information Collected Automatically (Including via Cookies and Similar Technologies):
  • When you visit our Website, we may automatically collect certain information about your device and browse activity. This may include:
    • Device Information: Your IP address, browser type, operating system, device type, and unique device identifiers.
    • Usage Data: Information about how you use our Website, such as the pages you visit, the time spent on those pages, clicks, internal links, search queries, and referring URLs.
  • As detailed in our separate Cookie Policy, we may use cookies and similar tracking technologies (like web beacons or pixels) to collect this information. While our Website is designed to function even without the use of most cookies, some specific features or user experiences may be enhanced or enabled by their presence.
• Information from Third Parties:
  • We may receive information about you from third parties, such as analytics providers, advertising partners, or social media platforms, but only to the extent permitted by law and with appropriate consent mechanisms where required.

2. How We Use Your Personal Information

We use your personal information for various purposes, depending on the context in which it was collected and your preferences. These purposes may include:

• To Provide and Maintain Our Website and Services: To operate, manage, and improve our Website, products, and services.
• To Communicate with You: To respond to your inquiries, provide customer support, send administrative information (like updates to our terms), and send marketing communications (if you have opted-in).
• For Analytics and Improvement: To understand how our Website is used, identify trends, and enhance user experience and Website functionality. This may involve aggregating data that does not directly identify you.
• For Marketing and Advertising: To deliver relevant advertisements and promotional offers, where permitted by law and with your consent, if required. This may involve personalized advertising based on your interests.
• To Ensure Security and Prevent Fraud: To protect the integrity and security of our Website, systems, and users, and to detect and prevent fraud or other illegal activities.
• To Comply with Legal Obligations: To meet our legal and regulatory requirements, including responding to lawful requests from public authorities.
• For Business Operations: For internal business purposes, such as data analysis, audits, developing new products/services, and identifying usage trends.

3. How We Share Your Personal Information

We may share your personal information with third parties in the following circumstances:

• Service Providers: We may share your information with third-party vendors and service providers who perform services on our behalf, such as website hosting, data analytics, payment processing, email delivery, advertising, and customer support. These service providers are authorized to use your personal information only as necessary to provide these services to us.
• Business Transfers: In the event of a merger, acquisition, sale of assets, or other business transaction, your personal information may be transferred to the acquiring entity.
• Legal Compliance and Protection: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation; (ii) protect and defend our rights or our property; (iii) prevent or investigate possible wrongdoing in connection with the Website; or (iv) protect the personal safety of users of the Website or the public.
• With Your Consent: We may share your information with other third parties with your explicit consent.

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

5. Data Security

We implement reasonable technical, administrative, and physical safeguards designed to protect the personal information we collect from unauthorized access, use, alteration, and disclosure. However, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Your Privacy Rights

Depending on your location and applicable data protection laws, you may have certain rights regarding your personal information. We are committed to facilitating the exercise of these rights where they apply to you. These rights may include:

• Right to Access: The right to request copies of your personal information that we hold.
• Right to Rectification/Correction: The right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure/Deletion: The right to request that we erase your personal information under certain conditions.
• Right to Restrict Processing: The right to request that we restrict the processing of your personal information under certain conditions.
• Right to Object to Processing: The right to object to our processing of your personal information under certain conditions, particularly concerning direct marketing.
• Right to Data Portability: The right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Opt-Out of Sale/Sharing: For residents of certain regions (e.g., California, EU, UK), the right to opt-out of the "sale" or "sharing" of your personal information for targeted advertising purposes.

To exercise any of these rights, please contact us using the Contact Us details provided below. We may need to verify your identity before responding to your request.

