Privacy Policy

Last updated: 4 August 2026

1. Who we are

This Privacy Policy explains how 4Hero Ltd ("we", "us", "our") collects and uses personal data. We are a company registered in England and Wales (company number 15751297), with a registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We are the data controller for the personal data described in this policy.

We operate the online store at store.trusthero.io (the "Store"), where we sell NFC cards and plates ("Products"), and the related registration area where you set up and manage your Product. This policy covers personal data we collect through the Store, through Product registration, and through your use of our websites.

The TrustHero subscription service (the AI "local SEO" assistant available at trusthero.io) is operated by our affiliate Widbox Inc (United States) under its own terms and privacy notice. If you take out a subscription, your data is also processed by Widbox Inc as described in section 6.

If you have any questions about this policy or your personal data, contact us at support@trusthero.io. 

2. The personal data we collect

Depending on how you interact with us, we may collect the following:

When you place an order (customers): your name, email address, phone number, delivery and billing address, order history, and communications with us. Payments are processed by our payment providers (see section 6); we do not store your full payment card details.

When you register and use a Product (account holders): your email address and the link to your Google Business Profile (or similar destination) that your Product points to. We also record basic, non-identifying analytics about how many times a Product has been scanned. When a visitor taps your Product, they are briefly routed through our page and immediately forwarded to your chosen destination; we do not collect personal data about those visitors, and any review they leave is handled by the destination service (for example, Google).

When you visit our websites: technical and usage data such as IP address, device and browser information, approximate location (city level), pages viewed, and interactions with the site. Some of this is collected through cookies and similar technologies, including analytics and, where enabled, session-recording and advertising tools (see section 4).

We do not intentionally collect special-category (sensitive) personal data such as health, biometric or financial account data beyond what is needed to take payment.

3. How we use your data and our legal bases

We use personal data for the following purposes, relying on the legal bases shown:

To process and deliver your orders, take payment, provide customer support, and manage your Product registration — performance of a contract.

To send marketing emails and messages about our Products and offers — your consent, or our legitimate interest in marketing to existing customers where you have not opted out (see section 5).

To run analytics, session recording and advertising that rely on non-essential cookies — your consent.

To keep our sites secure, prevent fraud, and run our business — our legitimate interests in operating and protecting the business.

To meet legal, tax and accounting obligations — compliance with a legal obligation.

4. Cookies and similar technologies

We use cookies and similar technologies to make the Store work, to understand how it is used, and to support marketing. These fall into broad categories: strictly necessary (always on), analytics and performance, and advertising. We use providers including Google Analytics, Amplitude, Hotjar and Smartlook for analytics and session insights, and Meta (Facebook) and Google for advertising and measurement.

Non-essential cookies are used only where permitted. Where you are in a region that requires prior consent (such as the UK), we ask for your consent through our cookie banner before setting non-essential cookies, and you can change your choices at any time via the cookie settings on our site.

5. Marketing communications

If you have consented, or if you are an existing customer and have not opted out, we may send you marketing emails and messages about similar Products. Every marketing message includes an easy way to unsubscribe, and you can opt out at any time by using the unsubscribe link or by emailing support@trusthero.io.  We also send service messages related to your orders (such as order confirmations, shipping updates and, where relevant, SMS order notifications); these are not marketing and are sent as part of fulfilling your order.

6. Who we share your data with

We share personal data with trusted service providers who process it on our behalf, and only as needed to run our business. These include:

• E-commerce platform and payments: Shopify (our store platform), and payment providers including Shopify Payments, PayPal, Amazon Pay, Apple Pay and Google Pay.

• Email and reviews: Klaviyo and Shopify Email (marketing and transactional email), and Loox (product reviews).

• Customer support: Front (our support inbox and helpdesk).

• Analytics and advertising: Google (Analytics, Ads, Tag Manager), Meta (Facebook), Amplitude, Hotjar and Smartlook.

• Order fulfilment and shipping: our third-party fulfilment and shipping partners, together with the carriers who deliver your order. They receive the details needed to ship to you, such as your name, address, phone number and email.

• Hosting: Shopify and DigitalOcean.

• Our affiliate: Widbox Inc (United States), where you register a Product or take out a TrustHero subscription, so that the subscription service can be provided to you.

Where we use marketing tools such as advertising "custom audiences", we may share limited contact data (such as a hashed email) with advertising platforms to show or measure ads. We do not sell your personal data.

We may also disclose personal data where required by law, to protect our rights, or in connection with a business sale or reorganisation.

7. International transfers

We are based in the UK, and some of our service providers and team members are located outside the UK. This means your personal data may be transferred to and processed in countries outside the UK. Where we do this, we take steps to ensure an appropriate level of protection, such as relying on UK "adequacy" regulations where they apply, or putting in place the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses with the relevant provider.

8. How long we keep your data

We keep personal data only for as long as we need it:

• Order and transaction records: for the duration of our relationship and for up to 6 years afterwards, to meet tax and accounting requirements.

• Product registration and account data: while your Product/account is active and for up to 12 months after it becomes inactive.

• Marketing contact data: until you unsubscribe or ask us to stop.

• Customer support correspondence: up to 24 months.

• Cookies and analytics identifiers: for the periods set out in our cookie settings.

When we no longer need personal data, we delete or anonymise it.

9. Your rights

Under UK data protection law you have the right to: access your personal data; ask us to correct it; ask us to delete it; restrict or object to how we use it; withdraw consent where we rely on it; and receive certain data in a portable format. To exercise any of these rights, email us at support@trusthero.io. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to address your concerns first.

10. How we protect your data

We use reputable service providers and take reasonable technical and organisational measures to protect personal data, and we limit access to those who need it to do their job. No system can be guaranteed completely secure, but we work to protect your information and to respond appropriately if a problem occurs.

11. Children

Our Products and Store are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above, and, where appropriate, let you know.

13. Contact us

4Hero Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Email: support@trusthero.io.