Privacy Policy

Last updated:

1. Introduction

ReviewOurBiz ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at reviewourbiz.xyz (the "Website") and when you use our services.

This policy complies with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Website or use our services.

2. Data Controller

For the purposes of UK GDPR, the data controller is:

3. Information We Collect

3.1 Information You Provide Directly

We may collect the following information when you interact with us:

  • Your full name
  • Your email address
  • Your phone number
  • Your business name
  • Any other information you include in messages or correspondence with us

3.2 Information Collected Automatically

When you visit our Website, we may automatically collect certain technical information, including:

  • Your IP address
  • Browser type and version
  • Operating system
  • Pages visited, time spent on pages, and navigation paths
  • Referring website or source
  • Device type (desktop, mobile, tablet)

3.3 Information From Third Parties

We do not actively obtain information about you from third parties. However, if you are referred to us by a third party, we may receive your basic contact details as part of that referral.

4. How We Use Your Information

We use the personal data we collect for the following purposes:

  • To respond to your enquiries and provide information about our services
  • To communicate with you regarding potential or existing service arrangements
  • To improve our Website and the services we offer
  • To comply with legal obligations
  • To detect, prevent, and address technical issues or fraudulent activity

We will not use your personal data for direct marketing purposes without your explicit consent.

5. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

  • Legitimate Interests (Article 6(1)(f)): To respond to your enquiries and manage our business relationship with you. We consider it a legitimate interest to communicate with potential and existing clients about services they have expressed interest in.
  • Consent (Article 6(1)(a)): Where you have given us explicit consent to process your data for a specific purpose, such as receiving marketing communications.
  • Contract (Article 6(1)(b)): Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract.
  • Legal Obligation (Article 6(1)(c)): Where processing is necessary to comply with a legal obligation to which we are subject.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your information in the following limited circumstances:

  • Service Providers: We may share data with trusted third-party service providers who assist us in operating our Website and delivering our services (for example, web hosting providers, email service providers). These providers are contractually obligated to process your data only as instructed by us and in compliance with UK GDPR.
  • Legal Requirements: We may disclose your information if required to do so by law, in response to a valid legal request (such as a court order or subpoena), or to protect our rights, property, or safety, or that of others.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such transfer where required by law.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specifically:

  • Enquiry form submissions are retained for up to 12 months from the date of submission, or longer if a business relationship is established.
  • Client data relating to the delivery of our services is retained for the duration of the contractual relationship and for a period of 6 years thereafter, in line with standard UK business record-keeping requirements.
  • Website analytics data is anonymised or deleted after 26 months.

When your data is no longer needed, it will be securely deleted or anonymised.

8. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following rights. We are committed to responding to all legitimate requests within one month.

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge.

8.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

8.3 Right to Erasure ("Right to be Forgotten")

You have the right to request the deletion of your personal data where there is no compelling lawful reason for us to continue processing it.

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.

8.5 Right to Data Portability

You have the right to request that we transfer your personal data to you or to a third party in a structured, commonly used, and machine-readable format.

8.6 Right to Object

You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

8.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects. We do not currently use automated decision-making in relation to your personal data.

8.8 Right to Withdraw Consent

Where we rely on consent as our lawful basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at karl@reviewourbiz.xyz. We may request verification of your identity before processing your request.

9. Cookies

Our Website may use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files placed on your device that help us analyse web traffic and understand how visitors use our Website.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of the Website. For more information about the cookies we use and how to manage them, please contact us.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (SSL/TLS)
  • Regular security reviews of our systems
  • Access controls limiting who can view personal data
  • Secure hosting environments

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit. This Privacy Policy applies only to our Website and our services.

12. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete that information as soon as possible.

13. International Data Transfers

Your personal data is stored and processed within the United Kingdom. In the event that we need to transfer your data outside the UK, we will ensure that appropriate safeguards are in place, such as the use of approved transfer mechanisms in accordance with UK GDPR requirements (for example, the UK's International Data Transfer Agreement or adequacy decisions).

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.

Where changes are significant, we may provide additional notice, such as a prominent announcement on our Website.

15. Your Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Email: casework@ico.org.uk
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to resolve any concerns you may have directly. Please contact us first at karl@reviewourbiz.xyz.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: