Privacy Policy
Last updated: 19 October 2026
1.Who we are
Quiet Review is run by its owner as a sole proprietor in South Africa.
- Address: Aspen Hills Office Park, Johannesburg South
- Email: privacy@quietreview.com
- Information Officer: the owner of Quiet Review, privacy@quietreview.com
2.Two roles, and why it matters
If you are a business using Quiet Review, you ask us about partnering or an Enterprise plan, you are one of our partners, or a partner has referred your business to us, we are the responsible party for your information — your name, email, business details and settings, what you send us in a partnership or Enterprise enquiry, your details as a partner, or what a partner gives us about your business. We decide how it is processed, and this policy explains how.
If you are a customer who left feedback for a business, that business is the responsible party for your feedback. They decide how it is used; we hold it on their behalf. Contact them directly, or email us at privacy@quietreview.com and we will pass your request to them.
3.What we collect
From businesses using the Service
- Name, email address and mobile number
- Business name, Google review link and Google place identifier
- The type of business you choose at sign-up, and the business category Google lists for your listing
- Your listing’s public Google rating and review count, read when you sign up and when we prepare a results report for you — figures about your business, not about a person
- Configuration settings — routing preferences, brand colours, custom headline, notification addresses
- Any banner image you upload
- Your quotes, any request you make to add locations or review links, the invoices we issue you, and the payments you make against them
- If you sign in with Google: your name, email and profile picture from Google
From customers using a review page
- The star rating given
- If voluntarily provided: a written message, and optionally a name, email address or phone number
- A randomly generated visitor identifier used only to count unique visitors. It contains no personal information and is not used for advertising or tracking across other websites.
If you email us, or ask about partnering or Enterprise
- Your email address and what you write to us
- If you message us on WhatsApp, for example to agree your price: your name, number and the messages we exchange.
- Through the partnership form: your name, email address, your business or the channel you would refer people through, and how you would refer businesses. The form sends this to our support inbox by email; it is not stored on the site.
- Through the Enterprise form: your name, email address, phone number, business or group name, number of locations, the platforms you choose, any review-page links you give us for a platform not already listed and which locations they’re for, where the links will be used, and anything else you tell us. The form sends this to our support inbox by email, and keeps a copy in our database so your enquiry can never go missing — nobody else can read that copy back through the site.
If a partner refers your business to us
- With your permission, the partner sends us, by WhatsApp or email: your business name, your Google listing, your name and contact details, and the price you discussed with them.
From our partners
- Your name and contact details
- The businesses you refer to us
- Your bank account details, so that we can pay your commission by EFT
- The commission you earn and the payouts we make to you
Automatically
- IP addresses, stored only as a salted one-way hash, used to limit abuse. We never store raw IP addresses.
- Essential cookies to keep you signed in.
Images. Any banner you upload is re-encoded before storage, which removes all embedded metadata — including GPS coordinates that phone photographs commonly carry.
Payment details. We never ask for or store card numbers. You pay invoices by EFT, and we see what our bank shows us about the payment — the amount, the date and the reference.
4.Why we process it
| Purpose | Basis |
|---|---|
| Providing the Service to your account | Performance of our contract with you |
| Preparing and sending your quote, invoicing you and recording your payments | Steps you ask us to take towards a contract, and performance of it once accepted |
| Service and security notices (sign-up, trial, quote and invoice emails, late-payment notices, password resets) | Our legitimate interests, and legal obligation |
| Limiting abuse of review pages, sign-up and our forms | Our legitimate interests |
| Storing customer feedback and showing it to the business | On that business’s instruction |
| Contact details a customer voluntarily provides | The customer’s consent, given at submission |
| Replying to partnership enquiries | Steps you ask us to take towards a partnership agreement |
| Replying to Enterprise enquiries | Steps you ask us to take towards an Enterprise agreement |
| Contacting a business a partner has referred to us, and recording which partner introduced it | The business owner’s consent, given to the partner |
| Working out partners’ commission and paying it by EFT | Performance of our agreement with the partner |
| Keeping commission and payout records | Legal obligation (tax and accounting) |
| Product update emails | Your consent — opt-in, withdrawable at any time |
5.Who we share it with
- Our bank — receives the details we need to pay partners’ commission and make refunds by EFT
- Google — in two ways: a high rating opens Google’s own review page, and we read your listing’s public rating and review count from Google. We never send Google any private feedback, contact details or account information.
We do not sell personal information.
We may disclose information where legally required, or to protect our rights or someone’s safety.
6.Where your information is stored
Our infrastructure providers process and store data outside South Africa, including in the European Union and the United States. We rely on section 72(1)(a) of POPIA: these providers are bound by contractual terms that uphold principles for lawful processing substantially similar to those required under POPIA, including on onward transfers.
7.How long we keep it
- Account and review data — while your account is active.
- After you delete your account — removed within 30 days, including uploaded images. This cannot be undone.
- Partnership enquiries — kept in our support inbox while we are in contact with you about a partnership. You can ask us to delete yours at any time.
- Enterprise enquiries — kept for 12 months after you send your enquiry, or until you ask us to delete them. You can ask us to delete yours at any time.
- Referrals from partners — kept while we follow up, and deleted once it’s clear the business won’t sign up, or sooner if you ask.
- Partners’ details — kept while you are a partner. Commission and payout records are kept as long as the law requires for tax, including after you stop being a partner.
- Abuse-prevention hashes — 30 days.
- Quotes, invoices and payment records, and other records required by law for tax or accounting — as long as the law requires, including after your account closes.
8.Your rights
Under POPIA you may:
- Ask what personal information we hold about you
- Ask us to correct information that is wrong
- Ask us to delete information we no longer have grounds to keep
- Object to processing based on our legitimate interests
- Withdraw consent where you gave it
- Complain to the Information Regulator
Email privacy@quietreview.com. We respond within a reasonable period and in any case as the law requires.
If your request concerns feedback you left for a business, we pass it to that business, since they decide what happens to it.
Information Regulator (South Africa)
POPIAComplaints@inforegulator.org.za
enquiries@inforegulator.org.za
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
9.Cookies
We use only what is necessary to run the Service:
- Session cookies in the dashboard, to keep you signed in
- A visitor identifier on review pages, to count unique visitors
We use no advertising cookies, no marketing cookies and no third-party tracking.
Most browsers allow you to block or delete cookies, though disabling essential ones will prevent you signing in.
10.Security
- Encrypted connections (HTTPS) throughout
- Authenticated access controls
- Database-level row security, so an account can only reach its own data
- Salted hashing of IP addresses instead of storing them
- Uploaded images re-encoded to strip embedded metadata
No system is perfectly secure. If a breach occurs that is likely to harm you, we will notify you and the Information Regulator as POPIA requires.
11.Children
The Service is not directed at children and we do not knowingly collect their personal information.
12.Changes
We may update this policy and will tell you by email or in the app if the changes are significant.