Who we are
Review Flywheel is the controller of personal information collected directly through this website and through enquiries about our services. This means we decide why and how that information is used.
Information we collect
Depending on how you interact with us, we may collect:
- Your name, email address, telephone number and business details.
- Information entered into a contact, consultation, onboarding or support form.
- Your website address, business category, service locations and review-marketing requirements.
- Correspondence, support requests and records of conversations with us.
- Billing and transaction records. Card and bank details are normally handled by the relevant payment provider rather than stored by this website.
- Technical information such as IP address, browser type, device information, security logs and pages visited.
- Customer feedback, review content and related customer information supplied by a client where needed to deliver an agreed service.
How we receive information
We receive information when you complete a form, email or call us, purchase or use a service, give us access to a business platform, or provide information during setup and support. We may also receive business contact information from publicly available sources or from service providers acting on our instructions.
Why we use personal information
| Purpose | Typical lawful basis |
|---|---|
| Responding to an enquiry and preparing a proposal | Taking steps before entering into a contract and our legitimate interests in responding to business enquiries. |
| Setting up and delivering Review Flywheel services | Performance of a contract and our legitimate interests in operating the service. |
| Managing accounts, payments and business records | Performance of a contract, legitimate interests and legal obligations. |
| Protecting the website, preventing abuse and troubleshooting | Our legitimate interests in security, fraud prevention and reliable service delivery. |
| Improving our website and services | Our legitimate interests, using aggregated or minimised information where practical. |
| Sending marketing communications | Consent where required, or legitimate interests where the law permits business marketing. Every marketing message will provide an appropriate way to opt out. |
| Meeting legal, regulatory or dispute-resolution requirements | Legal obligations and legitimate interests. |
Customer reviews and client-supplied data
When a client asks us to help collect, respond to, display or repurpose genuine customer reviews, the client remains responsible for having an appropriate lawful basis to provide the relevant information and for giving any required privacy information to its customers. We use that information only to provide the agreed service, follow the client’s documented instructions and meet legal or security requirements.
We do not knowingly create fake reviews, conceal material relationships or encourage review practices that breach a review platform’s rules.
Who we may share information with
We may share information only where reasonably necessary with hosting, email, messaging, analytics, CRM, payment, accounting, security and professional service providers; with review, social or business-profile platforms selected by a client; with regulators, law-enforcement bodies or advisers where required; or with a purchaser or successor if our business is reorganised or sold.
Providers are expected to protect information and use it only for the authorised purpose.
International transfers
Some service providers may process information outside the United Kingdom. Where this happens, we use an applicable adequacy decision, approved contractual safeguards or another lawful transfer mechanism, and take reasonable steps to assess the protection provided.
How long we keep information
We keep information only for as long as needed for the purpose for which it was collected. Unsuccessful enquiries are normally retained for up to 24 months so we can follow up, answer questions and maintain appropriate records. Customer, contractual, payment and tax records may be retained for longer where required by law or reasonably needed to manage a claim. Security logs are generally kept for a shorter period unless an incident requires investigation.
Security
We use proportionate technical and organisational measures to protect personal information, including access controls, private enquiry records, software updates, secure hosting practices and restricted administrator access. No internet service can guarantee absolute security, but we act promptly when a suspected incident is identified.
Your data-protection rights
Depending on the circumstances and lawful basis, you may have rights to access, correct, erase, restrict or object to use of your information, and to receive portable information. Where we rely on consent, you can withdraw it without affecting earlier lawful use.
To make a request, email info@reviewflywheel.co.uk. We may need to verify your identity. We will also provide a clear route for a data-protection complaint, acknowledge a complaint within 30 days, investigate it appropriately and explain the outcome.
You can complain to the Information Commissioner’s Office. Visit ico.org.uk for current guidance.
Children
Our services are designed for businesses and are not directed at children. Please do not submit information about a child unless it is necessary, lawful and specifically agreed with us.
Changes and contact
We may update this policy when our services, providers or legal obligations change. The current version will always be published on this page. Questions can be sent to info@reviewflywheel.co.uk.