Privacy Policy

Last updated: 21 October 2026

At trusti, we believe your sexual health is your business. Your privacy matters, and we’re committed to treating your personal information with care, confidentiality and respect.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, purchase our products, contact us or use services we facilitate.

It also explains your rights under UK data protection law and how to exercise them.

1. Who We Are

This Privacy Policy applies to Trusti Diagnostics Ltd (“trusti”, “we”, “us” or “our”), a company registered in England and Wales.

Company details

Trusti Diagnostics Ltd is the data controller for personal information that it determines how and why to process in connection with its UK website, product sales and customer services.

This policy applies to our UK operations and does not automatically extend to services provided by Trusti Diagnostics Inc. in Canada.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. Our Privacy Principles

We believe that access to sexual healthcare should never come at the expense of privacy.

Our approach is guided by five principles:

Privacy first. We collect only the information reasonably necessary to operate our services, fulfil orders and meet our legal obligations.

Your health information deserves extra protection. We recognise that information about sexual health can be especially sensitive and requires appropriate safeguards.

No sale of personal information. We do not sell customer personal information or identifiable health information to data brokers.

No unnecessary access to test results. Our rapid tests are designed to be interpreted privately by customers. We do not routinely collect or store individual test results.

Transparency and control. We explain how information is used and provide ways to exercise your data protection rights and manage optional marketing preferences.

3. Information We Collect

The information we collect depends on how you interact with trusti.

3.1 Information you provide

When you purchase a product, contact us or interact with our Website, we may collect:

  • Name

  • Email address

  • Telephone number, where provided

  • Billing and delivery addresses

  • Products purchased and order history

  • Payment transaction details and payment status

  • Customer service correspondence

  • Marketing preferences

  • Information you voluntarily provide through enquiries, forms, surveys or promotions

Payments are processed through Shopify Payments and its payment service providers. We do not ordinarily receive or retain complete payment card numbers.

3.2 Information collected automatically

When you visit our Website, we and our service providers may collect:

  • IP address

  • Browser type and device information

  • Operating system

  • Pages visited and website interactions

  • Referral sources

  • Approximate location derived from technical information

  • Cookie identifiers and related preferences

  • Technical logs used for security, fraud prevention and website functionality

The collection of information through non-essential cookies and similar technologies is subject to applicable consent requirements.

3.3 Information relating to health

Because trusti sells sexual health products, some information we process may reveal or suggest information about a person’s health.

For example, an identifiable purchase of an STI testing product may constitute health-related personal data, even where no test result is provided to us.

We treat such information as sensitive and apply additional safeguards where required.

Customers interpret their rapid-test results themselves. We do not routinely request, collect or store individual test results or clinical consultation records through the standard product purchase process.

If you voluntarily disclose health information in a customer service enquiry, we will limit its use to the relevant enquiry and other purposes permitted by law.

We do not use identifiable health information for advertising profiling without a valid legal basis and any additional permissions required by law.

4. How We Use Personal Information

We use personal information for the following purposes, where a valid legal basis applies.

PurposeLegal basis under UK GDPRProcessing and fulfilling orders, including payment, delivery and order communicationsPerformance of a contractResponding to customer service enquiries and managing product issuesPerformance of a contract or legitimate interests, depending on the enquiryComplying with tax, accounting, product safety and other legal obligationsLegal obligationProtecting our Website, preventing fraud and maintaining securityLegitimate interests or legal obligation, as applicableMaintaining and improving Website functionality and customer experienceLegitimate interests, or consent where requiredSending optional promotional emails and newslettersConsent, or another lawful basis where permitted by lawManaging promotions, discounts and referral offersPerformance of a contract, consent or legitimate interests, depending on the activityEstablishing, exercising or defending legal claimsLegitimate interests or legal obligation, as applicable

Where we rely on legitimate interests, we consider whether our interests are outweighed by your rights and freedoms.

Where processing involves special category health information, we must also identify a separate condition under Article 9 of the UK GDPR. The condition depends on the particular activity and may include explicit consent, the establishment or defence of legal claims, or another applicable statutory condition.

We will not rely on your acceptance of this Privacy Policy as blanket consent to process health information.

5. Test Results and Clinical Information

5.1 Self-interpreted rapid tests

Our at-home rapid testing products are designed to allow customers to interpret results independently using the instructions supplied with each product.

We do not routinely require customers to upload photographs of their tests or submit results to trusti.

