Privacy Policy

1. Who We Are

OLQ is operated by:

OLQ LTD, company number 17241125, registered office at 665 Romford Road, London, United Kingdom, E12 5AD.

For privacy enquiries, data protection requests or questions about this Privacy Policy, please contact: support@olq.io

For the purposes of UK data protection law, OLQ LTD may act as either a data controller or a data processor, depending on the circumstances in which personal information is processed.

Where OLQ determines why and how personal information is processed, such as information relating to OLQ account administration, website visitors, billing, security, marketing and our own business operations, OLQ generally acts as a data controller.

Where OLQ processes personal information on behalf of a business customer, such as information uploaded or managed by that customer concerning its employees, managers, locations or other authorised users, OLQ may act as a data processor and the relevant business customer will generally be the data controller.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed in connection with OLQ and OLQ.io, including:

• customers and prospective customers
• account holders and authorised users
• employees, managers and representatives of our business customers
• individuals whose details are entered into OLQ by an organisation
• website visitors
• individuals who interact with OLQ-powered NFC or QR review products
• individuals whose publicly available review information is displayed or processed through connected services
• people who contact our support or sales teams
• other people who interact with OLQ

This Privacy Policy applies to OLQ only. It does not govern separate products, brands or websites unless they expressly state that this Privacy Policy applies to them.

Third-party services integrated with OLQ may have their own privacy policies and terms. Those services remain responsible for their own processing of personal information.

3. The Information We Collect

The personal information we collect depends on how you interact with OLQ, the services you use and the configuration chosen by the relevant organisation.

3.1 Account and profile information

When an OLQ account is created, we may collect information including:

• your full name
• business email address
• telephone number
• company or organisation name
• job title or role
• profile image, where provided
• account username
• authentication and login information
• account preferences
• organisation, brand and location associations
• permissions and access levels
• other information you choose to provide

Passwords are intended to be processed using appropriate authentication and security mechanisms. We do not need to know your plain-text password in order to operate your account.

3.2 Organisation and business information

Customers may provide information about their organisation, including:

• business name
• brand names
• company information
• logos
• business locations
• business addresses
• contact information
• website information
• location managers
• employee names
• employee email addresses
• internal location assignments
• connected business profiles
• other information required to configure OLQ

Some business information may not constitute personal information where it relates only to a legal entity, but it may become personal information where it identifies or relates to an individual.

4. Employee and Manager Information

OLQ allows organisations to create or manage structures involving brands, locations, managers and employees.

For example, an enterprise organisation may create multiple brands and locations within its OLQ account and give individual managers access to particular locations.

Depending on how the customer uses OLQ, a manager or administrator may enter an employee's:

• name
• email address
• assigned location
• associated review product
• review collection activity
• other relevant account information

OLQ may also associate review activity with a particular employee, location, NFC product, QR code or other identifier so that the organisation can understand how reviews are being collected.

In these circumstances, the organisation using OLQ will normally determine why the employee information is entered into OLQ and how it is used.

The customer is responsible for ensuring that it has an appropriate legal basis for providing employee or manager information to OLQ and for giving those individuals any privacy information required by applicable law.

OLQ processes such information in accordance with the customer's instructions, our contractual obligations and applicable law.

5. Google Business Profile and Google Data

OLQ allows authorised customers to connect supported Google services, including Google Business Profile functionality.

When a customer connects a Google account or Google Business Profile, OLQ may access, receive, display, store or otherwise process information made available through Google's APIs and authorised by the user.

Depending on the permissions granted and the features used, this may include:

• Google account information
• email address or account identifiers
• business profile information
• business names
• business locations
• Google reviews
• reviewer names where provided by Google
• review ratings
• review text
• review dates and metadata
• review responses
• location information
• other information necessary to provide the connected OLQ functionality

OLQ accesses Google information only to provide, maintain, secure and improve the OLQ functionality that the user has requested or authorised.

OLQ does not sell personal information obtained through Google APIs.

OLQ does not use Google API user data for unrelated advertising purposes.

We seek to request only permissions reasonably necessary for the OLQ functionality being provided.

Access to a Google account or Google Business Profile may be revoked through the relevant OLQ functionality or through the user's Google account settings where supported.

