This policy explains what personal data ReviewAdviser collects, why, and what rights you have. Example Media Ltd, 1 Example Street, London EC1A 1AA, United Kingdom, is the controller of your personal data. You can contact us about privacy at support@reviewadviser.co.uk.
What we collect
- Account details: your email address, the display name you choose and your password (stored encrypted).
- Reviews: what you write, your ratings, the date and the company you reviewed. Your display name is shown publicly with your review.
- Proof of experience: documents such as order confirmations, only if we ask you for them to verify a review.
- Messages: what you send us when you contact us.
- Technical data: IP address, browser and device information, and the pages you visit, which our hosting provider processes to deliver and protect the site.
Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Running your account and publishing reviews | Contract (providing the service you signed up for) |
| Checking reviews and preventing fake reviews | Legitimate interests (keeping reviews trustworthy) and legal obligation |
| Answering your messages | Legitimate interests |
| Keeping the site secure and working | Legitimate interests |
| Sending service emails (e.g. confirm email) | Contract |
Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for details of that assessment, and you can object at any time (see "Your rights").
We do not sell your personal data and we do not use it for automated decisions that have legal or similarly significant effects on you.
Do you have to give us your data?
You can read ReviewAdviser without giving us any personal data. To create an account or write a review you must give us an email address and a display name, otherwise we cannot provide those features.
Who we share it with
- Hosting and infrastructure: Cloudflare, Inc., which hosts the site and its database.
- Email delivery: [TODO: email provider], to send account emails.
- Companies you review: we do not give them your email address. If a company disputes a review, we may tell it that we have checked the reviewer's proof, without passing on the document itself.
- Authorities: when the law requires it.
Some of these providers may process data outside the UK. When they do, we rely on UK adequacy regulations, or on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, to protect it.
How long we keep it
- Account details: until you close your account, then up to 30 days in backups.
- Reviews: while they are published. If you close your account, your reviews are removed or anonymised.
- Proof documents: deleted as soon as the check is finished.
- Messages: up to two years.
- Technical logs: up to 30 days.
How we protect it
Data is sent over encrypted connections (HTTPS), passwords are stored as one-way hashes, and only the people who need it to run ReviewAdviser can access personal data.
Children
ReviewAdviser is not meant for children. You must be at least 16 to create an account, and we delete accounts we find belong to someone younger.
Your rights
Under UK GDPR you have the right to access your data, correct it, have it deleted, restrict how we use it, receive it in a portable format, and object to any use based on legitimate interests. To use any of these rights, email support@reviewadviser.co.uk. We will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to put things right first.
Cookies
See our cookie policy.
Changes
We will update this policy when how we use data changes. The date at the top shows the latest version.