Privacy Policy
Last updated: 9 October 2026
1. Who we are
Review Velocity is a trading name of Alex Bennett, a sole trader trading as Amazing Design Services, 50 Harvel Avenue, Rochester, Kent, ME2 3JU, United Kingdom.
For the personal data described in this policy, we are the controller. Contact us about anything in this policy at alex@reviewvelocity.co.uk or on 07988 998941.
This policy explains how we use personal data about:
- visitors to www.reviewvelocity.co.uk and users of our free tools;
- businesses and people we contact about our services, including through our own research;
- people who enquire, book a demo or request a report; and
- our customers and their staff.
Our customers’ end customers: when our customers use Review Velocity to ask their own customers for reviews, the customer is the controller of that data and we process it on their behalf. If you received a review request from a business using Review Velocity, please contact that business about your data. We will help them respond.
2. The data we collect and where it comes from
Data you give us
- Contact form: your name, business name, email, phone number (optional) and message.
- Demo bookings: your name, email and any details you add when booking a demo through Calendly.
- Onboarding calls: your name and email when you book an onboarding call through Google Calendar.
- Free tools: the business name and postcode you enter into the velocity checker. Our calculator, QR code generator, review responder and review removal guide run in your browser and don’t send what you type to us.
- Report requests: your business details and contact details when you request a report, including through Facebook or Instagram lead forms.
- Customers: account and billing contact details, your business details, and records of your subscription and support requests. Card payments are handled by Stripe; we don’t see or store your full card number.
- Communications: emails, WhatsApp messages and calls with us.
Data we collect from public sources
To find local businesses that may benefit from our service, we research publicly available business information, including Google Business Profiles (via Google’s Places service) and businesses’ own websites. This can include a business name, address, phone number, website, public reviews and ratings, and a business email address published on the business’s website. Where the business is a sole trader or partnership, some of this is personal data. We use it to prepare a review performance report for the business and to contact the business about our services (see section 3).
Data collected automatically
- Website: our hosting provider (Cloudflare) processes technical data such as your IP address, browser and pages requested, to deliver and secure the website.
- Cookies: essential storage to remember your cookie choice, and, only if you agree, the Facebook Pixel. See our Cookie Policy.
- Emails: our email provider (Brevo) records whether our emails are delivered, opened and clicked.
- Reports: when you open a report link we send you, we record that it was opened so we know to follow up.
3. How we use your data and our legal basis
| Purpose | Legal basis under the UK GDPR |
|---|---|
| Replying to enquiries and providing demos | Legitimate interests (responding to people who contact us) or taking steps at your request before a contract |
| Providing the service to customers, onboarding, support and billing | Contract |
| Researching businesses and preparing review performance reports | Legitimate interests (finding businesses we can genuinely help) |
| Emailing businesses about our services | Legitimate interests, and where the law requires it, consent (see below) |
| Sending newsletters and updates you have signed up for | Consent |
| Measuring our adverts with the Facebook Pixel | Consent |
| Keeping the website and our systems secure and preventing fraud | Legitimate interests |
| Keeping accounting and tax records | Legal obligation |
Business marketing emails. We may email limited companies and other corporate bodies at business addresses about our services without prior consent, as UK law allows. We only send marketing emails to sole traders and partnerships if you have given your consent. Every marketing email includes a simple way to opt out, and we will stop when you ask.
You can object at any time to us using your data on the basis of legitimate interests, including for direct marketing.
4. Who we share data with
We use trusted providers to run our business. They may only use the data to provide their services to us:
| Provider | What they do | Location |
|---|---|---|
| Our software provider | Provides the Review Velocity platform software | Italy (EU) |
| Stripe | Payments and subscriptions | UK / EU / USA |
| Brevo (Sendinblue SAS) | Email sending and contact management | EU (France) |
| Calendly | Demo booking | USA |
| Google (Workspace, Calendar, Places, Maps, Sheets) | Email, onboarding call bookings, business research, report maps, internal records | UK / EU / USA |
| Cloudflare | Website hosting and security | Global, including USA |
| Hostinger | Hosting for our automation server (n8n) | UK |
| JSONBin.io | Stores the reports we prepare so you can view them by link | Outside the UK (see section 5) |
| goQR.me (api.qrserver.com) | Generates QR codes shown in reports | Germany (EU) |
| Meta (Facebook, Instagram, WhatsApp) | Lead forms, advert measurement (with consent), WhatsApp messages | Ireland (EU) / USA |
| Web3Forms | Delivers website contact form messages | Outside the UK (see section 5) |
We may also share data with professional advisers (such as our accountant), with law enforcement or regulators when the law requires it, or with a buyer if the business is sold.
We never sell personal data.
5. International transfers
Some providers process data outside the UK. Where they do, we rely on UK adequacy regulations (which cover the EU and, under the UK–US Data Bridge, US organisations certified to it) or on appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. Contact us for more information.
6. How long we keep data
| Data | How long |
|---|---|
| Enquiries and demo bookings that don’t lead to a sale | 2 years from last contact |
| Research and report data about businesses we have contacted | 12 months from when we last contacted you, unless you become a customer; deleted sooner if you object |
| Customer account records | For the subscription, then 6 years for legal and accounting purposes |
| Marketing opt-outs | Kept indefinitely, so we don’t contact you again |
| Website security logs | As set by Cloudflare, typically up to 30 days |
7. Your rights
Under the UK GDPR you have the right to:
- access a copy of your personal data;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it, including objecting to direct marketing at any time;
- data portability, where we rely on consent or contract; and
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email alex@reviewvelocity.co.uk. We will respond within one month. There is normally no charge.
If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk, 0303 123 1113.
8. Security
We protect personal data with access controls, encrypted connections and reputable providers, and we limit access to the people who need it. Report links are long and random so they can’t easily be guessed; please don’t share yours if you don’t want others to see it.
9. Children
Our services are for businesses and are not aimed at children.
10. Changes to this policy
We will update this policy when how we use data changes. The date at the top shows when it was last updated. If we make significant changes, we will tell customers by email.