World Trust Index | Privacy Policy

1. Our commitment to your privacy

(a) World Ethics Organisation Pty Ltd (we, us, our) respects your privacy and is committed to protecting the personal information of the professionals, assessors and website visitors who interact with World Trust Index (WTX).

(b) This Privacy Policy explains how we collect, use, store, disclose and protect your personal information, and the rights you have in relation to that information.

(c) We comply with the Australian Privacy Principles contained in the Privacy Act 1988 (Cth), the EU General Data Protection Regulation (GDPR) where applicable, and the UK Data Protection Act 2018.

(d) You can contact our concierge team about this Privacy Policy, or any concerns relating to your personal information, at concierge@worldtrustindex.com.

2. What personal information we collect

The types of personal information we collect depend on how you interact with WTX.

(a) If you apply to become WTX Certified (a Candidate), we collect:

Full name, professional title and company
Contact details including email, phone, city and country
Professional background, specialisms and career details
A professional headshot and (optionally) a company logo
Payment information (processed securely via Stripe — we do not store card details)
Your unique WTX Certification Number
Any information you provide during the eligibility, application and profile setup process

(b) If you complete a WTX assessment (an Assessor), we collect:

Full name, email address, organisation
Your professional relationship to the Candidate
How long you have worked with the Candidate
Your scored and written responses to the assessment

(c) If you visit our website, we collect:

Technical information such as IP address, browser type, operating system and referring URL
Cookie data as described in our Cookie Policy

(d) If you contact us directly, we collect the information you provide in that communication.

We do not knowingly collect Sensitive Personal Information (as defined under the GDPR) unless you voluntarily provide it and expressly consent.

3. How we collect your personal information

(a) We collect personal information directly from you when you:

Complete the WTX eligibility quiz, application form or profile intake
Pay for WTX Certification
Complete an assessment at the request of a Candidate
Contact us by email or through the website
Subscribe to WTX communications

(b) We may also receive personal information from third parties, including:

Candidates who nominate you as an Assessor
Our payment processor (Stripe) for transaction confirmation
Service providers who support our operations

(c) By providing personal information to us, or to anyone providing it on your behalf, you consent to its collection and use as set out in this Privacy Policy.

4. How we use your personal information

We use personal information to operate and deliver the WTX service. Specifically, we use your information to:

(a) Deliver the WTX Certification process, including verifying eligibility, processing applications, managing assessments, calculating World Trust Ratings, issuing Trustmarks, and publishing verified profiles on the WTX Register of Certified Professionals.

(b) Communicate with you, including updates on your application, certification status, annual renewal reminders, and general communications about the WTX service.

(c) Conduct quality assurance, including verifying Assessor identity and professional relationships, auditing assessments, and investigating any concerns about the integrity of the certification process.

(d) Process payments via Stripe.

(e) Improve WTX, including analysing de-identified usage data, testing new features, and developing the service.

(f) Market the WTX service, where you have consented to receive marketing communications or where permitted by applicable law. You can opt out at any time.

(g) Comply with our legal obligations, including responding to legal requests, investigations, court orders or regulatory requirements.

If you withhold personal information that we reasonably require, we may not be able to provide the WTX service to you.

5. Assessor confidentiality

(a) Individual Assessor scores and identities are treated as confidential.

(b) Candidates are never shown individual Assessor scores or responses. Candidates receive an Integrity Report showing their combined scores across all Assessors.

(c) Candidates are notified only when an Assessor has completed their assessment, so they can track progress and follow up as needed.

(d) WTX may contact Assessors to verify identity and professional relationship as part of our quality assurance process. This verification is part of what makes WTX Certification credible.

(e) Assessors are informed at the start of each assessment that their responses are confidential and may be audited by WTX.

6. How long we retain your personal information

(a) We retain personal information for as long as necessary to deliver the WTX service, meet our legal obligations, and support the integrity of the Register of Certified Professionals.

(b) Specifically:

Certified Professional data is retained for the duration of your Certification and for seven years after your last active Certification period, to maintain the integrity and historical record of the Register.
Assessor data is retained for the purpose of quality assurance for a minimum of two years from the date of the assessment.
Unsuccessful applicant data is retained for 90 days after the application process ends, then deleted or anonymised.
Marketing data is retained until you unsubscribe or request deletion.

