Privacy policy clauses for Trustpilot
Trustpilot is a customer review and reputation management platform that collects user reviews and ratings about businesses. Websites integrate Trustpilot to display customer feedback, build trust, and manage their online reputation through aggregated review data.
Free scan · No signup · Results in 60 seconds
What data Trustpilot collects
Your privacy policy must disclose each of the following data types when you use Trustpilot.
When does Trustpilot trigger privacy obligations?
Trustpilot integration triggers privacy obligations the moment you embed its widget, API, or review-collection script on your site or in your app. Here's what starts immediately:
Data flows that activate compliance duty:
Trustpilot collects review content, user names, and IP addresses of reviewers and site visitors. If you embed the widget or invite customers to review via Trustpilot's platform, you become a joint controller (under GDPR Article 26) or data sharing partner with Trustpilot A/S (Denmark, EU). The IP address collection alone triggers tracking consent obligations in EU/EEA jurisdictions under the ePrivacy Directive Article 5(3).
Jurisdiction-specific thresholds:
- –GDPR (EU/EEA + UK): Applies immediately if any reviewer or site visitor is in these regions. You must have a Data Processing Agreement (DPA) with Trustpilot A/S per GDPR Article 28. Trustpilot's privacy policy should specify its role; verify it's published on their site.
