Privacy policy

Last updated: 22 July 2026

Review Request helps local service businesses invite their customers to leave Google reviews. This policy explains what personal data we hold, why we hold it, and what your rights are. We've kept it in plain English on purpose.

Who we are

Review Request is a small UK business. We are the data controller for the information you give us about your own business, and a data processor for the customer details you upload in order to send review invitations. You can reach us any time at hello@review-request.co.uk.

What we collect

• Business contact details — your name, business name, email address and anything you send us when you enquire or sign up.
• Your customers' names and email addresses — the details you add to the app so we can send review invitations on your behalf. We only use these to send the invitation and, at most, one reminder.
• Basic usage information — such as whether an invitation was delivered, opened or clicked, so your dashboard can show you what's happening.

Our lawful basis

Under UK GDPR, we process your business details on the basis of contract (providing the service you've signed up for) and legitimate interests (responding to enquiries and keeping the service running). We process your customers' details as your processor, on your instructions — you're responsible for having a proper basis to send them a review invitation, which for existing customers is normally your own legitimate interest in asking for feedback about a service you've provided.

What we never do

• We never sell personal data to anyone.
• We never use your customers' details for our own marketing.
• We never share data except with the service providers listed below.

Where data is stored

All data stays in the UK and EU. Our database is hosted with Supabase in London (eu-west-2), and emails are sent through Resend from Ireland (eu-west-1). We don't transfer personal data outside the UK/EEA.

Unsubscribing

Every email we send on your behalf includes an unsubscribe link. If a customer unsubscribes, we stop emailing them straight away and won't email them again — even if their details are uploaded a second time.

How long we keep data

We keep data only for as long as it's needed to run the service. If you close your account, we delete your data and your customers' data within 30 days, apart from anything we're legally required to keep (such as basic billing records).

Your rights

You (and your customers) have the usual UK GDPR rights: to see the data we hold, to correct it, to object to processing, and to have it erased. To exercise any of these, email hello@review-request.co.uk and we'll sort it out promptly — no forms, no fuss. If you're unhappy with how we've handled something, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

This website sets no cookies at all. The app at app.review-request.co.uk uses only the essential cookies needed to keep you logged in — nothing for advertising or tracking.

Changes to this policy

If we change this policy in any meaningful way, we'll update this page and let account holders know by email.