Privacy Policy
1. Introduction
We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
2. Information We Collect
A. Business Information
- Business name and contact information
- Business category and type
- Google Business Profile URL or identification
B. Google Review Data
- Customer reviews from your Google Business Profile
- Review ratings and dates
- Review content and text
C. Account and Subscription Information
- Email address
D. Card and Usage Data
- Tap events
- General location data (country/region) of scans
3. How We Use Your Information
- To provide and maintain our Tap card service
- To analyse your Google reviews and prepare monthly review reports
- To communicate with you about your account and services
- To send you invoices and payment notifications
- To improve and optimise our services
- To comply with legal obligations
4. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information with:
- Google — for Google Business Profile access via OAuth
- Stripe — our payment processor for subscription payments
- Service providers — hosting, email, analytics — under strict confidentiality agreements
- Legal authorities — if required by law
5. Legal Basis for Processing (UK GDPR)
- Contract — to provide services
- Legitimate Interest — to improve services and prevent fraud
- Consent — for marketing communications
- Legal Obligation — to comply with applicable laws
6. Your Rights
You have the right to access, correct, delete, restrict, or port your personal data. To exercise any of these rights, contact us at office@tapreviewmanagement.co.uk.
7. Data Security
- SSL/TLS encryption for data in transit
- Secure database storage
- Access controls and authentication
- Regular security audits
8. Data Retention
- Account Information — retained while subscription is active and for 1 year after cancellation
- Review Data — retained for 6 months
- Payment Records — retained for 7 years
9. Cookies
Our website uses a strictly necessary session cookie to keep you logged in. This cookie does not track you and is exempt from consent requirements under UK PECR. See our Cookie Policy for full details.
10. Third-Party Links
We are not responsible for the privacy practices of third parties. Please review their privacy policies.
11. Children's Privacy
Our services are not designed for children under 13.
12. Contact Us
office@tapreviewmanagement.co.uk
13. Changes to This Policy
We will notify you of significant changes by updating the Last Updated date at the top of this page.
14. Compliance
This Privacy Policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.