Privacy Policy
Last updated: 03-06-2026
1. Introduction
This Privacy Policy explains how Review There Ltd, trading as re.vu, collects, uses, stores and protects personal data when you use our website, create a re.vu link, use a re.vu account, order a card or interact with our services.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data controller
The data controller is:
Review There Ltd trading as re.vu
Company number: 16998024
Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ
Country: United Kingdom
Email: [email protected]
Review There Ltd is registered with the Information Commissioner’s Office as a data protection fee payer.
3. Information we collect
We may collect and process the following types of personal data:
- Name and contact details, including email address.
- Business name, trading name or brand name.
- Your chosen re.vu link or account identifier.
- Google review link and other review platform links you add to your account.
- Account settings, plan status and subscription information.
- Card order information, such as logo, colour choices, card quantity and delivery details.
- Support messages, enquiries and service communications.
- Billing and payment information, processed securely by third-party payment providers.
- Basic usage data, such as public re.vu link visits, profile views, click-throughs and related activity data.
- Technical data, such as IP address, browser type, device information, cookies and logs.
We do not intentionally collect special category personal data through the service.
4. How we collect information
We may collect information when you:
- Visit our website.
- Claim or create a re.vu link.
- Use your account or request a secure login link.
- Add or update your Google review link or other platform links.
- Order a review card or request setup help.
- Subscribe to, cancel or manage a paid plan.
- Contact us for support.
- Use, share or receive visits to your public re.vu link.
5. How we use your data
We use personal data to:
- Provide and operate the re.vu service.
- Create, manage and secure your account.
- Set up and maintain your re.vu link.
- Redirect customers to your Google review link or other review destinations, depending on your plan.
- Provide Pro features, including multi-platform review profiles, activity tracking and account tools.
- Process orders for NFC and QR review cards.
- Process payments, subscriptions and billing.
- Send essential service, account, payment and security communications.
- Respond to support requests and enquiries.
- Monitor usage, diagnose issues, improve the service and protect against misuse.
- Maintain records for legal, accounting, tax, security and operational purposes.
6. Legal basis for processing
We process personal data under one or more of the following lawful bases:
- Performance of a contract: to provide your account, re.vu link, card order, subscription and related services.
- Legitimate interests: to operate, improve, protect and monitor the service, prevent misuse and understand how links and features are used.
- Legal obligations: to comply with accounting, tax, company, data protection and other legal requirements.
- Consent: where consent is required, for example for certain cookies or optional marketing communications.
7. Public re.vu links and review destinations
Your public re.vu link may display or redirect to information you add to your account, such as your business name, logo, review links or review platform destinations.
Free and card-only accounts may redirect customers directly to your Google review page. Pro accounts may display a review profile with multiple supported review platforms.
When a customer opens your re.vu link or clicks through to a third-party review platform, we may process basic activity data such as page views, click-throughs, timestamps and technical request data. This helps us operate the service, provide activity features where available and keep free links active where applicable.
8. Free links and activity data
Free re.vu links are intended for active use. We may use public re.vu link visit activity to help determine whether a free link is active, dormant or unused.
This activity is based on visits to the public re.vu link, not whether the account holder logs in.
We may retain basic public link activity data for operational, security, analytics and account management purposes.
9. Third-party services
We may share personal data with trusted third-party service providers where necessary to operate the service, including:
- Payment processors, such as Stripe.
- Email delivery providers used to send account and service emails.
- Website, hosting, database and infrastructure providers.
- Analytics, logging and security providers.
- Card production, fulfilment or delivery providers where physical cards are ordered.
- Professional advisers, regulators or authorities where required by law.
These providers only receive the data needed to perform their services and are expected to process it securely and lawfully.
Your use of third-party review platforms, such as Google, Facebook, Trustpilot, Tripadvisor, Reviews.io or similar services, is also subject to those platforms’ own privacy policies and terms.
10. Payments
Payments are processed securely by third-party payment providers. We do not store full card details on our own systems.
We may store payment-related records such as customer identifiers, subscription identifiers, transaction status, plan status, billing dates and payment history where needed to manage your account, subscriptions, orders and legal records.
11. Cookies and similar technologies
We may use cookies or similar technologies to:
- Maintain sessions and account access.
- Improve website usability.
- Understand how the website and service are used.
- Support analytics, advertising measurement or conversion tracking where enabled.
- Protect the service from misuse or technical issues.
You can control or disable cookies through your browser settings. Some parts of the service may not work properly if essential cookies are disabled.
12. Marketing communications
We may send essential service communications, such as account access emails, setup emails, payment emails, security messages and important service updates. These are not marketing emails.
We will only send marketing communications where we have a lawful basis to do so. You can opt out of marketing emails at any time by using the unsubscribe link where provided or by contacting us.
13. Data retention
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Retention periods may depend on:
- How long your account or re.vu link remains active.
- Whether you have a free account, card order or paid subscription.
- Whether records are needed for tax, accounting, legal or dispute purposes.
- Whether data is needed for security, fraud prevention, misuse prevention or service integrity.
Free accounts or free re.vu links that are not visited for 12 months or more may be treated as dormant under our Terms. Dormant free accounts may be archived, removed or otherwise managed, but we may still retain limited records where needed for legal, security, fraud prevention, accounting or operational reasons.
14. International transfers
Some of our service providers may process personal data outside the United Kingdom.
Where personal data is transferred internationally, we will take steps designed to ensure it is protected in line with applicable data protection law, such as using appropriate safeguards where required.
15. Data security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
No online service can be guaranteed to be completely secure. You are responsible for keeping your account access links, login details and email account secure.
16. Your rights
Under UK data protection law, you may have rights including the right to:
- Access your personal data.
- Request correction of inaccurate personal data.
- Request deletion of your personal data.
- Object to processing.
- Restrict processing.
- Request data portability.
- Withdraw consent where processing is based on consent.
- Complain to the Information Commissioner’s Office.
These rights may be subject to legal limits or exemptions.
Requests can be made by contacting [email protected].
17. Complaints
If you have a concern about how we use your personal data, please contact us first so we can try to resolve it.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.
Information Commissioner’s Office
Website: https://ico.org.uk/
Helpline: 0303 123 1113
18. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page.
If changes are significant, we may take additional steps to bring them to your attention where appropriate.