This is a working draft, not a reviewed legal document. It will be replaced with a finalised Privacy Policy — covering data retention periods, your rights under UK GDPR, and our lawful basis for processing — before general availability.
What's true today
- Consent is recorded — policy version, timestamp, and whether it was granted or declined — before any identifiable data about a customer is collected.
- IP addresses are hashed, and hashed separately per purpose, so different uses of the same address can't be joined back together.
- Google review content (ratings, text, reviewer details) is shown live and never stored in our database.
- Data can be deleted on request. Audit log entries are kept even after deletion, because they carry no link back to the deleted record — that's what makes them compatible with the deletion.
Questions in the meantime? Reach us through the contact form.