This Privacy Policy describes how we collect, use, process and disclose your information, including personal information, when you use the Services.

This Privacy Policy is subject to the Terms and Conditions, available for review here.

If you see an indefinite term in this Privacy Policy, it has the same definition as in our Terms and Conditions.

When this Privacy Policy mentions “GReviews”, “we”, “us” or “our” it refers to the company GReviews that is responsible for your information under this Privacy Policy (the “Data Controller”).

GReviews offers services to both individuals and legal entities. GReviews can be Data Processor or Data Controller and Data Processor simultaneously. If GReviews is a Data Processor, it processes personal data in accordance with the Data Processing Agreement.

If you do not agree with this Privacy Policy, do not access or use our Services or interact with any other aspect of our business.

Information we collect

There are two general categories of information that we collect.

– Information provided to us while using the Services

– Information necessary for the use of the Services.

We request and collect the following personal information about you when you use the Services:

Account information. When you register for the Services, create a user account (“GReviews Account”), we require certain information, such as your first name, last name and email address.
Phone information If you use our promotion codes, you must provide us with your telephone number.

Affiliate information.

If you participate in our affiliate program, we must provide you with personal information (such as name, surname, billing information) to fulfill our legal obligations to you. We must also provide us with complete tax forms to comply with our tax obligations due to the contractual relationship between you and us.

Identity verification information.

To help create and maintain a reliable environment, we collect identity verification information (such as images from your passport, national identification card) or other authentication information.

Payment information.

To use certain features of the Services (Payment Services), we ask that you provide us with certain financial information (such as your bank account or credit card information) to facilitate payment processing.

Information that you provide through our support channels.

The Services also include customer service, where you can send any questions related to the Services. If you speak directly with one of our representatives, by email or if you are related to our support team, you will be asked to provide contact information, a summary of the problem and any other information that may be useful to resolve the problem.

This information is necessary for the proper compliance of the contract between you and us and to enable us to comply with our legal obligations. Without this, we may not be able to provide all the requested services (including the use of the Services, our Blog, participation in our webinars, events, being our Affiliate).

We retain your account information until you delete your GReviews account. We also retain some of your information, which is anonymous, as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, support business operations and continue to develop and improve the Services. When we retain information for the improvement and development of the Service, we take steps to eliminate the information that directly identifies you, and we only use the information to discover collective information about the use of our Services, not to specifically analyze the personal characteristics about you.

You can provide us with the following information:

You may choose to provide us with additional personal information to obtain a better user experience when using the Services. This additional information will be processed based on your consent.

Additional profile information.

You may choose to provide additional information as part of your GReviews account (such as your job title, your employer’s name, your phone number (except when we ask for your phone number to use your promotion code)).

Other information.

If you use our Blog or other content or would like to participate in our webinars, we may ask you to provide us with information (such as your name, job title, photo or other information). By posting any information on our website, you acknowledge and agree that the information you complete during the subscription process on our website or at any time thereafter creates your public profile (hereinafter, “Public profile”). You acknowledge and agree that the information you provide in your public profile will be visible to others.

Some of our Services require the provision of contact information, such as the email address or telephone number. This information is necessary to provide you these services. Keep in mind that you are responsible for receiving consent if you use these Services on behalf of another person.

It is possible that some of our Services require providing access to your profile on social networks (such as Facebook, Twitter, etc.). You are the only person who decides if you want to provide this access. You can revoke this access in the profile of your social network at any time.

If you use our Payment Services, we need the following information:

We need to collect the following information, as it is necessary for the proper compliance of the contract with you and to comply with the applicable law (such as anti-money laundering regulations). Without it, you will not be able to use our Payment Services:

Payment information.

When you use the Payment Services, we require certain financial information (such as your credit card information) to process payments and comply with applicable law.

Verification of identity and other information.

In some cases (for example, if you request a refund of the fees you paid), we can ask for the following information: your billing information (name, transaction ID, the last 4 digits of the credit card associated with the account, the billing date, etc.).), email address, login name. We may also provide you with identity verification information (such as images from your passport, national identification card) or other authentication information to verify your identity, provide you with Payment Services and comply with applicable laws.

Automatic collection of information about your use of the Services.

