Privacy Policy for

Raving Reviews

Last updated: 9 May 2026

Raving Reviews (“Raving Reviews,” “we,” “our,” “us,” or the “Service”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, process, disclose, and safeguard personal information when you access or use the Raving Reviews platform, website, applications, software, and related services.

Raving Reviews provides software tools that help businesses manage and improve their online reputation through services such as review aggregation, automated review responses, review request campaigns, analytics, customer feedback collection, social sharing tools, and workflow automation.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

Raving Reviews may act as either a Data Controller or a Data Processor depending on the nature of the information being processed.

For information relating to our own users, account holders, website visitors, billing contacts, and prospective customers, Raving Reviews acts as the Data Controller.

For customer, prospect, review, communication, and contact data uploaded, stored, processed, or managed by our users through the Service, the relevant user or business typically acts as the Data Controller and Raving Reviews acts as a Data Processor on their behalf.

Contact Information:

Raving Reviews by CreateFlow Online

London

England

United Kingdom

EC1V 2NX

Email: hello@ravingreviews.online

2. Personal Information We Collect

We may collect the following categories of personal information:

Account and Contact Information

Name
Email address
Telephone number
Billing information
Company or business details
Account login credentials

Platform Usage Information

IP address
Browser type and version
Device information
Operating system
Usage activity within the Service
Login timestamps
Interaction data
Analytics and reporting information

Customer and Review Data

Information uploaded or processed by users through the Service, including:

Customer names
Email addresses
Phone numbers
Reviews and ratings
Private feedback
Video testimonials
Survey responses
Media uploads
Landing page submissions

Communication Data

Information relating to:

Email campaigns
SMS communications
Customer support requests
Chat or contact form submissions

AI-Generated Processing Data

Review content
Suggested or automated responses
Prompt and output data
Workflow automation instructions

Cookies and Tracking Information

We may collect information through:

Cookies
Pixels
Local storage
Analytics technologies
Session tracking technologies

3. How We Use Personal Information

We use personal information for the following purposes:

Providing the Service

Operating and maintaining the platform
Managing user accounts
Delivering platform functionality

Review Aggregation and Management

Collecting and displaying reviews from third-party platforms
Managing review workflows
Monitoring reputation metrics

AI-Powered Features

Generating automated review responses
Assisting with content generation
Supporting workflow automations

Communication Services

Sending review requests
Delivering SMS and email communications
Sending notifications and alerts
Responding to support inquiries

Analytics and Reporting

Monitoring Service performance
Generating usage insights
Improving platform functionality

Security and Fraud Prevention

Detecting abuse or unauthorised activity
Protecting platform integrity
Preventing fraud and spam

Legal and Compliance Purposes

Complying with legal obligations
Enforcing our Terms of Service
Protecting legal rights and interests

4. Legal Bases for Processing (GDPR and UK GDPR)

Where applicable under GDPR or UK GDPR, we process personal information based on one or more of the following legal grounds:

Consent

Where you provide consent for specific activities such as:

marketing communications;
cookies where required;
review request campaigns.

Performance of a Contract

To provide the Service and fulfill contractual obligations.

Legitimate Interests

For purposes including:

improving the Service;
maintaining security;
preventing fraud;
analytics and reporting;
business operations.

Legal Obligations

Where processing is necessary to comply with applicable laws or regulatory requirements.

5. Cookies and Tracking Technologies

We may use cookies, pixels, local storage, analytics technologies, session tracking technologies, and similar tools to operate, improve, personalise, secure, and analyse the Service.

Cookies and similar technologies may be used for purposes including:

• Essential functionality, such as login, account security, session management, and platform access;

• Performance and analytics, such as understanding how users interact with our website and Service;

• Preferences, such as remembering user settings or choices;

• Security, such as detecting suspicious activity, fraud, or unauthorised access;

• Marketing and communications, where permitted by law.

Some cookies are essential for the Service to function and cannot be disabled through our systems. Other cookies, such as analytics or marketing cookies, may require your consent depending on applicable law.

You can usually control or disable cookies through your browser settings. If you disable certain cookies, some parts of the website or Service may not work properly.

Where required, we will ask for your consent before placing non-essential cookies or similar tracking technologies.

6. Data Sharing and Third-Party Providers

We may share personal information with trusted third-party service providers where necessary to operate, maintain, improve, secure, and provide the Service.

Such providers may include:

• Cloud hosting and infrastructure providers;

• Payment processors, including Stripe;

• Email delivery providers;

• SMS and communication providers;

• Customer support platforms;

• Analytics providers;

• Artificial intelligence service providers;

• CRM and marketing platforms;

• Review platform integrations;

• Professional advisers, auditors, insurers, and legal representatives.

We do not sell personal information to third parties.

We may also disclose personal information where required by law, regulation, court order, legal process, or where necessary to protect our rights, users, systems, or business.

7. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including:

• Providing and maintaining the Service;

• Meeting legal, regulatory, tax, accounting, and reporting obligations;

• Resolving disputes;

• Enforcing agreements;

• Maintaining security and fraud prevention measures.

Retention periods may vary depending on the nature of the information, applicable legal requirements, and legitimate business needs.

Where personal information is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with applicable laws.

8. International Data Transfers

Your information may be transferred to, stored, processed, or accessed in countries outside the United Kingdom or European Economic Area.

Where such transfers occur, we take reasonable steps to ensure appropriate safeguards are in place, including contractual protections, adequacy decisions, or other lawful transfer mechanisms recognised under applicable data protection laws.

By using the Service, you acknowledge that international transfers may occur where necessary to provide the Service.

9. Your Privacy Rights

Subject to applicable law, you may have rights regarding your personal information, including the right to:

• Access your personal information;

• Correct inaccurate information;

• Request deletion of personal information;

• Restrict or object to certain processing activities;

• Withdraw consent where processing is based on consent;

• Request portability of your information;

• Lodge a complaint with a supervisory authority.

To exercise your rights, please contact:

[hello@ravingreviews.online](mailto:hello@ravingreviews.online)

We may request reasonable verification of identity before responding to requests.

10. Security of Information

We implement reasonable technical, organisational, and administrative measures designed to protect personal information from unauthorised access, disclosure, alteration, loss, misuse, or destruction.

However, no method of internet transmission, electronic storage, or information processing can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their account credentials and taking appropriate security precautions.

11. Children's Privacy

The Service is intended for businesses and individuals aged 18 years or older.

We do not knowingly collect personal information directly from children. If we become aware that personal information has been collected from a child in violation of applicable laws, we will take reasonable steps to delete such information.

12. Complaints and Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or our handling of personal information, please contact: