Obligatory surveillance capitalism subthread incoming. 1) uBlock Origin blocked 30 things within a minute of loading your main page. I understand you're a startup and want to measure things, but given the extremely sensitive nature of your subject domain, this is not a reassuring welcome. 2) Privacy Policy - it looks like you've made some headway towards being compliant with EU regulations, but stopped halfway short.…
I realize this doesn't change your first impression, but the website is our 'business frontpage.' None of the service (which does definitely include sensitive information) takes place through the site.
Our PP is a bit boiler plate and I think the main thing is to make it clearer about the things you've mentioned and separate the service from use of the website. So for example we do track who clicks on what on the website using things like Segment, but we don't do that in the tech product you use to communicate with the expert.
I'd love to chat more about learning if it's in the communication or if it's what we're doing? If you're willing, could you email tom@trustle.com? (And of course no expectation to do so! You've been so helpful with what you've shared so far.)