When you use the Services, we automatically collect information, including personal information, about the services you use and how you use them. This information is necessary for the proper compliance of the contract between you and us, so that we can comply with the legal obligations and given our legitimate interest in being able to provide and improve the functionalities of the Services.

Device and connection information.

We collect information about your computer or other devices that you use to access the Services. The information on this device includes its type of connection and configuration when you install, access, update or use our Services. We also collect information through your device about your operating system, browser type, IP address, URL of reference / exit pages. We use your IP address and / or country preference to approximate your location to provide you with a better service experience and to comply with our legal and fiscal obligations.

Cookies and similar technologies.

We use cookies and other similar technologies. For more information about our use of these technologies, see our Cookies Policy.

Payment transaction information.

GReviews may collect information related to your payment transactions through the Services, including the name of the product, the type of payment instrument used, the date and time, the amount of the payment, the amount of the tax, the number of the credit card, the expiration date of the credit card, the name of the cardholder (if provided), value / verification code of the card and billing details: name, surname, telephone, address, country, State, city, zip code and other details related to transactions.

Third-party widgets

Some of our Services contain widgets and social networking features, such as the Facebook button. You are the only person who decides if you want to press this button and share your personal information. These widgets and functions collect your IP address, information about the page you are visiting while using the Services and can set up a cookie to allow the function to work properly. The widgets and social network functions are hosted by a third party or directly in our Services. Your interactions with these functions are governed by the privacy policy of the company that provides them.

HOW WE USE THE INFORMATION WE COLLECT

– We use, store and process information, including personal information, about you to provide, improve and develop the Services, create and maintain a reliable and safe environment and comply with our legal obligations.
– Provide, improve and develop the Services.
– Allows you to access and use the Services.
– Operate, protect, improve and optimize Services and experience, such as conducting analysis and conducting research. Subject to our contract with you, we process this information manually or by computer.
– Provide customer service: to solve technical problems with which they are, to respond to their requests for assistance, to analyze information about failures and to repair and improve the Services.
– Send service or support messages, updates, security alerts and account notifications.

If you provide us with your contact information, we may process this information: (i) for the detection and prevention of fraud, and (ii) for any purpose you authorize at the time of collection.
We process this information given our legitimate interest in improving the Services and when necessary for the proper performance of the contract with you.

– To create and maintain a reliable and safe environment.
– Detect and prevent fraud, spam, abuse, security incidents and other harmful activities.
– Carry out safety investigations and risk assessments.
– Check or authenticate the information or the identifications provided by you (for example, to verify your identification).
– Comply with our legal obligations.
– Resolve any dispute and enforce our agreements with third parties.
– Enforce our Terms and Conditions and other policies.

We process this information given our legitimate interest in protecting the Services, to measure the proper performance of our contract with you and to comply with applicable laws.

– Provide, customize and improve our advertising and marketing.
– Send promotional messages, marketing, advertising and other information that may interest you according to your preferences (including information about campaigns and GReviews services) and advertising on social networks through social networking platforms (such as Facebook or Google).
– Personalize, measure, and improve our advertising.

We will process your personal information for the purposes listed in this section, given our legitimate interest in conducting marketing activities to offer you products or services that may be of interest to you. You may choose not to receive our marketing communications by following the instructions to cancel the subscription included in our marketing communications or by changing the settings of your notifications within your GReviews account.

– To provide and secure payment services.
– Allows you to access and use the Payment Services.
– Detect and prevent fraud, abuse, security incidents and other harmful activities.
– Carry out safety investigations and risk assessments.
– Comply with legal obligations (such as regulations against money laundering).
– Enforce payment policies.

With your consent, we will send promotional messages, marketing, advertising and other information that may interest you according to your choice.

We process this information given our legitimate interest in improving Payment Services, and when necessary for proper compliance with the contract with you and to comply with applicable laws.

SHARE AND DISSEMINATE

We collect information worldwide and store that information in the EU and the United States. We transfer, process and store your information outside of your country of residence, wherever we or our third-party service providers operate for the purpose of providing you with the Services. Each time we transfer your information, we take measures to protect it.

If you give us a consent.

When you have given your consent, we share your information, including personal information, as described at the time of consent, for example, when you participate in promotional activities conducted by GReviews partners or third parties, for example, during conferences.

We share your billing information with any third party that provides us with processing services.

To comply with the law, respond to legal requests, prevent damages and protect our rights.
GReviews may disclose your information, including personal information, to the courts, to law enforcement or governmental authorities, or to authorized third parties, to the extent required by law or permitted to do so, or if such disclosure is reasonably necessary: (i ) comply with our legal obligations, (ii) to comply with the legal process, (iii) to respond to verified requests related to a criminal or alleged investigation or alleged illegal activity or any other activity that may expose you, you or any another of our users with legal responsibility, (iv) to protect the rights, property or personal safety of GReviews, its employees or members of the public.

When appropriate, we may notify you of legal requests unless: (i) the notice is prohibited by the legal process itself, by court order we receive, or by applicable law, or (ii) we believe the notice was ineffective, creates a risk of injury or bodily harm to an individual or group, or creates or increases a risk of fraud on the property of GReviews, its users and the Services. In cases where we comply with legal requests without prior notice for these reasons, we will attempt to notify you of the request after the fact when appropriate and when we determine in good faith that we are no longer prevented from doing so.

Service providers.

GReviews uses a variety of third-party service providers to help us provide services related to the Services, including Payment Services. Service providers may be located within or outside the European Economic Area (“EEA”). In particular, our service providers are located in Europe, Russia, Ukraine and North America. We make sure that this third service provider has adequate security control.

For example, service providers can help us: (i) conduct background or police checks, fraud prevention and risk assessment, (ii) carry out development, maintenance and debugging of products, (iii) allow the provision of Services through third-party platforms and software tools (for example, through integration with our APIs), or (iv) provide customer service, advertising or payment services. These providers have limited access to your information to perform these tasks on our behalf, and are required by contract to protect and use it only for the purposes for which it was disclosed and in accordance with this Privacy Policy.

GReviews must share your information, including personal information, to ensure proper compliance with our contract with you.

Corporate affiliates.

We may share your information, including personal information, with our corporate affiliates to support, integrate, promote and improve the Services.

Social networking sites.

When permissible in accordance with applicable law, we may use certain limited personal information about you, such as your email address, to make a hash and share it with social networking websites, such as Facebook or Google, to generate leads, attract traffic to our websites or otherwise we will promote our products or services. These processing activities are based on our legitimate interest in carrying out marketing activities to offer you products or services that may interest you.

The social networking websites with which we can share your personal information are not controlled or supervised by us. Therefore, any questions related to the way your social network website service provider processes your personal information should be directed to that provider.

Please note that, at any time, you can request GReviews to stop processing your data for these direct marketing purposes by sending an email to buygreviews@gmail.com.

Aggregated data

We may also share aggregate information (information about our users that we combine so that it no longer identifies or refers to an individual user) and other anonymous information for compliance with regulations, marketing and publicity analysis of the industry and the market, and other commercial purposes.

We can also use this information for research and development.

We will never sell your personal data to third parties.

OTHER IMPORTANT INFORMATION

Analyzing your communications.

We may review, scan or analyze your communications about the Services for the purposes of fraud prevention, risk assessment, regulatory compliance, research, product development, research and customer assistance. For example, as part of our fraud prevention efforts, we scan and analyze messages to hide contact information and references to other websites. In some cases, we can also scan, review or analyze messages to debug, improve and expand product offerings. We use automated methods where reasonably possible. However, we may occasionally need to manually review some communications, such as fraud investigations and customer assistance, or evaluate and improve the functionality of these automated tools. We will not review, scan or analyze your communications to send you marketing messages from third parties,

These activities are carried out in accordance with our legitimate interest in ensuring compliance with applicable laws and our Terms and Conditions, preventing fraud, promoting security and improving and ensuring the proper performance of the Services.

Google Analytics and Google Adwords

Parts of the Services use Google Analytics and Google Adwords. The use of Google Analytics and Google Adwords is subject to the Google Privacy Policy, the AdWords Terms and Conditions, and the Google Analitycs Terms of Service.

YOUR RIGHTS

You can exercise any of the rights described in this section by sending an email to buygreview@gmail.com. Please note that we may ask you to verify your identity before taking additional action on your application.

Managing your information.

You can access and update some of your GReviewsinformation by sending a request to buygreviews@gmail.com.

Correction of inaccurate or incomplete information.

You have the right to ask us to correct incorrect or incomplete personal information about you (and that you can not update in your GReviews account).

