Privacy policy

Last updated: 4 November 2026

Who we are

ReviewAdder is run by Dan White, 26 Shackleton Way, Yaxley. PE7 3AB. In this policy, “we” and “us” mean Dan White trading as ReviewAdder.

For anything about your personal data, contact dan.white@salesadder.co.uk.

Whose data this covers

Businesses that use ReviewAdder (“subscribers”). We decide how this data is used, so we are the controller.
People who receive a review request from a business using ReviewAdder. The business decides who to contact and is the controller. We process the data on its behalf as a processor. Questions about why you were contacted are best sent to that business, but you can also contact us.
Businesses we contact about ReviewAdder (“prospects”). We are the controller.
Visitors to our website. We are the controller.

What we collect, why, and our lawful basis

Data	Why	Lawful basis
Subscriber account: business name, email, password (stored only as a secure hash), settings, Google review link, brand colour, message template	To provide the service	Contract
Billing: Stripe customer and subscription IDs, plan status. Card details are entered on Stripe’s page and never reach us.	To take payments and keep financial records	Contract; legal obligation (tax records)
Review requests: the customer first name and mobile number or email a subscriber enters; whether the link was opened; star rating; whether they clicked through to Google; any private feedback they choose to write	To send review requests and show the subscriber results	Processed on behalf of the subscriber, who relies on its own lawful basis (usually legitimate interests)
Reviews a subscriber pastes in to make social posts (review text, reviewer name as given, star rating)	To create images and captions	Processed on behalf of the subscriber
Prospects: business name, address, phone number, website, Google rating and review count (from Google Maps); a business email address published on the prospect’s own website; whether the business is a registered company (from Companies House); notes of our contact with you	To offer our service to businesses that may benefit from it	Legitimate interests (business-to-business marketing). We only email limited companies, LLPs and PLCs unless you have told us we can email you. Sole traders and partnerships are contacted by phone or in person.
Website measurement: Meta Pixel events (page views, sign-ups, subscriptions) on our marketing, sign-up and billing pages	To measure our advertising	Consent. It only runs if you click “Accept”, and never on the review pages sent to customers.

Who we share data with

We use these service providers, who process data on our instructions:

Render: hosts the app and database (servers in Frankfurt, Germany).
Stripe: payments and subscription billing.
Meta Platforms: advertising measurement, only if you consent.
Google: source of public business listing data for our own prospecting.
Companies House: public register lookups for our own prospecting.
Our email provider: for sending and receiving our own emails.

Some providers are based in, or have staff in, the United States. Where personal data is transferred outside the UK, we rely on the UK’s adequacy regulations (including the UK–US data bridge) or the International Data Transfer Addendum to standard contractual clauses. We do not sell personal data.

How long we keep it

Subscriber account and review-request data: while the account is open. When an account closes, we delete it on request, and in any case within 90 days, except billing records.
Billing records: 6 years, as required for UK tax purposes.
Prospect data: up to 12 months after our last contact. If you ask us not to contact you, we keep a minimal record (name and email) so we can honour that.

Your rights

You can ask us to access, correct or delete your data, restrict or object to how we use it, or give you a copy in a portable format. You can withdraw consent at any time, and object to marketing at any time; we will stop. Email dan.white@salesadder.co.uk and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office: ico.org.uk or 0303 123 1113. We would appreciate the chance to put things right first.

Cookies

Cookie	Purpose	Needs consent?
`sid`	Keeps subscribers signed in	No, strictly necessary
`cookie_consent`	Remembers your cookie choice	No, strictly necessary
`_fbp` and other Meta cookies	Advertising measurement	Yes. Only set if you click “Accept”.

You can change your choice at any time using Cookie settings.

Security

All traffic is encrypted (HTTPS), passwords are stored only as salted hashes, and access to data is limited to what is needed to run the service.

Changes

We will post any changes here and update the date above. If a change is significant, we will tell subscribers by email.