1. Overview & Data Roles
ReviewBoost UK is committed to protecting the privacy and security of personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
When you create an account, ReviewBoost UK acts as a Data Controller for your account and billing information. When you upload customer details to issue review requests or communications, you are the Data Controller, and ReviewBoost UK operates strictly as a Data Processor on your instructions.
2. Information We Collect
- Account Information: Name, business email address, workspace settings, and billing details provided upon registration.
- Uploaded Customer Data: Customer names, phone numbers, and email addresses imported by you via CSV or manual entry to send SMS or email notifications.
- Technical & Usage Data: IP addresses, access logs, and browser metadata collected automatically for security, error tracking, and platform optimization.
3. Lawful Basis for Processing
We process personal data under the following UK GDPR legal bases:
- Contractual Necessity: To deliver dashboard access, manage subscriptions, and process transactions.
- Legitimate Interests: To maintain platform security, prevent fraudulent activity, and improve user experience.
- Legal Obligation: To comply with tax, financial, and regulatory reporting requirements.
4. Sub-processors & Third-Party Services
We partner with verified third-party infrastructure providers that maintain high data security standards:
- Supabase: Cloud database storage and user authentication infrastructure.
- Stripe: Payment gateway and subscription management.
- Vercel: Web hosting and serverless deployment platform.
- Twilio: Telecom gateway used for dispatching transactional SMS communications.
5. Data Retention & Erasure
We retain account data for as long as your subscription is active. Customer contacts uploaded for review requests are kept only for as long as required to process communications or maintain opt-out suppression logs. You may delete contacts directly from your dashboard at any time, or request complete account erasure upon termination.
6. Your Individual Rights (UK GDPR)
Under UK data protection laws, you hold the following rights regarding your personal data:
- The right to access and receive a copy of your data (Subject Access Request).
- The right to rectify inaccurate or incomplete information.
- The right to request data erasure ("Right to be Forgotten").
- The right to restrict or object to certain processing activities.
- The right to data portability.
7. Contact Us & ICO Complaints
If you have any questions or wish to exercise your data rights, contact us at: support@reviewboost.co.uk
You also have the right to lodge a complaint at any time with the Information Commissioner's Office (ICO), the UK independent supervisory authority for data protection (ico.org.uk).