Access to data and portability.

If applicable under the law of your jurisdiction, you may request copies of your personal information that we have. You may also have the right to request copies of the personal information you have provided to us in a structured, commonly used, machine-readable format and / or request that we transmit this information to another service provider (when technically possible).

Data retention and deletion.

Generally, we keep your personal information for as long as it is necessary for the execution of the contract between you and us and to comply with our legal obligations. If you no longer want us to use your information during the provision of the Services, you can request that we delete your personal information and that we close your GReviews account. In this case, your information will be deleted within 72 (seventy-two hours). Please note that if you request the deletion of your personal information:

We may retain part of your personal information as necessary for our legitimate business interests, such as detection and prevention of fraud and improvement of security within 7 (seven) years in accordance with applicable law.

We may retain and use your personal information to the extent necessary to comply with our legal obligations. For example, we may maintain part of your information for taxes, legal audit and audit obligations within 7 (seven) years in accordance with applicable law.

The information you have shared with others (for example, publications on our Blog) may still be publicly visible on our Blog. In addition, some copies of your information (for example, records of records) may remain in our database, but are dissociated from personal identifiers. We inform you that if you directly disclose any information through our Blog, this information may be collected and used by third parties. We will correct or eliminate any information that you have published in our Blog if you request it.

Because we maintain the Services to protect against accidental or malicious loss and destruction, copies of your personal information from our backup systems may not be deleted for a limited period of time (no more than 3 months).

Withdrawal of consent and restriction of processing.

When you have given your consent for GReviews to process your personal information, you may withdraw your consent at any time by changing the settings of your GReviews account or by sending us a notice specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the legality of any processing activity based on such consent prior to your withdrawal. In addition, in some jurisdictions, the applicable law may grant you the right to limit the ways in which we use your personal information, particularly when (i) you dispute the accuracy of your personal information; (ii) the processing is illegal and you object to the deletion of your personal information; (iii) we no longer need your personal information for the purposes of processing, but you need the information for the establishment, exercise or defense of legal claims; or (iv) has objected to the processing under Section 5.6 and is awaiting verification if the legitimate grounds of GReviews override theirs.

Objection to treatment.

If applicable under the law of your jurisdictions, you may ask us not to process your personal information for specific purposes (including profiling) when such processing is based on legitimate interests. If you object to such processing, we will no longer process your personal information for these purposes unless we can demonstrate legitimate compelling reasons for such processing or such processing is necessary for the establishment, exercise or defense of legal claims.

When your personal information is processed for direct marketing purposes, you may ask us at any time to stop processing your data for these direct marketing purposes by sending an email to buygreviews@gmail.com.

WE OPERATE GLOBALLY

To facilitate our global operations, we can transfer, store and process your information within our family of companies or with service providers based in Europe, the Russian Federation and North America. The laws in these countries may differ from the laws applicable to your country of residence. For example, information collected in the EEA may be transferred, stored and processed outside the EEA for the purposes described in this Privacy Policy. When we transfer the store and process your personal information outside the EEA, we have ensured that adequate security measures exist to ensure an adequate level of data protection.

Before sharing your information with affiliated companies or external service providers outside the EEA, we establish all the necessary means to guarantee an adequate level of data protection.

SECURITY

We are continuously implementing and updating administrative, technical and physical security measures to help protect your information against unauthorized access, loss, destruction or alteration. Some of the security measures we use to protect your information are the following

– Limited access to the production database at the network level.
– Limited access to the production database at the process / user level
– Password policy to access the production database.
– Encryption of data transfer
– Encryption of data in the database (for card data and authentication credentials)
– WAF (Web application firewall)
– DDoS protection
– Internal password change policies
– PCI DSS compliance
– Record of actions and analysis of registration.
– Antivirus on administrators workstations

OUR POLICY TOWARDS CHILDREN

The Services are not directed to people under 18 years of age. We do not knowingly collect personal information from children under the age of 18. If we realize that a child under the age of 18 has provided us with personal information, we will take steps to eliminate that information. If you notice that a child has provided us with personal information, contact our support services.

CHANGES

We reserve the right to change this Privacy Policy at any time in accordance with this clause. If we make changes to this Privacy Policy, we will publish the updated Privacy Policy on our website and indicate the date of update.