GDPR Compliance for Trustpilot in WordPress

Trustpilot helps businesses collect and showcase customer reviews, but it also tracks user data, which requires proper consent management to comply with GDPR and the ePrivacy Directive (ePD). 

Before Trustpilot processes any personal data, you must obtain explicit user consent. This guide provides step-by-step instructions on setting up Trustpilot on WordPress with the AesirX Consent Management Platform (CMP). 

AesirX CMP allows you to manage user consent, block tracking scripts until consent is granted, and maintain compliance with privacy regulations, helping you use Trustpilot while protecting user privacy.

Prerequisite:

Ensure WordPress and Trustpilot are installed before proceeding.

Step 1: Install AesirX CMP and Activate Your Trial

1. Download and Install AesirX CMP

• Download the plugin: Get the latest release from AesirX CMP Plugin on GitHub.
• Install the plugin:
  • Log in to your WordPress admin panel.
  • Go to Plugins > Add New.
  • Click Upload Plugin, select the downloaded file, and click Install Now.
  • Click Activate Plugin after installation.

2. Register Your Shield of Privacy (SoP)

Sign up for a Shield of Privacy (SoP) account to activate your 14-day free trial with full features. (Note: Your SoP serves as your AesirX Account ID, giving you access to all AesirX solutions and licenses.)

• Go to https://cmp.signup.aesirx.io/.
• Enter your details:
  • Email
  • Shield of Privacy ID
  • Domain
• Accept Terms & Verify:
  • Check Accept Terms & Privacy Policy.
  • Click “Click to start verification → Activate My Trial.
• Complete Setup:
  • Click How to get your Shield of Privacy & License.
  • Click Update Domain.

3. Update Your License for Continued Access

Before your trial ends, update your license to keep full access:

• Go to the AesirX Licenses page.
• Get your new license key.
• Enter the key in the plugin settings under Your License Key.

Step 2: Use AesirX Privacy Scanner to Identify Trustpilot Third-Party Domain

With AesirX CMP installed, the next step is to identify and block Trustpilot’s third-party domains. AesirX Privacy Scanner makes this process simple.

1. Scan Your Site for Third-Party Domains:

• Open AesirX Privacy Scanner.
• Enter your website’s URL and click Scan.
• The scanner will analyze your site and list all third-party domains collecting user data.

2. Identify Trustpilot’s Tracking Domains:

Look for Trustpilot-related third-party domains in the scan results, such as:

• widget.trustpilot.com
• api.trustpilot.com
• cdn.trustpilot.com

3. Copy Identified Domains:

Copy these domains—you’ll use them in AesirX Consent Shield to block Trustpilot tracking until users give consent. 

Step 3: Prevent Trustpilot Tracking Until Users Give Consent with AesirX Consent Shield

Stop Trustpilot from tracking users before they consent by configuring AesirX Consent Shield.

1. Block Third-Party Domains:

• Go to WordPress > Settings > AesirX Consent Management.
• Find AesirX Consent Shield for Domain/Path-Based Blocking.
• Enter Trustpilot tracking domains to block them before consent (e.g., widget.trustpilot.com, api.trustpilot.com, cdn.trustpilot.com).

2. Block the Trustpilot Plugin:

• AesirX Consent Shield automatically detects and lists third-party plugins that collect user data.
• Go to AesirX Consent Shield for Third-Party Plugins.
• Check the box next to Trustpilot to block it until users consent.

3. Adjust Script Blocking Settings:

• Select "Only Third-Party Hosts" (default).
• This blocks third-party scripts while keeping first-party scripts running normally.

4. Save your changes.

Click Save settings to apply the changes. Trustpilot and its third-party domains will now stay blocked until users provide explicit consent.

Step 4: Make Consent Explicit and Fully Informed

AesirX enhances Google Consent Mode V2 with two improved compliance-focused consent modes:

• Simple Consent Mode – Works like Google’s Basic Consent Mode but with stricter compliance. No data is collected or shared with third parties until users explicitly consent. Includes Reject and Consent options.
• Default Template – Tags start with denied parameters, ensuring no data is collected, stored, or sent until consent is given. Unlike Google Consent Mode 2.0, AesirX prevents any tags from loading before consent, reducing compliance risks. Includes Reject, Consent, and Decentralized Consent, giving users full control over their personal data.

How to Update Consent Settings

1. Go to Settings > AesirX Consent Management > Select Consent Mode.
2. Choose a template and customize the consent text.
   • Update your privacy policy to explicitly state:
     • Who collects the data (your site or third-party services).
     • Why the data is collected (e.g., analytics, personalization).
     • What data is collected (cookies, form data).
   • Keep the consent message simple, clear, and informative so users understand what they’re agreeing to and why it matters.
3. (Optional) Enter your Google Tag ID and Google Tag Manager ID.
4. Click “Save Settings” to apply changes.

Start your 14-day free trial now and secure your website’s privacy and compliance!

By integrating Trustpilot with AesirX CMP, you maintain compliance while still utilizing Trustpilot’s review tools. This setup promotes transparency and gives users control over their personal data. 

Need help with compliance? Test your website now with AesirX Privacy Scanner to check if your data protection measures meet legal standards!