Privacy policy
Last updated: 1 November 2026.
Trustme.lk uses your information for one purpose only: running the review platform. We never sell or rent it, never use it for advertising or marketing, and never share it for any other purpose. You can see, correct or delete it at any time. Questions: [email protected].
1. Who we are
Trustme.lk is the controller of your personal data. Contact: [email protected]. This policy follows Sri Lanka's Personal Data Protection Act No. 9 of 2022.
2. What we collect and why
| Data | Why we use it | Shown publicly? |
|---|---|---|
| Your name, email address, password (stored scrambled) | Create and secure your account, confirm your email | First name and last initial only |
| Your reviews, ratings and dates | Show them on the site and calculate ratings | Yes |
| Google account name and email (if you use Google sign-in) | Log you in | First name and last initial only |
| Business details a business owner adds (name, logo, contact details) | Show the company page | Yes |
| Domain verification records and documents (e.g. BR certificate) | Check that a claim is genuine | No |
| IP address, browser and device, time of visit | Security, stopping fake reviews and spam | No |
| Reports and messages you send us | Handle reports and support requests | No |
We only email you about your own account and reviews: confirming your email, password resets, and replies or decisions about your reviews. We rely on your consent when you create an account and post, on our legitimate interest in keeping reviews genuine and the site secure, and on legal duties where they apply.
3. What other people can see
Your first name and last initial, your reviews and ratings, the dates, your city if you add it, and how many reviews you have written. Your email address and IP address are never shown.
4. Who we share data with
We do not sell or rent personal data. We share it only with:
- service providers that run the site for us: web hosting, email delivery, website security and speed, and Google sign-in if you choose it;
- a business you reviewed – only the public review itself, never your email;
- police, courts or authorities when Sri Lankan law requires it.
Some providers store data outside Sri Lanka. We only use providers that protect it to a standard required by law.
5. Cookies and the app
We use necessary cookies only: to keep you logged in and to protect forms from spam. If you install Trustme on your phone, the app stores the logo, styles and your unfinished review drafts on your device; you can clear them in your browser settings.
6. How long we keep data
- Account data: while your account is open.
- Reviews: while they are published. When you delete your account they are removed.
- Unconfirmed accounts and unpublished reviews: deleted after 6 months.
- Security logs: up to 12 months.
- Business verification documents: deleted once the claim is decided.
7. Your rights
You can ask to see the personal data we hold about you, correct it, delete it, withdraw consent, object to how we use it, or get a copy. Most of this you can do yourself in your account settings; otherwise email [email protected] and we will reply within 21 days. You can also complain to the Data Protection Authority of Sri Lanka.
8. Security
The site uses HTTPS, passwords are stored with modern one-way hashing, and admin access is limited to named staff. If a data breach affects you, we will tell you and the authorities as the law requires.
9. Children
Trustme is not meant for children under 18 without a parent's or guardian's permission. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes
We will post any changes on this page and update the date at the top. Important changes will be shown on the site or emailed to account holders.