The Review Office
Privacy Policy
Last updated: September 2026
1. Who we are
The Review Office is a UK-based Google review management service. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), The Review Office is the data controller for the personal information described in this policy. You can contact us at any time via contact@thereviewoffice.co.uk or WhatsApp.
2. What information we collect
When you contact us or purchase our service, we may collect:
Your name and contact details (such as your email address, phone number and WhatsApp number); your business name and details; information needed to set up and deliver the service, including access to your Google Business Profile; and payment information, which is processed securely by our payment provider and never stored by us directly.
If you consent to analytics and advertising measurement cookies, we also collect information about how this website is used and how well our adverts perform, through Google Analytics and Google Ads measurement. See section 8 (Cookies) for details.
3. How we use your information
We use your information to provide and manage the review management service, communicate with you about your account, process payments, and meet our legal and accounting obligations. We do not sell your personal information, and we do not use it for unrelated marketing without your consent.
4. Lawful bases for processing
We process personal data where it is necessary to perform our contract with you, to comply with legal obligations, and for our legitimate interests in operating and improving the service. Where we rely on consent, you may withdraw it at any time.
5. How long we keep your information
We keep personal information only for as long as needed to deliver the service and meet legal, tax and accounting requirements, after which it is securely deleted.
6. Sharing your information
We share information only with the service providers needed to run the business — for example our payment processor (Stripe), our email provider (Resend), our hosting and database providers, and, only if you've consented to analytics and advertising measurement cookies, Google (Google Analytics and Google Ads measurement) — and only to the extent necessary. Where providers process data outside the UK, appropriate safeguards are used.
7. Your rights
Under UK GDPR you have the right to access, correct, delete or restrict the use of your personal information, to object to certain processing, and to data portability. To exercise any of these rights, contact us at contact@thereviewoffice.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
9. Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page, and significant changes will be highlighted where practical.