In brief: Your feedback is received privately. Choosing to send us a review does not give us permission to publish it. Publication choices are separate and optional. We do not display your email address in testimonials.
1. Who is responsible for your information?
The Werx Group operates this review service. For privacy enquiries, requests about your information or withdrawal of publication permission, email reviews@werx.group.
Before public launch: The legal entity responsible for this website, its registered/contact address and any applicable data protection officer contact must be confirmed and added here.
2. What information do we collect?
- The Werx business or service you select, your star rating and the words of your review.
- Your name, email address and your chosen testimonial colour style.
- Any optional photograph you upload.
- Your individual choices about publication on websites, social media, printed materials and editorial content, including separate permission for photographs.
- Technical information necessary to operate and secure the form, such as basic server logs and submission timestamps.
Please avoid including detailed medical information, information about another person, or identifying photographs of others unless appropriate.
3. Why do we use this information?
- To receive, review and respond to feedback about our services.
- To send an acknowledgement to the email address you supply, where delivery is possible.
- To administer requests, maintain an audit of publication permissions and investigate misuse or technical problems.
- Only where you have selected the relevant optional permission, to consider your review for publication in the specified channels.
We do not automatically publish reviews or submit them to Google. Any Google review is a separate action you choose to take.
4. Legal basis and health-related information
Under UK GDPR, we must identify an appropriate lawful basis for each use of personal information. Our intended approach is to use legitimate interests, where appropriate and balanced against your rights, for administering feedback and service improvement, and consent for optional publication. Where a review contains information about health, additional rules for special-category data apply; an appropriate Article 9 condition, such as explicit consent where suitable, must be established before that information is processed for the relevant purpose.
Important: The final lawful bases, any legitimate interests assessment and any required explicit-consent wording must be reviewed and documented before this service is opened to customers. The existing form's general acknowledgement must not be treated as a substitute for explicit special-category consent.
5. Your publication choices
You can submit feedback without agreeing to publication. Website, social media, print and editorial permissions are separate, optional and unticked by default. A photograph can be submitted privately without publication permission. Publishing a photograph requires its own permission as well as the relevant publication-channel choice. Choosing a testimonial colour does not grant permission to publish.
We review submissions before any publication. We will not publish your private email address as part of a testimonial. If you withdraw publication consent, we will stop future use and remove content under our control where reasonably possible. Printed materials already distributed and copies shared by others may not be fully retrievable.
6. How long do we keep reviews?
Unpublished feedback: We aim to delete or irreversibly anonymise unpublished review records and associated photographs within 12 months of submission, unless a documented legal or other valid reason requires a longer period.
Published testimonials: We retain authorised material while it remains relevant to the stated publication purpose, review its continued use periodically, and respond to valid withdrawal or erasure requests. Related consent records may need to be kept for an appropriate period to demonstrate compliance.
Operational note: A documented, tested deletion schedule must be put in place before public launch. The Phase A package does not automatically enforce deletion on the live server.
7. Where is your information stored and who can access it?
Review records and uploaded photographs are intended to be stored in restricted-access storage on our hosting service, separate from the public website directory. Access should be limited to authorised staff and service providers who need it for the purposes above. Our hosting and email providers may process data on our behalf under appropriate arrangements.
We do not sell review information. We do not share it publicly without the relevant publication permission. Before launch, we must verify hosting access controls, supplier arrangements, security measures and any international transfers.
8. Your rights and how to contact us
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to certain uses of your information, and to withdraw consent where processing relies on it. Email reviews@werx.group with your request. We may need to verify your identity before acting.
You can also raise a concern with the UK Information Commissioner's Office (ICO) at ico.org.uk.
9. Changes to this notice
We may update this notice as our review service or legal requirements change. The date and version at the top of the page will show when it was last revised.