Disconnecting an integration may stop OLQ from collecting new information from that integration. Certain previously processed information may remain temporarily in OLQ systems, backups, logs or records where necessary for security, legal, contractual or technical purposes before being deleted in accordance with our retention procedures.

Customers remain responsible for ensuring that they are authorised to connect the relevant Google account, business profile or location to OLQ.

Google's processing of personal information is governed separately by Google's own terms and privacy policies.

6. Reviews and Reviewer Information

OLQ may process information associated with reviews available through services connected by our customers, including:

• reviewer names
• profile information made available by the relevant third-party service
• review content
• star ratings
• review dates
• business responses
• location information
• other review-related metadata

Some of this information may already be publicly available through the relevant third-party platform. Public availability does not necessarily mean that information ceases to be personal information.

OLQ processes this information primarily to provide review-management, review-monitoring, analytics, reporting, response and reputation-management functionality to our customers.

We do not claim ownership of reviews submitted to third-party platforms.

7. NFC, QR Code and Review Interaction Data

Businesses using OLQ may use NFC-enabled products, QR codes, links or similar technologies to direct customers towards review experiences.

When an individual taps an NFC product, scans a QR code or follows an OLQ-generated link, we may automatically collect technical and interaction information, including:

• IP address
• device type
• operating system
• browser type
• browser settings
• approximate geographical location inferred from IP address
• date and time of interaction
• referring information
• product identifier
• QR code identifier
• NFC identifier
• business identifier
• brand identifier
• location identifier
• employee attribution identifier
• session or event information
• information about how the OLQ page or service was used

Where technically available, we may also record events relating to the review journey, such as whether a user proceeded from an OLQ interface towards a third-party review platform.

We use this information to provide analytics to our customers, attribute review-collection activity, operate the service, detect abuse, troubleshoot technical issues, understand product usage and improve OLQ.

We do not require an individual who taps or scans an OLQ-enabled review product to create an OLQ business account simply to access a review destination.

8. Automatically Collected Technical Information

When you access OLQ.io or use our services, certain information may be automatically collected, including:

• IP address
• browser information
• device information
• operating system
• screen or device characteristics
• language preferences
• approximate location
• page views
• navigation information
• timestamps
• session information
• login activity
• security events
• error information
• performance information
• cookie identifiers
• analytics identifiers
• other technical information

We use this information for security, authentication, fraud prevention, analytics, troubleshooting, service optimisation and understanding how OLQ is used.

9. Cookies and Similar Technologies

OLQ may use cookies, local storage, pixels, tags, software development kits and similar technologies.

Some technologies are necessary for the operation of OLQ, for example to:

• authenticate users
• maintain sessions
• protect accounts
• remember settings
• prevent fraud
• maintain security

We may also use analytics technologies, including Google Analytics, to understand how users interact with OLQ and our website.

Where required by applicable law, non-essential cookies or similar technologies will not be activated until an appropriate choice or consent has been obtained.

Users may be given the ability to accept, reject or manage non-essential technologies through a cookie banner or preference centre.

Further information may be provided in a separate Cookie Policy or cookie-management interface.

10. Payment Information

OLQ business accounts are offered as a paid subscription, charged per active branch. There is no free trial.

Payments are processed by Stripe, our payment processor. Card details are entered only on pages hosted by Stripe, such as Stripe Checkout, the Stripe customer portal and Stripe-hosted invoice pages.

When you make a payment, payment information such as card details is provided directly to Stripe and is not stored by OLQ.

OLQ may receive and retain limited information relating to the transaction, such as:

• customer name
• billing address
• email address
• payment status
• payment method type
• last digits of a payment card where provided by the payment processor
• invoice information
• subscription status
• transaction identifiers
• payment dates
• amounts paid
• refund information
• other billing records

Stripe processes payment information in accordance with its own terms and privacy practices.

OLQ does not store payment card numbers or card security codes on its own systems.

11. Customer Support and Communications

When you contact OLQ, we may collect information contained within the communication, including:

• your name
• email address
• telephone number
• company
• support request
• messages
• attachments
• screenshots
• technical information
• account information
• correspondence history

We use this information to respond to enquiries, provide customer support, resolve disputes, investigate problems, improve our service and maintain appropriate business records.