7. Regulatory Compliance Considerations (General)

Our approach to personal information processing and privacy is guided by leading global privacy regulations, including but not limited to:

• The General Data Protection Regulation (GDPR) in the European Union and the UK GDPR: These regulations set high standards for data protection, requiring lawful bases for processing personal data, ensuring data subject rights, and necessitating robust security measures.
• The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) in the United States: These laws grant California residents specific rights, including the right to know about, delete, and opt-out of the sale or sharing of their personal information.
• The Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada: This federal law requires organizations to obtain meaningful consent for the collection, use, and disclosure of personal information and sets out principles for fair information practices.
• Canada's Anti-Spam Legislation (CASL): This comprehensive law addresses electronic threats, including spam, malware, and other online threats. It requires consent for sending commercial electronic messages (CEMs) and installing computer programs, and sets out strict requirements for the content of CEMs and the ability to unsubscribe.
• Quebec's Law 25 (An Act to modernize legislative provisions respecting the protection of personal information) in Canada: This provincial law, similar to GDPR, imposes stricter consent requirements, often requiring explicit consent for cookies that identify, locate, or profile individuals, and emphasizes privacy by default.
• Other applicable national and regional data protection laws: We monitor and adapt our practices to comply with relevant legislation in other jurisdictions where we operate or serve users, always striving for a high standard of data protection.

We are committed to:

• Transparency: Clearly informing you about how we collect, use, and share your personal information.
• Choice and Control: Providing you with meaningful options to manage your privacy preferences and exercise your rights.
• Accountability: Taking responsibility for our data practices and protecting your personal information.

8. Sector-Specific and Enterprise Compliance Commitments

Recognizing that our enterprise customers operate in diverse and regulated sectors, we are committed to supporting their compliance obligations through our robust data handling and security practices. While the direct applicability of certain regulations depends on the specific nature of the services we provide and your organization's role, we aim to facilitate your compliance where relevant. This includes our awareness and adherence to principles derived from:

• The CLOUD Act (Clarifying Lawful Overseas Use of Data Act - U.S.): As a global service provider utilizing various data storage locations, we are aware that data may be subject to legal processes, including those originating from U.S. authorities under the CLOUD Act. We are committed to processing data lawfully, protecting data from unauthorized access, and challenging overly broad or unlawful requests as appropriate, while complying with our legal obligations.
• HIPAA (Health Insurance Portability and Accountability Act - U.S.): For enterprise customers in the U.S. healthcare sector who are "Covered Entities" or "Business Associates" handling "Protected Health Information (PHI)," we are prepared to enter into appropriate Business Associate Agreements (BAAs) where our services involve the creation, receipt, maintenance, or transmission of PHI on your behalf. Our data security and privacy practices are designed to support your compliance with HIPAA's Privacy, Security, and Breach Notification Rules.
• NIS2 Directive (Network and Information Security 2 Directive - EU): For our enterprise customers operating as "critical entities" or "essential services" within the EU, we understand the importance of NIS2. Our cybersecurity measures, incident response protocols, and secure service delivery are designed to help you meet your own obligations under NIS2 regarding the security and resilience of your network and information systems, as they pertain to our services.

We work diligently to ensure that our internal practices and the services we offer align with the stringent requirements of these sector-specific regulations, thereby assisting our enterprise clients in maintaining their own compliance.

9. International Data Transfers

Your personal information may be stored and processed in any country where we have facilities or where we engage service providers. By using our Website, you understand that your information may be transferred to countries outside of your country of residence, which may have different data protection laws than your country. We will ensure that such transfers comply with applicable data protection laws, such as by relying on standard contractual clauses, your explicit consent, or other legal transfer mechanisms.

10. Children's Privacy

Our Website is not intended for minors (e.g. underage individuals). We do not knowingly collect personal information from children without appropriate parental consent. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to remove that information and terminate the child's account.

11. Links to Other Websites

Our Website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Effective Date". We encourage you to review this Privacy Policy periodically. Your continued use of the Website after any modifications to this Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy, your privacy rights, or our data practices, please contact us:

• By visiting this page on our Website: Contact Us

Effective Date: June 23, 2025