(c) You may request earlier deletion of your personal information by contacting our concierge team at concierge@worldtrustindex.com, subject to our legal and integrity-based retention obligations.

7. Who we share your personal information with

(a) We share personal information only where it is necessary to deliver the WTX service, to comply with legal obligations, or with your consent.

(b) We may share personal information with:

Our service providers, including HubSpot (CRM and website), Airtable (data management), SurveySparrow (assessments), MailerLite (email communications), Stripe (payment processing), and similar operational service providers. These providers are bound by confidentiality and data protection obligations.
Legal and regulatory authorities where required by law or in response to valid legal processes.
A successor entity if we are involved in a merger, acquisition, sale of assets, or restructuring, subject to equivalent privacy protections.

(d) Certified Professionals' public profile information (name, title, company, bio, specialisms, city, country and World Trust Rating) appears on the WTX Register of Certified Professionals and is intended to be publicly visible.

8. GDPR rights (for individuals in the EU and UK)

If you are located in the European Union or the United Kingdom, you have the following rights under the GDPR or UK Data Protection Act:

(a) Right to be informed — to know how your personal information is being used. (b) Right of access — to obtain a free copy of the personal information we hold about you. (c) Right to rectification — to correct information that is inaccurate or incomplete. (d) Right to erasure — to request deletion of your personal information ("the right to be forgotten"), subject to our legal and integrity-based retention obligations. (e) Right to restrict processing — to limit how we use your personal information. (f) Right to data portability — to receive your personal information in a structured, commonly used format. (g) Right to object — to object to our processing of your personal information, including for direct marketing. (h) Right in relation to automated decision-making — to not be subject to decisions based solely on automated processing.

To exercise any of these rights, contact our concierge team at concierge@worldtrustindex.com. We may ask you to verify your identity before acting on a request.

You also have the right to lodge a complaint with a supervisory authority in your country of residence.

9. International data transfers

(a) We are based in Australia, and your personal information may be stored or processed in countries outside your country of residence, including Australia, the United States, the United Kingdom, and the European Union.

(b) Where we transfer personal information outside the European Economic Area or the United Kingdom, we rely on lawful transfer mechanisms, including:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions issued by the relevant regulators
Other appropriate safeguards

10. Security of your personal information

(a) We take the security of your personal information seriously and implement reasonable technical and organisational measures to protect it, including:

Secure hosting via established service providers
Encryption in transit
Access controls and authentication requirements
Confidentiality obligations for our staff and service providers
Regular review of our security practices

(b) While we take reasonable care, no system is 100% secure. The transmission of information to us is at your own risk, and we cannot guarantee absolute security.

(c) If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and relevant authorities as required by applicable law.

11. Access to, and correction of, your personal information

(a) You can request access to the personal information we hold about you, or request correction, by contacting our concierge team at concierge@worldtrustindex.com.

(b) We will respond to your request within 30 days. In limited circumstances, we may be unable to provide access or make corrections — where this occurs, we will explain why.

12. Cookies and website analytics

(a) Our website uses cookies. Full details of how we use cookies, including the types of cookies we use and how to manage your preferences, are set out in our Cookie Policy.

(b) Our website may also use third-party analytics services (such as Google Analytics) to understand usage patterns in aggregate.

13. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing personal information.

14. Children

(a) WTX is designed for professional adults. We do not knowingly collect personal information from individuals under 16 years of age.

(b) If we become aware that we have collected personal information from a child under 16 without appropriate consent, we will delete that information promptly.

15. Complaints

(a) If you believe we have breached this Privacy Policy, the Privacy Act 1988 (Cth), the GDPR, or any other applicable privacy law, please contact our concierge team at concierge@worldtrustindex.com.

(b) We will investigate your complaint and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with:

The Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au
Your local data protection authority (for EU/UK residents)

16. Changes to this Privacy Policy

(a) We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website.

(b) We encourage you to review this Privacy Policy periodically.

Contact

World Ethics Organisation Pty Ltd ACN 682 580 785 · ABN 92 682 580 785 Suite 302, 13/15 Wentworth Ave, Sydney NSW 2000 concierge@worldtrustindex.com www.worldtrustindex.com

Privacy Policy