Support interactions may also be associated with your OLQ account.

12. Sales and Marketing Information

If you contact OLQ, request information, register an interest in our services, become a customer or otherwise interact with us in a business context, we may use your contact information to communicate with you about OLQ.

Subject to applicable law, this may include information regarding:

• OLQ products
• service updates
• new features
• offers
• events
• business opportunities
• product demonstrations
• related commercial communications

Where required, we will obtain consent before sending electronic direct marketing.

In other circumstances, we may rely on legitimate interests where permitted by applicable law, particularly in a business-to-business context.

You may unsubscribe from marketing communications at any time using an unsubscribe mechanism provided in the communication or by contacting support@olq.io.

We may retain limited information about an unsubscribe request so that we can respect your preference in the future.

You have the right to object at any time to the use of your personal information for direct marketing purposes.

13. How We Use Personal Information

We may process personal information for purposes including:

• providing and operating OLQ
• creating and administering accounts
• authenticating users
• managing brands and business locations
• providing review-management functionality
• connecting and maintaining third-party integrations
• displaying and analysing reviews
• generating business and review analytics
• tracking NFC and QR interactions
• providing employee or location attribution
• providing AI-assisted functionality
• processing subscriptions and payments
• providing customer support
• communicating service information
• maintaining security
• preventing fraud, misuse and unauthorised access
• monitoring service reliability
• debugging and troubleshooting
• improving our services
• performing internal analytics
• complying with legal obligations
• enforcing our contracts and policies
• establishing, exercising or defending legal claims
• managing our business operations
• carrying out marketing activities where legally permitted

We will not use personal information for purposes that are materially incompatible with the purposes for which it was collected unless permitted or required by law.

14. Lawful Bases for Processing

Under UK data protection law, OLQ must have a lawful basis for processing personal information. Depending on the circumstances, we may rely on the following lawful bases.

Contract

We process information where necessary to enter into or perform a contract with you. This may include providing an OLQ account, supplying services, administering subscriptions and responding to service-related requests.

Legitimate interests

We may process personal information where necessary for our legitimate interests or those of another organisation, provided those interests are not overridden by the rights and freedoms of the individual.

Our legitimate interests may include:

• operating and improving OLQ
• protecting OLQ and our customers
• maintaining security
• preventing fraud and misuse
• understanding product usage
• supporting customers
• managing business relationships
• business-to-business communications
• maintaining appropriate records
• developing our services

Where we rely on legitimate interests, we consider the nature of the information, the reasonable expectations of the individual, the purpose of processing and the potential impact on the individual's privacy rights.

Consent

Where required, we rely on consent. This may apply to certain marketing communications, non-essential cookies, analytics technologies, optional integrations, or other processing where consent is the appropriate lawful basis.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Legal obligation

We may process information where necessary to comply with a legal or regulatory obligation. This may include tax, accounting, regulatory, fraud-prevention or law-enforcement obligations.

Legal claims

Where permitted by law, information may also be processed where necessary to establish, exercise or defend legal claims.

15. Artificial Intelligence Features

OLQ may provide features that use artificial intelligence or machine-learning technologies.

For example, OLQ may use AI to assist businesses in drafting or suggesting responses to customer reviews.

When an AI-powered feature is used, relevant information may be transmitted to an AI technology provider or processed through an AI model in order to generate the requested output. Information processed may include:

• review text
• review rating
• business context
• business name
• instructions provided by the user
• other information necessary to generate the requested response

We seek to limit information sent to AI providers to information reasonably necessary to provide the relevant functionality.

The specific AI provider used by OLQ may change as our technology evolves.

Where an external provider processes information on our behalf, we will seek to put appropriate contractual and data-protection arrangements in place.

AI-generated responses or suggestions may be inaccurate, incomplete or inappropriate. Customers should review AI-generated material before publishing or relying upon it.

Unless we notify you otherwise, OLQ does not intend to use AI features to make decisions about individuals that produce legal effects or similarly significant effects without appropriate safeguards.

