ReviewStack HQ ("we," "our," or "us") is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
We may collect and process the following categories of personal data:
Identity & Contact Data: Name, business name, email address, phone number, and postal address.
Technical Data: IP address, browser type, device information, operating system, and website usage statistics collected via cookies and analytics.
Customer Support Data: Messages, feedback, or inquiries sent to our support channels.
2. How We Use Your Data
We use your personal data for the following lawful reasons:
Contractual Necessity: To deliver our Services, process payments, set up your account, and provide ongoing customer support.
Legitimate Interests: To improve our software, optimize user experience, conduct security checks, and send relevant service updates.
Consent: To send direct marketing communications (you can unsubscribe at any time).
Legal Obligation: To comply with tax, legal, and regulatory requirements in the UK.
3. Data Sharing & Third Parties
We do not sell or rent your personal data to third parties. We may share your data with trusted service providers who assist us in operating our business, including:
Cloud hosting and platform providers (e.g., GoHighLevel, Cloudflare).
Payment processors (e.g., Stripe).
Analytics and email delivery services.
All third-party processing partners are contractually bound to comply with strict data security standards and UK GDPR regulations.
4. International Data Transfers
If your data is transferred outside the United Kingdom or the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs).
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations.
6. Your Data Rights
Under UK GDPR, you have the following rights regarding your personal information:
Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your personal data ("Right to be Forgotten").
Restriction: Request that we restrict processing of your data.
Portability: Request transfer of your data to another provider.
Withdraw Consent: Opt out of marketing emails at any time using the "Unsubscribe" link.
To exercise any of these rights, please contact us at [email protected].
7. Cookies & Tracking Technologies
We use cookies to enhance website navigation, analyze site performance, and assist in our marketing efforts. You can manage or disable your cookie preferences directly in your web browser settings.
8. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our legal obligations or operational procedures. Any updates will be posted on this page with an updated "Last Updated" date.
9. Contact & Supervisory Authority
If you have questions or concerns regarding our privacy practices, please contact us first at:
