1. Introduction

This Privacy Policy explains how TRST Advisory Ltd (“TRST”, “we”, “our”, or “us”) collects, uses, stores, and protects personal data. It applies to personal data collected through our website and in the course of providing real estate finance and investment advisory services. We are committed to complying with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we process personal data, please contact us at enquiries@trst-advisory.com.

2. Who we are

TRST Advisory Ltd is a UK-based real estate finance and investment consultancy. We are the data controller for the personal data we collect.

3. The personal data we collect

We may collect and process the following categories of personal data:

Information you provide directly, including:

  • Name, job title, and organisation
  • Email address, telephone number, and contact details
  • Information submitted through website contact forms
  • Information shared when requesting proposals or engaging with us as a client, prospect, former client, financing partner or supplier

Information we collect automatically, including:

  • Technical data such as IP address, browser type, device identifiers, and pages visited
  • Cookie data and analytics information (see section 9)

Information obtained from third parties, including:

  • Professional information available from public sources, industry databases, or referrals
  • Due diligence or compliance information where required

We do not intentionally collect special categories of personal data unless legally required to do so (for example, for anti-money laundering checks).

4. How we use personal data

We use personal data only for legitimate business purposes, including:

  • Responding to enquiries and communicating with clients, prospective clients, financing partners and suppliers
  • Providing our real estate finance and advisory services
  • Managing contractual relationships
  • Carrying out compliance, due diligence, and regulatory obligations
  • Operating, maintaining, and improving our website
  • Internal record keeping, reporting, and administration
  • Protecting our legal rights and managing disputes

We process personal data on one or more of the following legal bases: your consent; performance of a contract; compliance with legal obligations; or our legitimate interests in operating and developing our business.

5. Sharing your personal data

We do not disclose your personal data to third parties except as described in this policy. We do not sell personal data. We may share personal data with:

  • Professional advisors (such as lawyers, accountants, or auditors)
  • IT service providers and website hosting partners
  • Third-party analytics providers
  • Counterparties, lenders, or introducers involved in specific advisory work (where appropriate and lawful)
  • Regulators or authorities where required by law

Where we use third parties to process personal data on our behalf, they do so under contractual obligations to protect your information.

We may also disclose your personal information to fulfil your instructions to us.

6. International data transfers

If personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or approved data transfer mechanisms.

7. Data retention

We keep personal data only for as long as necessary to fulfil the purposes outlined in this policy, including meeting legal, regulatory, tax, or reporting requirements. Retention periods vary depending on the type of data and the context in which it is processed.

8. Your data protection rights

Under UK GDPR, individuals have the following rights:

  • Access to the personal data we hold
  • Correction of inaccurate or incomplete data
  • Erasure, in certain circumstances
  • Restriction of processing
  • Objection to processing based on legitimate interests
  • Data portability, where applicable
  • Withdrawal of consent, where consent is relied upon

To exercise any of these rights, please contact enquiries@trst-advisory.com.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

9. Cookies and website analytics

Our website uses cookies and similar technologies to help us understand how visitors use the site and to improve its functionality. Cookies may collect technical information such as IP addresses, browser types, and pages viewed.

You can manage or disable cookies through your browser settings. Disabling cookies may affect website performance.

10. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure. While we take reasonable steps to safeguard information, no system can be guaranteed fully secure.

11. Links to third-party websites

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies.

12. Changes to this Privacy Policy

We may update this policy periodically. The latest version will be published on our website, and the date of the most recent revision will be shown at the top of the policy.

All Rights Reserved – TRST Advisory Ltd

Sept 2025