16. How We Share Personal Information

We may share personal information where reasonably necessary to operate OLQ. Recipients may include:

• cloud hosting and infrastructure providers
• database and storage providers
• payment processors
• analytics providers
• email and communications providers
• customer-support providers
• security and fraud-prevention providers
• software-development and technology providers
• artificial-intelligence providers
• professional advisers
• accountants
• lawyers
• auditors
• contractors
• authorised personnel supporting OLQ

We may also share information with third-party platforms where necessary to provide an integration requested by the customer. This may include Google where a customer connects Google services to OLQ.

We require service providers that process personal information on our behalf to process that information only for appropriate purposes and subject to appropriate contractual, security and confidentiality requirements.

17. We Do Not Sell Personal Information

OLQ does not sell personal information in the ordinary meaning of the term.

We do not sell lists of customers, employees, reviewers or NFC/QR users to third parties.

We do not sell Google API user data.

We do not allow third parties to purchase access to identifiable review, account or employee data for unrelated advertising purposes.

If our practices materially change in the future, we will update this Privacy Policy and take any other steps required by applicable law.

18. Customer-Controlled Information

Businesses using OLQ may upload, enter or manage personal information relating to other people. For example, an organisation may add:

• employees
• location managers
• administrators
• team members
• other authorised users

Where OLQ processes such information solely on behalf of a customer, the customer will generally be responsible for determining the purposes and legal basis for processing.

Requests relating to this information may therefore need to be directed to the organisation that controls the relevant OLQ account.

Where we receive a request concerning information for which one of our customers is the controller, we may forward the request to that customer or assist the customer in responding as required by applicable law and our contractual obligations.

Enterprise administrators may have access to information relating to brands, locations and users managed under their organisation. For example, a parent organisation may be able to view activity relating to brands, locations, managers or employees associated with its enterprise account.

Customers are responsible for configuring account permissions appropriately.

19. Service Providers and Subprocessors

OLQ relies on third-party service providers to operate our platform. Our providers may include services involved in:

• web hosting
• cloud infrastructure
• databases
• payments
• analytics
• authentication
• communications
• customer support
• security
• software development
• AI processing
• other operational functions

At present, our infrastructure includes services provided by Hostinger, and payment processing may be provided by Stripe.

We may use Google Analytics or related Google technologies for website and product analytics.

We may add, remove or replace service providers as OLQ develops.

Where required, we will enter into appropriate data-processing arrangements with service providers and conduct reasonable assessments of their privacy and security practices.

For enterprise customers, additional information regarding subprocessors may be made available upon request or through an OLQ subprocessor notice.

20. International Data Transfers

Although OLQ is currently launching primarily in the United Kingdom, OLQ operates using technology, contractors and service providers that may be located in other countries.

In particular, OLQ personnel, developers, contractors or support personnel located outside the United Kingdom, including in Bangladesh, may have authorised access to information where necessary to develop, maintain or support OLQ.

Some service providers may also process information outside the United Kingdom.

Where personal information is transferred outside the United Kingdom, we take steps designed to ensure that an appropriate level of protection is maintained as required by applicable law. Depending on the destination and circumstances, this may include:

• a UK adequacy regulation
• contractual safeguards
• the UK International Data Transfer Agreement
• the UK Addendum to approved contractual clauses
• contractual confidentiality requirements
• access controls
• another lawful transfer mechanism

Where required, we will conduct appropriate transfer-risk assessments and implement supplementary safeguards.

You may contact support@olq.io for further information about safeguards applicable to international transfers relevant to your information.

21. Data Hosting

OLQ currently uses Hostinger infrastructure as part of the technology used to provide our service.

Hosting arrangements may change as OLQ develops.

The exact physical location in which particular information is processed may depend on the service, infrastructure configuration, backup architecture and third-party providers used at the relevant time.

Where hosting or other processing involves an international transfer of personal information, we will apply appropriate safeguards as described in this Privacy Policy.

22. Data Security

We take the security of personal information seriously and use technical and organisational measures designed to protect information against:

• unauthorised access
• unauthorised disclosure
• alteration
• accidental loss
• destruction
• misuse
• other unlawful processing

Depending on the system and risk involved, measures may include access controls, authentication controls, role-based permissions, system monitoring, backups, vendor security controls, confidentiality obligations and other safeguards.

Access to customer information is intended to be limited to personnel who reasonably require such access for their role.

Customers also play an important role in security.

