Draft for legal review. This text is not in force until it has been reviewed and published.
Privacy Policy
Version 2026-10-01
This policy covers the data TrustID OÜ controls: accounts of the businesses that use LegitFlash and visitors to this website. Data about applicants is processed on behalf of our clients, who are responsible for it; see the notice for applicants.
What we collect as controller
Account data of the client's users (name, email, sign-in and security data), billing data, support messages, and technical logs needed to run and protect the service.
Applicant data
We process it only as processor for our clients, under the Data Processing Agreement. If you were asked to verify your identity, read how LegitFlash processes your data and contact the organisation that asked you.
Why and how long
To provide the service, bill it, keep it secure and meet legal duties. We keep data while the account exists and for the legal periods afterwards.
Your rights and contact
You can ask us to access, correct or delete your account data, and to restrict or object to its use. Write to support@example.com. You can complain to the Estonian Data Protection Inspectorate or to your local authority.
Data protection contact: support@example.com