RoPA Ready

Privacy policy

How we handle personal data, and the rights you have over it. The detailed, per-purpose processing information is below and is kept in lockstep with our record of processing activities.

Who we are

We are the data controller for the personal data described in this policy. For any question about your data, or to exercise your rights, contact us at privacy@syon.com.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where we rely on consent, you can withdraw it at any time. We respond to requests within one month.

How to complain

If you have a concern we haven't resolved, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

How we use your data — each section below covers one processing activity.

Who we are and how to contact us

Syon Creative Limited T/A MyTrustList

7a Abbey Business Park, Monks Walk, Farnham, Surrey, United Kingdom, GU9 8HT

Email: hello@mytrustlist.com

Account management

Who we are

We are the controller responsible for managing your account. This notice explains how we handle your personal information when you register and use an account with us.

What we collect

We collect the following personal information, which you provide to us directly:

  • Your email address
  • Your full name
  • Your IP address
  • Your phone number
  • Your postal address

Why we use it

We use your information to create and manage user and administrator accounts. This enables us to register you, authenticate you when you log in, contact you, and track administrative activity.

Our lawful basis for using your information in this way is that it is necessary for the performance of our contract with you.

Who we share it with

We do not share your personal information with any external recipients for this activity.

How long we keep it

We keep your personal information until your account is removed.

Your rights

Under data protection law, you have the following rights over your personal information:

  • The right to be informed about how we use your information
  • The right of access to the information we hold about you
  • The right to rectification if your information is inaccurate or incomplete
  • The right to erasure of your information in certain circumstances
  • The right to restrict our processing of your information in certain circumstances
  • The right to data portability, allowing you to obtain and reuse your information
  • The right to object to our processing of your information in certain circumstances

As our processing is based on the performance of a contract, you also have the right to data portability. You can also lodge a complaint with the Information Commissioner's Office (ICO) if you have concerns about how we handle your information.

Enquiry handling

Who we are

We are the controller responsible for handling your enquiry. When you send us an enquiry, our administrators receive and respond to it.

What we collect

We collect the following information, which you provide directly to us:

  • Your full name
  • Your email address

Why we use it

We use your information to allow you to send an enquiry and to enable our administrators to receive and handle that enquiry.

The lawful basis for this processing is that it is necessary for the performance of a contract with you (or to take steps at your request before entering into a contract).

Who we share it with

We do not share this information with any external recipients.

How long we keep it

We keep your information until your account is removed.

Your rights

Under data protection law, you have the right to:

  • Access the personal data we hold about you
  • Ask us to correct inaccurate or incomplete data
  • Ask us to erase your data in certain circumstances
  • Restrict or object to our processing of your data in certain circumstances
  • Data portability, where applicable

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you have concerns about how we handle your personal data.

File storage

Who we are

We are the controller responsible for the file storage service that lets you add a profile picture (avatar) to your accounts.

What we collect

We collect the avatar (profile image) that you choose to upload. We receive this information directly from you.

Why we use it

We use your uploaded avatar so that it can be displayed on your own user account and on any of your organisational accounts.

Our lawful basis

We process this information because it is necessary to perform our contract with you — namely, to provide the account features you have signed up for, including displaying your chosen avatar.

Who we share it with

Your avatar is stored using Amazon Web Services (AWS S3), our storage provider.

How long we keep it

We keep your avatar until your account is removed.

Your rights

Under data protection law you have rights over your personal information, including the right to access it, to have inaccurate information corrected, to have it erased, to restrict or object to how we use it, and — because we rely on the performance of a contract — the right to data portability. You also have the right to complain to your data protection regulator. To exercise any of these rights, please contact us.

Organisation data from website

Who we are

My Trust List operates a public directory that helps people find, check and verify businesses. We are the controller responsible for the information described in this notice.

What we collect

We hold the following information about your organisation:

  • Email address
  • Location data
  • Phone number
  • Postal address

We did not collect this information directly from you. It was obtained indirectly (for example, from your organisation's website).

Why we use it

We use this information to create and display a listing for your organisation in our directory. My Trust List is a public directory that helps people find, check and verify businesses, and each listing contributes to that purpose.

We rely on our legitimate interests as the lawful basis for this processing — specifically, our interest in maintaining a directory that enables people to find and verify businesses.

Who we share it with

We share your information with:

  • MailTrap, a service provider we use for handling email
  • The public — because your listing appears in our public directory, the information in it can be viewed by anyone

How long we keep it

We keep generated listings until the owner requests their removal, or until the email address bounces because it is no longer valid.

Your rights

You have rights over your personal data under data protection law, including the right to access your information, to have inaccurate information corrected, to have your information erased, to restrict or object to how we use it, and to data portability. Because we rely on legitimate interests, you have the right to object to our processing. You can ask us to remove your listing at any time.

You also have the right to complain to the Information Commissioner's Office (ICO) if you have concerns about how we handle your information.

Other account management

Who we are

We are the controller responsible for creating and maintaining your business account records and for contacting you as an account holder.

What we collect

We collect the following information, which you provide to us directly:

  • Your full name
  • Your email address
  • Your phone number

Why we use it

We use your information to create and maintain your business account records and to enable us to contact you as an account holder.

The lawful basis for this processing is that it is necessary for the performance of a contract with you (or to take steps at your request before entering into a contract).

Who we share it with

We do not share your information with any recipients for this activity.

How long we keep it

We keep your information until your account is removed.

Your rights

Under data protection law, you have rights over your personal information, including:

  • The right to be informed about how we use your information
  • The right of access to the information we hold about you
  • The right to rectification if your information is inaccurate or incomplete
  • The right to erasure in certain circumstances
  • The right to restrict processing in certain circumstances
  • The right to data portability
  • The right to object to processing in certain circumstances

You also have the right to complain to the Information Commissioner's Office (ICO) if you have concerns about how we handle your information.

© 2026 RoPA Ready Privacy policy