Your privacy, in plain English.

Last updated: 28 October 2026. Contact: info@leaveareview.co.uk, 2b Woodhouse Road, Sheffield, S12 2AZ, United Kingdom.

What we collect and why

For business accounts we store your name, email, password hash, business details, settings and subscription references. This supports your account and our contract with you. For customers of those businesses we process contact details, recorded email permission, review-request delivery records and private feedback on the business’s instructions. The business is normally the controller of that customer information.

Reviews, feedback and AI

Google reviews are synced only after a business authorises access. Private feedback is shared with the relevant business, never automatically published. If you choose AI assistance, the text you provide is sent to OpenAI for drafting. Avoid sensitive, health or unnecessary personal information. Businesses must establish an appropriate lawful basis before using AI with customer information.

Service providers and transfers

The deployed service uses its hosting provider for storage, Stripe for payments, Resend for email, Google for authorised review access, and OpenAI when AI is configured. Providers may process information outside the UK. Before enabling production services, the operator must confirm processor agreements, appropriate UK transfer safeguards, retention and the hosting location. Card details are handled by Stripe and are not stored by us.

Retention and security

Session cookies last up to seven days. Reset links expire after one hour and verification links after 24 hours. Page events and completed delivery logs are deleted after 90 days. Resolved private feedback and audit entries are removed after one year. Contacts, active feedback and synced reviews remain until removed or the account is deleted. Encrypted backups may retain deleted information until their documented rotation ends. Necessary billing records may remain with Stripe to meet legal obligations.

Cookies

We use an essential HttpOnly session cookie for sign-in. The interactive demo stores illustrative data in your browser session storage. No advertising, analytics cookies or third-party tracking scripts are installed. Review-page activity is counted on the server without storing visitor IP addresses in those events. Short-lived IP-based security rate limits help prevent abuse.

Your choices and rights

Unsubscribe from review emails using the link in any request, without signing in. Ask the business about your contact or feedback information. For account access, correction, deletion, restriction, portability or objections, contact info@leaveareview.co.uk. We normally respond within one month. You can complain to the Information Commissioner’s Office.