Your customer data. Clear responsibilities.

These data-processing terms form part of the service terms when Leave a Review acts as processor for a business customer. The customer remains the controller. These terms must be adopted by the confirmed legal operator before accepting paid customers.

Scope and instructions

Processing covers hosting contacts, recording permission, sending review invitations, managing private feedback, syncing authorised Google reviews, and optional AI drafting for the subscription’s duration. Data subjects are the customer’s clients and account users. Information includes names, email addresses, consent records, review content, ratings and feedback. Sensitive information is not intended for this service.

Our commitments

We process personal data only on documented lawful instructions, restrict access to authorised people under confidentiality obligations, apply appropriate technical and organisational security, and assist with data-subject requests, security obligations and impact assessments as reasonably required. If an instruction appears to breach data protection law we will notify the customer.

Subprocessors and international transfers

The customer authorises the configured hosting provider, Resend, Google and OpenAI for the functions described in the privacy notice. Stripe normally acts independently for payment processing. The operator must maintain a named subprocessor register, notify material changes in advance, provide an opportunity to object, and ensure equivalent contractual protections. Restricted transfers require applicable UK safeguards, such as an IDTA or UK Addendum where required.

Incidents, return and audit

We notify the customer without undue delay after becoming aware of a personal data breach and provide available information and reasonable assistance. At the end of service the customer may export data and request deletion, subject to legal retention requirements and documented backup rotation. We make information reasonably necessary to demonstrate compliance available and support proportionate audits by agreement.

Your responsibilities

Provide lawful instructions, privacy information and valid permission where needed. Keep customer information accurate and limited. Do not submit special-category data without a separate supported agreement and safeguards. Contact info@leaveareview.co.uk for data-processing questions.