Privacy Policy

At TrustCraft, we are committed to protecting the privacy and security of individuals who interact with our website and digital services on behalf of healthcare organizations. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information obtained through our website and other online services (collectively, the "Site"). This Policy applies to business-to-business interactions in the U.S. healthcare sector and is not directed to individual consumers or patients. This Privacy Policy is intended for individuals interacting with TrustCraft in a business capacity. It does not create a contractual relationship beyond what is required by law.

Scope

This Privacy Policy applies to personal information collected by TrustCraft through the Site and any online services we make available to prospective or current clients, partners, and website visitors acting in a business capacity. It does not apply to information collected offline or during the performance of our consulting engagements, which are governed by separate contractual confidentiality and data protection terms.

This Policy is designed to reflect requirements and best practices consistent with applicable U.S. data privacy laws and general global standards, to the extent applicable.

Information We Collect

We may collect the following categories of personal information:

Contact Information: such as your name, job title, business email address, telephone number, and organization affiliation.
Business Inquiry Information: including information provided through contact forms, questionnaires, or email communications.
Technical and Device Information: including IP address, browser type, device ID, operating system, referring URLs, and session duration.
Usage Data: such as page visits, clickstream data, and behavioral analytics related to your use of the Site.
Communications and Preferences: including marketing preferences or any other information you voluntarily provide.

We do not intentionally collect sensitive personal information (e.g., Social Security numbers, health records, or geolocation data) through the Site. Please do not submit such data via web forms or email.

Effective Date: July 1, 2025

How We Use Information

We may use your personal information for the following business and operational purposes:

To respond to inquiries and provide requested materials or information.
To provide and maintain our Site, including usage monitoring, troubleshooting, and analytics.
To communicate with you, including newsletters, updates, event invitations, or service-related announcements.
To comply with legal and regulatory obligations.
To improve our services, including conducting internal analysis and performance reviews.
To secure our operations, including detecting and preventing fraud or unauthorized access.

Cookies and Tracking Technologies

We use cookies and similar technologies to improve the Site’s performance and user experience. Cookies may be used to:

Maintain session state and login credentials (if applicable)
Track aggregated site usage statistics
Identify browser settings and preferences

As of the Effective Date, TrustCraft relies exclusively on built-in analytics and cookie technologies provided by its website platform solution. We do not use Google Analytics, Meta Pixel, or other third-party ad tracking technologies.

Users may control cookie behavior through browser settings. Blocking cookies may affect the functionality of certain parts of the Site.

Legal Basis for Processing

Although TrustCraft operates exclusively in a business-to-business (B2B) capacity and is not currently subject to GDPR, our processing activities are designed to be consistent with recognized legal bases, including:

Consent: when you voluntarily submit a form or request information.
Legitimate Interests: in developing, marketing, and improving our business services.
Legal Obligation: when processing is necessary to comply with applicable law.

Information Sharing

We do not sell personal information. We may share personal information with:

Service Providers: including IT support, hosting providers, CRM platforms, and communication tools. These entities are contractually obligated to protect and use the data only for authorized purposes.
Professional Advisors: such as auditors, accountants, or legal counsel in connection with business operations or legal claims.
Regulatory and Legal Disclosures: including if required to:
- Comply with a subpoena, court order, or legal process;
- Enforce our terms or policies;
- Protect our rights, safety, or property, or those of others;
- Investigate or prevent suspected unlawful activity;
- Respond to emergencies or threats to safety;
- Comply with audit or law enforcement requirements.
Successors in Interest: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of our business or assets. In such cases, we will require the successor entity to handle personal information in a manner consistent with this Privacy Policy and applicable laws.

Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Policy, comply with applicable laws, enforce our agreements, and resolve disputes. Where feasible, data is de-identified or aggregated before long-term retention.

Data Security

We implement a combination of administrative, technical, and physical controls to protect personal information under our control. These measures include encryption, secure hosting, role-based access, and periodic risk assessments. While we strive to protect your information, no method of transmission over the internet or storage is completely secure. In the event of a data breach involving your information, we will notify you in accordance with applicable laws and industry best practices.

Your Rights and Choices

Depending on your jurisdiction, you may have rights including:

Access to the personal information we hold about you
Correction or deletion of your information
Opting out of marketing communications
Limiting use of any sensitive personal information (if collected)
Opting out of targeted advertising (if applicable)

You may exercise these rights by contacting us using the details below. We may request additional information to verify your identity.

Children’s Privacy

This Site is not intended for or directed to children under 13. We do not knowingly collect personal information from children. If we learn that we have received such information, we will delete it promptly.

International Data Transfers

TrustCraft currently operates only in the United States and does not transfer personal data internationally. Should this change in the future, we will implement appropriate safeguards in accordance with applicable cross-border data transfer laws.

Third-Party Websites

The Site may contain links to third-party websites. This Privacy Policy does not govern those sites, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Policy

We may update this Privacy Policy from time to time. If material changes are made, we will update the Effective Date and post the revised version on this page. We recommend reviewing this page periodically to stay informed about our privacy practices.

If you have any questions about this Privacy Policy or wish to exercise your rights, you may contact us at info@trustcraft.ai.