EmailmoversMyDataHub docs
Browse the docs

Reference / REST reference

Reference

Get the trust document

GET /v1/trust. The trust page as data: ICO registration, lawful basis and LIA, privacy notice, residency statement, sub-processors, retention, complaints and security.

Generated from the contractsView as Markdown

GET /v1/trust

The trust page as data: ICO registration, lawful basis and LIA, privacy notice, residency statement, sub-processors, retention, complaints and security. Mirrored at https://mydatahub.emailmovers.com/trust.json.

PropertyValue
EndpointGET https://mydatahub.emailmovers.com/v1/trust
Operation idgetTrust
CostFree (0 credits)
AccessNo account, key or token needed.
TagCompliance

Request

Parameters

NameInTypeRequiredDescription
MyDataHub-VersionheaderstringnoThe dated API version, pinned per key when left out. Non-breaking changes ship as new dates; the path major changes only for breaking changes, with a 12 month deprecation window.

Example request

curl "https://mydatahub.emailmovers.com/v1/trust"

Responses

200: The trust document.

Headers: RateLimit, RateLimit-Policy.

MemberTypeAlways presentDescription
updated_atstring (date-time)yes
companyobjectyes
company.legal_namestringyes
company.company_numberstringyes
company.trading_asstringyes
ico_registrationobjectyes
ico_registration.numberstringyes
ico_registration.expires_onstring (date)yes
ico_registration.register_urlstring (uri)yes
lawful_basisobjectyes
lawful_basis.basisenum: legitimate_interests_art6_1_fyes
lawful_basis.lia_refstringyes
lawful_basis.lia_urlstring (uri)yes
privacy_noticeobjectyesThe Article 14 privacy notice for contacts, with its history.
privacy_notice.versionstringyes
privacy_notice.urlstring (uri)yes
privacy_notice.versionsarray of NoticeVersionyesEvery version of the Article 14 notice, newest first.
residencyobjectyes
residency.statementstringyes
residency.versionstringyes
sub_processorsobjectyes
sub_processors.versionstringyes
sub_processors.notice_daysintegeryes
sub_processors.notice_channelsarray of enum: email, webhookyesHow customers hear of a change 30 days ahead: by email and by webhook.
sub_processors.listarray of SubProcessoryes
sub_processors.changesarray of SubProcessorChangeyesThe change log, newest first.
retentionarray of objectyes
retention[].categorystringyes
retention[].periodstringyes
retention[].statusenum: confirmed, to_confirmyes
complaintsobjectyes
complaints.urlstring (uri)yesThe complaints form.
complaints.emailstring (email) or nullyesThe complaints address; null until published.
complaints.acknowledgement_daysintegeryes
data_protection_leadobject or nullyesNamed person and email; null until confirmed.
data_protection_lead.namestringyes
data_protection_lead.emailstring (email)yes
datasetsarray of DatasetyesEvery dataset with owner, source, licence, refresh, residency, regulator, warranty and credits per record.
datasets[].idenum: uk_contacts, ie_contacts, global_contactsyesThe dataset an audience draws from. uk_contacts is live; ie_contacts and global_contacts are listed but not yet served.
datasets[].namestringyes
datasets[].statusenum: live, planned, through_our_teamyeslive is served; planned is not yet served; through_our_team is sold through the bespoke service only.
datasets[].ownerstringyes
datasets[].sourcestringyes
datasets[].licencestringyes
datasets[].refreshstringyes
datasets[].residencystringyes
datasets[].regulatorstringyes
datasets[].warrantystringyes
datasets[].credits_per_recordnumber (0 or more)yes1 for owned UK and Irish data.
datasets[].credits_statusenum: confirmed, proposedyes
datasets[].current_versionstring or nullyes
datasets[].versions_availableinteger (0 or more)yesImmutable weekly versions still queryable (the last 52).
securityobjectyes
security.certificationsarray of objectyes
security.encryptionobjectyesHow data is encrypted, as the trust centre publishes it.
security.data_flow_diagram_urlstring (uri) or nullyesThe UK data flow diagram; null until published.
security.pen_test_summary_urlstring (uri) or nullyesThe latest penetration test summary; null until one is published.
security.caiq_urlstring (uri) or nullyesCAIQ v4 answers; null until published.
security.status_pagestring (uri)yes
security.security_txtstring (uri)yes