We do not maintain a routine database of customers’ individual rapid-test results.

5.2 Clinical support

Customers may access clinical support, consultations or treatment through third-party healthcare partners, including Serefin Inc. and TribElle Inc.

These services may involve the collection of additional personal information, including sensitive health information, by the relevant healthcare provider.

The provider’s privacy notice should explain how it handles that information, including its purposes, lawful bases, retention periods and any disclosures.

Where trusti determines the purposes or means of processing personal information in connection with a clinical service, we remain responsible for meeting our applicable data protection obligations.

Where a provider independently determines how and why it processes patient information, it may act as a separate data controller.

The precise responsibilities depend on the arrangements for the relevant service.

5.3 Confidentiality

We do not disclose identifiable sexual health information to employers, educational institutions, insurers, family members or other unauthorised parties merely because someone purchases a trusti product.

We may disclose information where required by law, where necessary for an appropriately authorised service, or where another lawful basis and applicable safeguards permit disclosure.

6. Sharing Personal Information

We share personal information only where reasonably necessary for the purposes described in this policy and where permitted by law.

Recipients may include:

E-commerce and payment providers. Shopify and Shopify Payments, which support checkout, payment processing, order administration and related services.

Delivery and fulfilment providers. Logistics, postal and courier providers that require relevant delivery information to fulfil orders.

Website and technology providers. Framer, hosting services, IT support providers and other suppliers involved in operating and securing our Website.

Scheduling services. Calendly, where customers choose to book an appointment or access a scheduling feature.

Healthcare partners. Serefin Inc., TribElle Inc. and other appropriately appointed providers, where information sharing is necessary and lawful for a service requested by the customer.

Professional advisers. Legal, accounting, insurance and other professional advisers where access is necessary and subject to appropriate confidentiality obligations.

Regulators and public authorities. Where disclosure is required or authorised by applicable law, including relevant product safety or regulatory obligations.

Business successors. In connection with a genuine business restructuring, merger or acquisition, subject to appropriate legal safeguards.

We require service providers acting on our behalf to handle personal information appropriately and in accordance with applicable contractual and legal obligations.

We do not authorise service providers to use sensitive customer information for their own unrelated advertising purposes.

7. Marketing Communications

We may invite customers and website visitors to subscribe to our newsletter or receive information about trusti products, promotions and services.

Where consent is required, we will obtain it before sending electronic marketing communications.

We will not treat the purchase of a sexual health testing product as automatic consent to receive promotional emails.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the message or contacting contact@trusti.ca.

Withdrawing marketing consent will not affect essential communications relating to orders, customer support, product safety or other legally necessary matters.

We will not use identifiable health information to create sensitive advertising audiences or share it with advertising platforms without meeting applicable data protection requirements.

8. Cookies and Similar Technologies

Our Website may use cookies and similar technologies to operate, maintain security, remember preferences and understand website performance.

These may include:

Strictly necessary cookies, which support essential functions such as checkout, security and session management.

Analytics cookies, which help us understand how visitors use the Website and improve its performance.

Functional cookies, which support optional features and remember selected preferences.

Advertising or marketing technologies, if enabled, which may measure promotional activity or support advertising.

We will request consent before setting or accessing non-essential cookies or similar technologies where required by UK law.

You may withdraw or change your cookie preferences through the controls provided on our Website.

Further information about the cookies in use, their providers, purposes and durations should be made available through our cookie settings or a dedicated Cookie Policy.

9. International Data Transfers

Although Trusti Diagnostics Ltd is established in the United Kingdom, some technology providers and healthcare partners may operate or process information outside the UK.

For example, certain services may involve providers based in Canada, the United States or other jurisdictions.

Where personal information is transferred outside the UK and the transfer is subject to UK international transfer rules, we will ensure an appropriate transfer mechanism is in place.

Depending on the circumstances, this may include:

  • UK adequacy regulations

  • The UK International Data Transfer Agreement

  • The UK Addendum to the EU Standard Contractual Clauses

  • Another legally recognised transfer mechanism or applicable exception

We will apply additional safeguards where required.

The UK and Canadian trusti companies operate as separate legal entities. We do not routinely transfer identifiable UK customer health information to Trusti Diagnostics Inc. in Canada.

Customers may contact us for further information about applicable international transfer safeguards.

10. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, regulatory, accounting and dispute-resolution requirements.

Retention periods depend on the type of information and its purpose.

For example:

  • Order and transaction records may be retained for applicable accounting, tax and legal requirements.