Customers are responsible for protecting their login credentials, using secure passwords, controlling authorised users and notifying OLQ if they suspect unauthorised access to an account.

No internet-based service can guarantee absolute security. Accordingly, we cannot guarantee that unauthorised parties will never defeat security measures or that information will never be improperly accessed, disclosed, altered or destroyed.

23. Personal Data Breaches

If we become aware of a personal data breach, we will investigate the incident and take appropriate action.

Where required by applicable data protection law, we will notify the Information Commissioner's Office or other relevant supervisory authority.

Where a breach is likely to result in a high risk to the rights and freedoms of affected individuals, we will notify those individuals where required by law.

Where OLQ acts as a processor on behalf of a customer, we will notify the relevant controller of a personal data breach in accordance with applicable law and our contractual obligations.

24. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate business, security, contractual and legal requirements.

Our retention periods may depend on the type of information and the reason it is processed. Unless a different period is required by law, contract or operational necessity, we generally aim to apply the following principles.

• Account information: retained while the account is active and ordinarily deleted, anonymised or placed into restricted archival storage following account closure, subject to legal, security and backup requirements.
• Customer organisation, brand and location information: generally retained while the relevant customer relationship remains active and for a limited period afterwards where required for contractual, legal or operational purposes.
• Employee and manager information: generally retained while the relevant customer maintains the information within OLQ and removed after deletion by the customer or termination of the relevant service, subject to backup and legal retention requirements.
• Google integration data: retained only for as long as reasonably necessary to provide the connected OLQ functionality. Data may be removed or scheduled for deletion after an integration is disconnected or an account is terminated, subject to legitimate legal, security and technical requirements.
• NFC and QR analytics: identifiable or device-level interaction data will generally be retained only for as long as required to provide analytics, security and reporting functions. Where longer-term trends are required, we may aggregate or anonymise information.
• Security and technical logs: generally retained for a limited period appropriate to security, fraud prevention, troubleshooting and auditing requirements.
• Support communications: may be retained for the duration of the customer relationship and for a reasonable period afterwards to maintain records and resolve disputes.
• Billing, transaction and accounting records: may be retained for up to six years, or longer where required by applicable tax, accounting or legal obligations.
• Marketing information: retained until you unsubscribe, object or we determine that the information is no longer required. We may retain a limited suppression record after an unsubscribe in order to ensure that your preference continues to be respected.
• Legal and dispute information: may be retained for as long as reasonably necessary to establish, exercise or defend legal claims.

Information may remain temporarily in backups after deletion from active systems until those backups are overwritten or securely deleted in accordance with our backup procedures.

Where possible, information that is no longer required in identifiable form may be aggregated or anonymised.

25. Account Closure and Data Deletion

Customers may request closure of their OLQ account in accordance with our Terms of Service and available account functionality.

Closing an account does not necessarily result in immediate deletion of every record associated with the account. We may retain information where reasonably necessary to:

• comply with legal obligations
• maintain financial records
• prevent fraud
• protect OLQ and its users
• resolve disputes
• enforce agreements
• respond to legal claims
• maintain backup integrity

Where OLQ has no continuing lawful reason to retain personal information, the information will be deleted, anonymised or otherwise put beyond ordinary use in accordance with our retention procedures.

26. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have rights in relation to your personal information. These may include the right to:

• access your personal information and obtain information about how it is processed
• rectification of inaccurate or incomplete information
• erasure of personal information in certain circumstances
• restriction of processing in certain circumstances
• object to certain processing, including processing based on legitimate interests
• object to direct marketing at any time
• data portability where the applicable legal requirements are met
• withdraw consent where processing is based on your consent
• complain to a data-protection supervisory authority

These rights are not absolute and may be subject to exemptions or limitations under applicable law. For example, we may need to retain certain information to comply with a legal obligation or establish or defend a legal claim.

To exercise a privacy right, contact support@olq.io.

We may need to verify your identity before completing a request.

Where OLQ processes information solely on behalf of one of our business customers, we may direct your request to the relevant customer.

27. Right to Object

Where we process your personal information on the basis of legitimate interests, you may have the right to object to that processing.

We will consider an objection and stop processing the information unless we have compelling legitimate grounds to continue that override your interests, rights and freedoms, or where processing is required for the establishment, exercise or defence of legal claims.

