Privacy Policy

At Trinity Protection World Limited, we consider data privacy not just a legal obligation, but a cornerstone of digital sovereignty. This policy explains how we collect, use, and protect your information within our high-performance infrastructures and AI transformation services.

1. Data Controller and Contact Information

Trinity Protection World Limited is the controller of your personal data. Our operations are conducted from our registered office in London:

2. Categories of Data We Collect

In order to provide our specialized digital infrastructure services, we process several categories of information:

• Identity and Contact Data: Name, corporate email, and professional details provided during consultations.
• Technical Infrastructure Data: IP addresses, browser telemetry, and system logs required to maintain the security of our "Sovereign Data Ecosystems."
• AI & Sensor Metadata: When deploying edge computing or proprietary AI models, we process encrypted metadata to optimize system performance and data integrity.
• Financial Transaction Data: We collect transaction history for billing. However, we do not store or process sensitive credit card details on our servers.

3. Payment Processing and Stripe

To ensure the highest level of security, all payments are handled by Stripe, Inc. When you purchase our services, your payment data is captured directly by Stripe through their secure interface.

• Stripe uses this data to process your payment and prevent fraud.
• For a complete understanding of how your financial data is handled, please refer to the Stripe Privacy Policy.

4. International Data Transfers (SCCs)

As a global technology provider, Trinity Protection World Limited may process data in jurisdictions outside the UK or the European Economic Area (EEA).

To ensure your digital sovereignty remains protected, we utilize Standard Contractual Clauses (SCCs) approved by the European Commission (and the UK Addendum) for all international transfers. These clauses legally obligate our global partners to maintain security standards equivalent to the UK GDPR.

5. Data Retention and Integrity

We retain your data only for as long as necessary to fulfill the purposes of our service agreement or to meet legal requirements. Consistent with our "Immutable Integrity" architecture, certain system logs and audit trails are retained for up to 7 years to ensure historical verifiability and regulatory compliance.

6. Your Statutory Rights

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

• The right to access your personal data.
• The right to request rectification of inaccurate data.
• The right to request erasure ("the right to be forgotten").
• The right to object to or restrict processing.
• The right to data portability.

To exercise any of these rights, please contact our Data Protection Officer at the email address provided in Section 1.

7. Security Architecture

We implement advanced technical measures, including end-to-end encryption, multi-factor authentication (MFA), and zero-trust access protocols. Our infrastructure is designed to protect your information from unauthorized access, loss, or alteration within our proprietary perimeters.