  • Customer service correspondence is retained for as long as necessary to resolve enquiries and meet relevant obligations.

  • Marketing information is retained while a valid basis for its use continues, subject to periodic review.

  • Security and technical records are retained for periods proportionate to their operational and security purposes.

  • Information relating to product safety incidents may need to be retained for longer where required by law.

Where information is no longer required, we will securely delete it or anonymise it in accordance with applicable requirements.

Clinical records maintained independently by healthcare partners are subject to those providers’ retention obligations and privacy policies.

11. How We Protect Your Information

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, misuse and disclosure.

These measures may include:

  • Access controls and restricted permissions

  • Secure payment processing

  • Encryption where appropriate

  • Authentication and account security controls

  • Confidentiality obligations

  • Security monitoring and incident response procedures

  • Appropriate safeguards in contracts with service providers

We take particular care when handling information that could reveal details about a customer’s sexual health.

No internet-based service can guarantee absolute security. However, we take our legal obligations to protect personal information seriously.

Where a personal data breach occurs, we will assess it and notify the Information Commissioner’s Office (ICO) and affected individuals where required by law.

12. Your Data Protection Rights

Under UK data protection law, you may have the right to:

Access: Request a copy of the personal information we hold about you.

Rectification: Ask us to correct inaccurate or incomplete personal information.

Erasure: Request deletion of your personal information in certain circumstances.

Restriction: Ask us to restrict processing in certain circumstances.

Data portability: Receive certain personal information in a structured, commonly used and machine-readable format where the legal requirements apply.

Objection: Object to processing based on legitimate interests and object to direct marketing at any time.

Withdraw consent: Withdraw consent where processing is based on consent, without affecting processing already carried out lawfully.

Rights concerning automated decisions: Exercise applicable rights relating to qualifying automated decision-making.

These rights are not absolute and may be subject to statutory conditions or exemptions.

To exercise your rights, contact contact@trusti.ca.

We may request information reasonably necessary to verify your identity before responding.

We will respond within the timeframe required by applicable law, generally within one month, subject to permitted extensions.

We do not ordinarily charge a fee for exercising your rights, except where permitted by law.

13. Automated Decision-Making

We do not currently use customers’ individual test results to make solely automated decisions that produce legal or similarly significant effects.

Some of our service providers may use automated systems for routine purposes such as payment verification, fraud prevention or website security.

Where automated processing is subject to specific legal requirements, we will provide the necessary information and safeguards.

14. Children and Age Restrictions

Our products and services are intended for adults aged 18 and over.

We do not knowingly market our products to children or intentionally collect personal information from children for the purpose of selling our testing products.

If we become aware that we have collected information from a child in circumstances that require deletion or another corrective action, we will take appropriate steps.

15. Third-Party Websites and Services

Our Website may contain links to third-party platforms, including healthcare providers, scheduling services and social media websites.

Where you access a service operated independently by a third party, its own privacy policy may apply to the information it collects and processes.

We encourage you to review the relevant privacy information before providing sensitive personal information.

This does not remove any data protection responsibilities that trusti may have in relation to information it collects, shares or processes jointly with another organisation.

16. Social Media and Public Communications

If you interact with trusti through social media, the relevant platform may independently collect and process information in accordance with its own privacy policy.

We encourage customers not to post identifiable test results, medical information or other sensitive details in public comments or social media messages.

Where you contact us privately with a sensitive enquiry, we may recommend moving the conversation to a more appropriate communication channel.

We will not treat sensitive personal information submitted to us as freely available for unrestricted use simply because it was shared through an online platform.

17. Complaints and the Information Commissioner’s Office

If you have concerns about how we handle your personal information, please contact us first so that we can investigate.

Email: contact@trusti.ca

You also have the right to complain to the UK’s independent data protection regulator, the Information Commissioner’s Office (ICO).

Website: www.ico.org.uk

Telephone: 0303 123 1113

You do not need to contact us before raising a complaint with the ICO.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, business operations or legal requirements.

The latest version will be published on our Website with its updated effective date.

Where a change materially affects how we process personal information, we will provide additional notice or obtain consent where required by law.

19. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Trusti Diagnostics Ltd

27 Old Gloucester Street
Holborn, London
WC1N 3AX
United Kingdom

Company number: 17054212

Email: contact@trusti.ca

Websites: www.trustitests.com and www.trustitests.co.uk


Last updated: 21 October 2026