Privacy Policy
Last updated: 26 August 2026
1. Who we are
GlueReviews ("GlueReviews", "we", "us") is a review-collection platform operated by gluereviews.com, Kyriakou Matsi 27A, Cyprus. GlueReviews provides businesses with a QR code and a public page where their customers can rate their experience and either leave a public review or send private feedback.
This policy explains what personal data is collected through GlueReviews, how it is used, and the rights you have under the EU General Data Protection Regulation (GDPR) and applicable local law.
2. Controllers and processors
For a business's customer feedback (the name, email and comments submitted on a business's review page): the business that owns that review page is the data controller. GlueReviews acts as a processor, storing and presenting that feedback on the business's behalf.
For business account data (the account a business owner creates to use GlueReviews): GlueReviews is the controller.
3. Information we collect
From business owners (account holders): name and email address provided through Google sign-in, business details you enter (business name, review links, logo), and billing information handled by our payment provider (we store a payment reference, not your card number).
From customers leaving feedback (reviewers): your name, your email address, the rating you select, and the feedback message you write. This is submitted voluntarily when you choose to send private feedback.
Technical data: basic information needed to operate and secure the service (for example request and error logs generated by our hosting provider). GlueReviews does not sell personal data and does not run advertising trackers.
4. How we use personal data and our legal bases
- To deliver the review page and pass a customer's private feedback to the relevant business, and to let the business respond and improve — performance of a contract and the business's legitimate interests.
- To create and manage business accounts and process subscriptions — performance of a contract.
- To secure, maintain and improve the service, and prevent abuse — legitimate interests.
- To comply with legal, tax and accounting obligations — legal obligation.
5. Service providers (sub-processors)
We use trusted providers to run GlueReviews:
- Google Firebase / Google Cloud — authentication, database and hosting (data stored in the European Union).
- Stripe — subscription payments. Card details are entered directly with Stripe and are never stored by GlueReviews.
- Google Places API — used only to look up a business's public listing when it is being set up.
These providers process data on our behalf under their own security and data protection terms.
6. International transfers
Customer feedback and account data are stored in the European Union. Some providers (such as Stripe and Google) may process limited data outside the EU under appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
7. How long we keep data
Private feedback is kept for as long as the business needs it to respond and improve, and can be deleted by the business at any time. Account and billing records are kept for the life of the account and for any period required by law after it closes. You can ask for your data to be deleted (see your rights below).
8. Your rights
Under the GDPR you have the right to:
- access the personal data held about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing;
- data portability;
- lodge a complaint with your local supervisory authority (in Cyprus, the Office of the Commissioner for Personal Data Protection).
If you left feedback on a business's page, that business is the controller — you can contact them directly, or contact us and we will help route your request. To exercise any right, contact us at hello@gluereviews.com.
9. Cookies and local storage
GlueReviews uses only the storage strictly necessary to keep business owners signed in and to run the app. We do not use advertising or cross-site tracking cookies.
10. Security
We use industry-standard measures to protect personal data, including encrypted connections and access controls that restrict private feedback to the business that owns it.
11. Children
GlueReviews is not directed to children and is intended for use by businesses and their adult customers.
12. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "last updated" date above.
13. Contact
Questions about this policy or your data? Contact gluereviews.com at hello@gluereviews.com.