You have an absolute right to object to the use of your personal information for direct marketing.

If you object to direct marketing, we will stop using your information for that purpose.

28. Complaints

If you have concerns about how OLQ processes your personal information, please contact us first at support@olq.io.

We will attempt to investigate and resolve your concern.

You may also have the right to complain to the UK supervisory authority: Information Commissioner's Office (ICO). Information about making a complaint can be found through the ICO's official website.

You may also have rights to complain to another data-protection authority where applicable.

29. Children

OLQ is a business service and is not intended for children.

OLQ accounts are not intended to be created by individuals under the age of 18.

We do not knowingly seek to collect personal information directly from children for the purpose of creating OLQ business accounts.

If we become aware that an account has been created by a child contrary to our requirements, we may take steps to suspend the account and delete relevant information where appropriate.

This does not necessarily prevent a review written on a third-party service from appearing within a connected business account where that review is made available to OLQ by the third-party platform.

30. Third-Party Websites and Services

OLQ may contain links to or integrations with third-party websites, applications and platforms. These may include services operated by Google, Stripe and other third parties.

When you leave OLQ or use a third-party service, that third party may independently collect and process information.

OLQ does not control the privacy practices of independent third parties.

We encourage users to review the privacy policies and terms of any third-party service they use.

31. Google Review Destinations

An OLQ-powered NFC product, QR code or link may direct an individual to a Google review interface or another third-party destination.

Once an individual is transferred to the third-party platform, the processing carried out by that platform is governed by that platform's policies.

OLQ does not control Google's review-submission systems.

OLQ may, however, process analytics relating to the OLQ interaction that occurred before the user was transferred to the third-party platform, as described elsewhere in this Privacy Policy.

32. Aggregated and Anonymised Information

We may aggregate or anonymise information so that it no longer identifies an individual. We may use genuinely anonymous or aggregated information for purposes including:

• business analytics
• service improvement
• benchmarking
• research
• product development
• performance analysis
• security
• statistical reporting

Where information has been effectively anonymised so that an individual is no longer identifiable, it may no longer constitute personal information under applicable data-protection law.

We will not attempt to re-identify information that has been irreversibly anonymised unless permitted or required by law.

33. Business Transfers

If OLQ is involved in a merger, acquisition, restructuring, financing, investment, sale of assets or similar corporate transaction, information may be disclosed to appropriate advisers, prospective purchasers, investors or successor organisations where legally permitted.

Any recipient of personal information will be expected to use it consistently with applicable privacy and data-protection requirements.

Where additional consent is legally required for a particular transfer, we will seek that consent.

34. Disclosure Required by Law

We may disclose information where we reasonably believe disclosure is necessary to:

• comply with applicable law
• comply with a court order
• respond to lawful requests from public authorities
• comply with regulatory obligations
• protect the rights or property of OLQ
• protect users or members of the public
• investigate fraud or security incidents
• prevent unlawful activity
• establish, exercise or defend legal claims

We will assess requests for personal information and, where appropriate, seek to limit disclosure to information reasonably necessary for the relevant purpose.

35. Changes to Our Services

OLQ is an evolving software platform.

We may introduce new features, integrations or technologies over time.

Where a new feature involves materially different processing of personal information, we will assess the privacy implications and update our notices or seek additional permissions where required.

This Privacy Policy describes our current services and should not be interpreted as permission for OLQ to process personal information for unrelated future products merely because those products may later become part of OLQ.

36. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes may be made to reflect:

• new OLQ functionality
• new integrations
• changes in technology
• changes to our service providers
• legal or regulatory developments
• changes to our business structure
• improvements to our privacy practices

When we make changes, we will update the "Last updated" date at the top of this policy.

Where changes are material, we may provide additional notice through OLQ, by email or by another appropriate method.

Continued use of OLQ after an updated Privacy Policy becomes effective does not remove any privacy rights provided by applicable law.

