Who is responsible
TRS Consultancy & Agency Ltd, trading as TRS, is the data controller for the personal data described here. Contact: tousif.rahman@trsca.com.
What we collect
Through TRS-SCAN we collect your name, company, email address, and the answers you provide to the 19 questionnaire questions, together with the firm type, firm size and country you select.
Through the contact links on this site we receive whatever you choose to send us: by email, the email address you write from and the content of your message; by WhatsApp, your phone number, WhatsApp profile name and message; by the booking link, the name, email address and any notes you enter when booking a call.
We do not store IP addresses or user-agent strings from TRS-SCAN submissions. Our hosting provider processes standard connection data, including IP address, in server and security logs for a short period.
Why we collect it, and the lawful basis
To deliver your TRS-SCAN report by email and to send one scheduled follow-up email 4 to 6 days later: consent, given when you submit the scan (GDPR Article 6(1)(a)). You can withdraw consent at any time and we will stop.
To answer an enquiry you send us, and to arrange and hold a call: our legitimate interest in responding to the contact you initiated, or the steps taken before entering a contract (Article 6(1)(f) and 6(1)(b)).
To keep the site available and secure, and to keep business records where the law requires: legitimate interest and legal obligation (Article 6(1)(f) and 6(1)(c)).
How long we keep it
Scan submissions and the email addresses attached to them are kept for 24 months, then deleted or anonymised. Enquiry correspondence is kept for 24 months after our last exchange. Records we must keep for accounting or tax purposes are kept for the statutory period. You can ask us to delete your data sooner.
Who processes data for us
Supabase, for the database that stores scan submissions. Resend, for sending the report and follow-up email. Cloudflare, for hosting, content delivery and security. We select EU regions where the provider offers them.
Google Calendar, for the booking link. If you use it, Google receives the details you enter and your connection data under Google's own privacy terms. You can email or message us instead and never touch it.
Fonts are served from this website itself. We do not load fonts, scripts or embedded media from Google Fonts or any other third-party domain, so browsing this site does not disclose your IP address to those services.
Some of these providers are based in the United States or transfer data there. Those transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
Cookies and tracking
This site sets no advertising or profiling cookies, and the scan contains no behavioural tracking. We do not sell or share your data for advertising.
Your rights
Under the GDPR you have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to our processing of it, to receive it in a portable form, and to withdraw consent where consent is the basis. You also have the right to lodge a complaint with your national data protection authority.
How to reach us about data
Email tousif.rahman@trsca.com with the word Privacy in the subject line, stating what you would like us to do. We aim to reply within 30 days and we will not charge you for a first request.
Changes
If this notice changes, the version published here is the version that applies.
TRS Consultancy & Agency Ltd