Privacy

This policy explains what personal data we collect when you use Reviewit, why we collect it, the legal bases we rely on, who we share it with, and the rights you have. It applies to reviewers who write and read reviews, to merchants and businesses who use Reviewit to collect and display reviews, and to visitors to tryreviewit.com.

1Who we are

Reviewit is operated by Try Reviewit Ltd (registered in England and Wales, company no. 17347137, registered office Unit 3, Twenty4 Secure Storage, Leeds, LS12 4HP, United Kingdom), the data controller for the purposes of this policy. You can reach us through our support centre at tryreviewit.com/support.

For the reviews and account data described below, Try Reviewit Ltd is the controller. Where a merchant connects their store and uses Reviewit to manage reviews of their own products, the merchant may be a separate controller for the data they hold about their customers, and their own privacy notice will also apply.

2What personal data we collect

• Reviewer account data: your name or display name, email address, password (stored only in hashed form), and any profile details you choose to add.
• Merchant and business account data: the name of your business, contact name, email address, website and store address, plan and billing status, and the settings you configure.
• Review content: the star ratings, written reviews, photos and other material you submit, together with the product or business the review relates to.
• Advertising click identifier: if you arrive from one of our adverts and accept advertising cookies, the click identifier carried by that link, and a copy of it stored against your account if you create one. See Advertising measurement below for what it is used for and how long each copy is kept.
• Order evidence used to verify a purchase: limited order details, such as an order reference, purchase date and the connection between your account and a fulfilled order, used only to confirm that a review comes from a genuine customer.
• Support messages: the content of any message you send us and the contact details you use, so that we can help you.
• Usage, device and cookie data: information about how you use the service, your IP address, browser and device type, and cookie identifiers, used to run the service securely and prevent abuse. See our cookie policy for detail.
• Payment data: card payments are handled by our payment processor, Stripe. We do not see or store your full card number. We keep a record of your plan, invoices and payment status.

3The legal bases we rely on

• Contract: to create and run your account, publish your reviews, provide the merchant service and take payment for paid plans.
• Legitimate interests: to verify reviews, prevent fraud and fake reviews, keep the service secure, understand how it is used, and improve it. We balance these interests against your rights.
• Consent: for optional marketing emails and for any non-essential cookies. You can withdraw consent at any time.
• Legal obligation: to meet our accounting, tax and other legal duties, and to respond to lawful requests.

4How we use your personal data

We use your personal data to provide and operate the service, to verify and publish reviews, to run merchant accounts and billing, to prevent fraud and abuse, to keep the service secure, to respond to your support requests, to send service messages and, with your consent, marketing, and to meet our legal obligations. We do not sell your personal data.

5Reviews and verification

A review can be a verified purchase or a public review. A verified purchase is one we have matched to a real, fulfilled order. We label reviews clearly so that readers can see which are verified. We do not quietly remove genuine reviews, and a business cannot pay to hide honest feedback.

Our moderation criteria are public. Reviews may be removed only where they break those published rules, for example because they are fake, unlawful, abusive or contain personal data that should not be there. Where a review is challenged, it is assessed against those criteria and the decision can be appealed.

6Advertising measurement

We advertise Reviewit on Google. This section describes exactly what that involves, because we would rather be specific than reassuring.

Nothing reaches Google before you choose. No Google code is loaded and no request of any kind is made to Google until you accept analytics or advertising cookies. If you decline, or simply never answer, no Google code runs on this site at all.

We mean that literally rather than as a figure of speech. We serve our own fonts from this domain rather than loading them from Google, precisely so that this sentence needs no exception. We use no Google Maps, no reCAPTCHA and no embedded Google content anywhere on the site.

What we collect, if you accept. The click identifier carried by the link you arrived on. If you go on to create an account we store it against that account, so a subscription taken out weeks later can still be matched to the advert that brought you here.

What we send to Google. When a paid subscription starts we send the click identifier, the amount charged, the currency and the subscription reference. We do this so we can tell which advertising is worth paying for.

What we never send. We do not send Google your name, your email address, your reviews, your customers’ data, or anything about what you do inside the product.

Lawful basis and withdrawal. Consent, given through the cookie banner and withdrawable at any time through the Cookie choices link in the footer of every page. Withdrawing it deletes the click identifier we stored.

Retention, and the two different lifetimes. There are two copies of the click identifier and they do not expire together. The COOKIE on your device lasts 90 days, as set out in our cookie policy. The copy stored ON YOUR ACCOUNT, which is what lets a subscription weeks later be matched to the advert, lasts as long as the account does and is deleted with it. Withdrawing consent deletes both. We also keep a record of the subscriptions we have reported, which holds the subscription reference and the amount and contains no advertising identifier at all.

7Sharing and processors

We share personal data only where needed to run the service. We use carefully chosen providers who process data on our instructions, including:

• Stripe, to process card payments and manage subscriptions.
• Resend, to send transactional and, where you have consented, marketing email.
• Our hosting and infrastructure provider, which stores and serves the data that runs the service.
• An AI provider, used to power optional features such as review summaries and suggested replies. Only the content needed for the feature is sent, and it is not used to train third-party models where we can prevent it.
• WooCommerce, Shopify and other stores you connect, so that orders can be verified and reviews can be displayed on your store.

We may also disclose personal data where the law requires it, to protect our rights or the safety of others, or as part of a business sale or reorganisation, in which case any new owner will be bound by this policy.

8International transfers

Some of our providers are based outside the United Kingdom. Where personal data is transferred outside the UK, we make sure appropriate safeguards are in place, such as the UK international data transfer agreement or addendum, or a country the UK recognises as providing adequate protection.

9Cookies

We use cookies and similar technologies to log you in, keep the service secure and understand how it is used. Advertising cookies are covered separately and in full under Advertising measurement above, including exactly what is sent to Google, what is never sent, and how to withdraw your consent. For detail on the categories we use and how to manage them, see our cookie policy.

10How long we keep it

We keep personal data only for as long as we need it. Account data is kept while your account is active and for a reasonable period afterwards. Reviews stay published while they remain relevant to a product or business. Billing and legal records are kept for as long as the law requires. When data is no longer needed it is deleted or anonymised.

11Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased in certain circumstances.
• Restrict how we process your data.
• Receive your data in a portable format.
• Object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent where we rely on it.

Where a review is erased, the review content may be retained in anonymised form so that overall ratings stay honest and cannot be gamed by mass deletion. This anonymised record is no longer linked to you.

12Children

Reviewit is not intended for children. It is not for anyone under the age of 16, and we do not knowingly collect personal data from under-16s. If you believe a child has given us personal data, please contact us and we will remove it.

13Changes to this policy

We may update this policy from time to time. When we make a material change we will update the date and, where appropriate, tell you directly. Please check back so that you are aware of any changes.

14How to contact us and complain

For any privacy request, contact us through the support centre or by email at support@tryreviewit.com.

If you are not happy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk. We would ask that you contact us first so that we can try to put things right.