37. UK Data Protection Law

OLQ is established in the United Kingdom and processes personal information in accordance with applicable UK privacy and data-protection law. This may include, as applicable:

• the UK General Data Protection Regulation
• the Data Protection Act 2018
• the Privacy and Electronic Communications Regulations 2003
• the Data (Use and Access) Act 2025 and amendments brought into effect under it
• other applicable privacy, electronic-communications and data-protection legislation

Where individuals outside the United Kingdom interact with OLQ, additional local privacy laws may apply depending on the circumstances.

38. Individuals Outside the United Kingdom

OLQ is currently primarily launching its commercial service in the United Kingdom.

However, individuals located outside the United Kingdom may interact with OLQ-powered products. For example, a customer located outside the United Kingdom may tap or scan an OLQ-enabled NFC or QR product and be directed towards a review platform.

Our systems may therefore receive technical information from individuals located in other countries even where the relevant OLQ business customer is located in the United Kingdom.

Where laws outside the United Kingdom apply to our processing, we will seek to comply with applicable requirements.

Availability of OLQ in a country does not necessarily mean that OLQ is actively marketed or commercially established in that country.

39. No Requirement to Provide Certain Information

In some circumstances, you are not legally required to provide personal information to OLQ.

However, certain information is necessary for us to provide particular services.

For example, we may require an email address and authentication information to create an OLQ account.

If required information is not provided, we may be unable to create an account, process a subscription, connect an integration or provide a requested feature.

Optional information will generally be identified through the relevant OLQ interface.

40. Accuracy of Information

Customers and account holders are responsible for ensuring that information they provide to OLQ is reasonably accurate and up to date.

You should update your account information if it changes.

Enterprise administrators should also take reasonable steps to keep information concerning managers, employees, locations and authorised users accurate.

You may contact us if you believe personal information held by OLQ is inaccurate.

41. Confidentiality and Access

Access to non-public customer information is restricted to authorised personnel and service providers where access is reasonably required for legitimate operational purposes. Such purposes may include:

• providing support
• investigating technical issues
• maintaining infrastructure
• responding to security incidents
• complying with legal requirements
• developing or maintaining OLQ

Personnel and contractors with access to confidential information are expected to comply with appropriate confidentiality and security obligations.

Where third-party platform policies impose additional restrictions on human access to platform data, OLQ will seek to operate its access procedures consistently with those requirements.

42. Automated Processing

OLQ may use automated systems to perform functions such as:

• categorising activity
• generating analytics
• detecting unusual activity
• associating review activity with products, locations or employees
• generating AI-assisted response suggestions
• producing reports

These activities are intended to support business users of OLQ.

OLQ does not currently intend to make solely automated decisions about individuals that have legal effects or similarly significant effects on them within the meaning of applicable data-protection law.

If this changes, we will provide appropriate information and safeguards as required by law.

43. Enterprise Customers

Where an organisation purchases or manages OLQ centrally, it may have administrative visibility across its account structure. For example, an enterprise may create:

• multiple brands
• multiple business locations
• location-level accounts
• manager accounts
• employee records
• associated review products

The enterprise may be able to view information across those accounts according to the permissions configured within OLQ. This may include review analytics, review collection activity, location activity, employee attribution and other service information.

Users who access OLQ through an organisation should understand that the organisation's administrator may control their account and may have access to information associated with their use of OLQ.

OLQ is not responsible for an enterprise customer's internal decisions regarding employee monitoring or management. Customers are responsible for ensuring their use of OLQ complies with applicable employment, privacy and data-protection requirements.

44. Data Processing Agreements

Where required, OLQ may enter into a Data Processing Agreement ("DPA") with a customer governing OLQ's processing of personal information on the customer's behalf. A DPA may address matters including:

• processing instructions
• confidentiality
• security
• subprocessors
• international transfers
• data-subject requests
• personal data breaches
• deletion and return of information
• regulatory assistance

Where there is a conflict between this Privacy Policy and a valid customer-specific Data Processing Agreement concerning processor activities, the relevant contractual data-processing terms will govern those processor activities to the extent provided in that agreement.

45. Contact Us

If you have questions about this Privacy Policy, wish to exercise a data-protection right or have concerns about OLQ's processing of personal information, please contact:

OLQ LTD, company number 17241125, 665 Romford Road, London, United Kingdom, E12 5AD.

Email: support@olq.io

Website: OLQ.io

We will endeavour to respond to privacy enquiries in accordance with applicable legal requirements.