Your information.
Clear responsibilities.
Black & White Facilities Limited is responsible for the personal information processed by Company Trust Check. You can search and read public reports without an account.
Information in company reports.
We obtain company records from Companies House and the official sources identified in each report, and verified business contact information from a company’s own website where available. These may include names, roles and appointment histories of officers and controllers, month and year of birth where supplied by Companies House, service or registered addresses, filed shareholder information, and people named in relevant official records. A business address can also be a person’s address.
We use these records to present company evidence, connect exact legal entities and explain deterministic calculations. Official appointment identifiers establish officer connections; a name-only match is not treated as a verified company identity. The report identifies source dates, matching limitations and unavailable coverage.
Why we process it.
We rely on legitimate interests to make relevant public company evidence understandable and traceable, maintain accurate reports, and deliver and protect this free service. We balance those purposes against the rights and reasonable expectations of the people concerned. Public availability does not remove those rights.
We do not use a Trust Score to make automated decisions about people. Reports provide information for visitors to assess; they do not decide employment, lending or procurement outcomes.
Technical information and cookies.
Your browser sends technical request information, including an IP address and page address, to the infrastructure delivering the service. We use a keyed hash of a trusted IP address for short service-protection counters; the application does not store the raw IP in those counters.
The anonymous search and report journey does not set application cookies. We have not added advertising trackers or visitor analytics. Account sign-in, private workspaces and email alerts are not part of this public release.
Sharing and access.
Public reports are visible to anyone opening their address. Relevant requests go to official source services and, where applicable, company websites so we can collect evidence; we do not pass a visitor’s IP address to those sources as part of a company lookup. Infrastructure providers process requests and stored records to host and protect the service. We do not send report or visitor information to an AI service to generate public judgments.
Support information is handled through the operator’s business mailbox. We may share information where required by law or where necessary to investigate misuse or a privacy request. Contact us for details about the infrastructure providers and processing locations used for your request.
How long we keep information.
Service-protection counters older than two days are removed when the limiter next runs. In-memory reports may be reused for five minutes, with a limit of 100 reports per process.
Stored report evidence is kept where needed to reproduce what was displayed, investigate accuracy and maintain the service. Its freshness timestamp controls when we collect again; it does not mean the stored observation has been deleted. We assess continued need when reviewing disputed or superseded records and remove or restrict information that no longer has a justified purpose.
Application diagnostic logs are retained within configured rotating storage limits to investigate errors and protect availability. They are not used to build visitor browsing profiles.
Support correspondence is retained for as long as necessary to resolve the request and any related complaint or legal obligation. Recovery copies are restricted and may retain a record until that backup expires. You can ask us for the retention criteria applying to a particular record.
Your rights, including the right to object.
You can request access, correction, erasure or restriction where the relevant right applies. You have a separate right to object to processing based on legitimate interests, including the republication of information from public registers. We assess requests individually; public availability alone is not a reason to dismiss one.
Send a privacy request or objection ↗
Include enough information to identify the relevant report and your concern. We may ask for proportionate confirmation of identity. Do not send sensitive identity documents unless we explain why they are needed and how to provide them safely.
You can also complain to the Information Commissioner’s Office ↗.
Changes to this notice.
We update this page when the service’s purposes or data practices change. The date above identifies this notice. Contact us about a report correction or use the operator details for a privacy question.