Your information, handled with restraint

Verification needs enough information to establish which business a record belongs to and to review the evidence behind it — and no more. That includes account details (so you can sign in), business identity details (so the record identifies one business), contact channels (confirmed with one-time codes), and supporting documents you choose to upload.

We use this information to:

• operate your account and the business directory;
• evaluate claims and conduct verification reviews;
• confirm contact channels and prevent fraud, abuse and unauthorised access;
• maintain platform security and respond to your enquiries;
• comply with applicable legal obligations and enforce our terms.

We do not use personal data for marketing, advertising or profiling, and we do not sell personal data. Details of each information category are in Section 3 of the Privacy Policy; purposes in Section 5.

Documents you submit for verification are stored in private, access-controlled storage. They are never published on the public business profile and are never reachable through a public link. Access is limited to you (for your own submissions), the controlling user of the business where applicable, and authorised TruzBiz reviewers — with an authorisation check on every request.

The public record shows that evidence was reviewed and when — never the evidence itself. Full detail is in Section 8 of the Privacy Policy.

Retention is governed by documented purpose, operational requirements and applicable legal obligations: account data while the account is active; verification and audit records for compliance and historical integrity; documents while relevant to their verification or claim. We do not publish fixed per-category retention periods, because they vary by data category, legal requirement and operational need.

The full position is in Section 11 of the Privacy Policy. We state this plainly rather than inventing a schedule.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to the processing of your personal data. Requests may be limited where we must retain data for verification integrity, audit compliance or fraud prevention. To exercise your rights or ask questions, use the contact details in Section 13 of the Privacy Policy.

If publicly displayed business information is inaccurate, the business or an authorised representative may request a correction — see Section 14 of the Privacy Policy and Report an issue. Identity-critical changes are subject to controlled review and may trigger reverification.