Privacy Policy
This policy explains the main categories of data processed by TMF Reviews, why they are processed and the measures used to protect users, merchants and reviewers.
1. Service operator
TMF Reviews is operated by the legal entity identified in the legal information section of this page.
2. Account and business data
We may process data required to create and manage an account, including identity, business email, store information, roles, integration settings, commercial information and billing information.
3. Order and review data
E-commerce integrations may transmit data strictly necessary for order synchronisation, review collection and invitation workflows.
Reviews may include a rating, comment, date, product information and elements needed for moderation or verification.
Publicly displayed names may be masked or shortened to reduce unnecessary exposure of personal data.
4. Purposes
Data is processed to provide the service, secure accounts, synchronise stores, collect and publish reviews, manage moderation, handle billing, provide support and meet applicable obligations.
5. Payments
Payments may be handled by specialised providers including Stripe and PayPal.
TMF Reviews does not require customers to enter complete payment card details directly into TMF Reviews forms where the transaction is handled by those providers.
6. Transactional emails
TMF Reviews uses an SMTP email service to send messages required for operation of the service, including invitations, security, billing, team and review-related communications.
7. Retention
Data is retained for as long as necessary to provide the service, meet legal obligations, support security and billing, and protect legitimate rights.
Retention periods may vary depending on the nature of the data and applicable obligations.
8. Security
TMF Reviews applies technical and organisational measures intended to protect data against unauthorised access, loss, alteration or disclosure.
Store isolation relies on strict controls around each store’s data scope.
9. Service providers and transfers
Technical providers may process certain data where necessary for hosting, payments, email delivery, security or operation of the service.
Depending on the provider and user location, data may be processed in another country subject to safeguards required by applicable rules.
10. Rights and requests
Depending on applicable rules, individuals may have rights concerning access, correction, deletion, restriction or other aspects of processing.
Requests may be sent to the public email address shown on this page. Reasonable identity verification may be required before a request is processed.
11. Changes to this policy
This policy may change to reflect updates to the service, our providers or applicable requirements.