Example response

{
  "updated_at": "2026-09-26T09:00:00Z",
  "company": {
    "legal_name": "Emailmovers Limited",
    "company_number": "05046417",
    "trading_as": "Emailmovers Ltd"
  },
  "ico_registration": {
    "number": "Z9714386",
    "expires_on": "2026-12-18",
    "register_url": "https://ico.org.uk/ESDWebPages/Entry/Z9714386"
  },
  "lawful_basis": {
    "basis": "legitimate_interests_art6_1_f",
    "lia_ref": "EM-LIA-2026-03",
    "lia_url": "https://emailmovers.com/trust/lia"
  },
  "privacy_notice": {
    "version": "2026-02",
    "url": "https://emailmovers.com/trust/privacy-notice",
    "versions": [
      {
        "version": "2026-02",
        "published_at": "2026-02-05",
        "url": "https://emailmovers.com/trust/privacy-notice/2026-02"
      }
    ]
  },
  "residency": {
    "statement": "Data is held in the UK (Google Cloud London). Email addresses are verified in the EU by Millionverifier, with some verification traffic passing through US providers under standard contractual clauses. Telephone numbers are checked by Telnyx in the United States under the UK Extension to the Data Privacy Framework. Every telephone number is screened against the TPS and CTPS each night through a licensed screening service based in the UK, which processes the numbers in the UK. Payments are processed by Stripe.",
    "version": "2026-10"
  },
  "sub_processors": {
    "version": "2026-10",
    "notice_days": 30,
    "notice_channels": ["email", "webhook"],
    "list": [
      {
        "name": "Millionverifier",
        "purpose": "Email verification",
        "location": "EU (Hungary), some US network traffic",
        "transfer_mechanism": "Standard contractual clauses",
        "added_at": "2026-09-01"
      },
      {
        "name": "Telnyx",
        "purpose": "Telephone line type checks",
        "location": "United States",
        "transfer_mechanism": "UK Extension to the Data Privacy Framework",
        "added_at": "2026-09-01"
      },
      {
        "name": "A licensed TPS and CTPS screening service",
        "purpose": "TPS and CTPS screening of every telephone number each night",
        "location": "United Kingdom",
        "transfer_mechanism": "No transfer outside the UK",
        "added_at": "2026-10-18"
      }
    ],
    "changes": [
      {
        "date": "2026-09-01",
        "name": "Telnyx",
        "change": "added",
        "summary": "Telephone line type and carrier checks at ingest and every 180 days."
      },
      {
        "date": "2026-10-18",
        "name": "A licensed TPS and CTPS screening service",
        "change": "added",
        "summary": "Every telephone number screened against the TPS and CTPS each night, in the UK."
      }
    ]
  },
  "retention": [
    {
      "category": "Audit logs",
      "period": "Licence term plus 12 months",
      "status": "to_confirm"
    }
  ],
  "complaints": {
    "url": "https://emailmovers.com/trust/complaints",
    "email": null,
    "acknowledgement_days": 30
  },
  "data_protection_lead": null,
  "datasets": [
    {
      "id": "uk_contacts",
      "name": "UK contacts",
      "status": "live",
      "owner": "Emailmovers Ltd",
      "source": "Emailmovers research; Companies House (OGL v3.0); ONSPD (OGL v3.0)",
      "licence": "12 month multi-use licence; resale prohibited",
      "refresh": "Immutable weekly build every Monday; same-day suppression overlay",
      "residency": "Held in the UK (Google Cloud London)",
      "regulator": "ICO",
      "warranty": "Replacement when hard bounces exceed 10 percent of an order",
      "credits_per_record": 1,
      "credits_status": "confirmed",
      "current_version": "2026-W39",
      "versions_available": 52
    }
  ],
  "security": {
    "certifications": [
      {
        "name": "Cyber Essentials",
        "status": "target",
        "date": "2026-10"
      },
      {
        "name": "Cyber Essentials Plus",
        "status": "target",
        "date": "2027-01"
      }
    ],
    "encryption": {
      "at_rest": "AES-256",
      "in_transit_minimum": "TLS 1.2",
      "key_rotation": "KMS managed key rotation"
    },
    "data_flow_diagram_url": null,
    "pen_test_summary_url": null,
    "caiq_url": null,
    "status_page": "https://status.emailmovers.com",
    "security_txt": "https://mydatahub.emailmovers.com/.well-known/security.txt"
  }
}

Errors

Every error is a problem object with a code and a next_step. Every response carries the RateLimit and RateLimit-Policy headers; see Rate limits.

StatusProblem codesWhen
400invalid-request, idempotency-key-required, unsupported-versionThe request could not be read, or an Idempotency-Key is missing.
429rate-limitedToo many requests. Wait for Retry-After.
Any other failureinternal-error, service-unavailable, tps-screen-expiredSomething failed on our side (500 internal-error) or the service is briefly unavailable (503 service-unavailable, with Retry-After). Nothing was charged; retry with the same Idempotency-Key. A count, sample, quote or order with telephone in play is also refused with 503 tps-screen-expired, with no Retry-After, while the dataset version's TPS and CTPS screen is more than 28 days old.