Privacy Policy

Last updated: 21 October 2026

This Privacy Policy explains how Hedgehog Services, operating as Review Hedgehog ("Review Hedgehog", "we", "us"), a British Columbia business, collects, uses and protects personal information through reviewhedgehog.co.uk (the "Website"), our Review Hedgehog app and Pro subscription (the "App"), and our NFC + QR review signs (the "Signs"). We are based in British Columbia, Canada. For customers in the United Kingdom, we handle personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). We are the controller of the personal data described in this policy.

1. Information we collect

• Contact and support forms: your name, business name, phone number, email address, your message, and whether you agreed to receive text messages.
• App accounts: your name, email, business name and locations, sign activation details, and the Google Business Profile information you connect so the App can show and reply to your reviews.
• Usage information: pages visited, device and browser type, IP address, approximate location, and sign tap or scan counts, collected through cookies and similar tools.
• Purchases: Signs are sold on Amazon.co.uk. Amazon processes your order and payment under its own privacy notice. We do not receive your full payment details.

People who tap or scan a Sign to leave a review do not need to download anything or create an account with us. Their review is posted on Google and is governed by Google's terms and privacy policy.

2. How we use your information

• To activate Signs, provide the App and Pro features (such as review alerts, AI review replies and the website widget), and run your account.
• To answer support requests and contact you about your account, orders or services you asked for.
• To send transactional text messages and emails you have agreed to receive.
• To improve the Website, App and Signs, prevent fraud, and keep our services secure.
• To meet legal, tax and accounting obligations.

We do not sell your personal information.

Our legal bases

Under UK GDPR we rely on: contract (to provide the App, Signs and support you asked for); legitimate interests (to run, secure and improve our services, where those interests are not overridden by your rights); consent (for marketing messages and non-essential cookies, which you can withdraw at any time); and legal obligation (for tax, accounting and legal requirements).

3. Text messages

If you check the consent box on our forms, we may text you about your account, orders, support requests or services you requested. Message frequency varies. Your mobile network may charge for messages. Reply STOP to opt out at any time. Consent to texts is not a condition of buying anything. We do not share your mobile number or text consent with third parties for their marketing.

4. Who we share information with

We share personal information only with service providers that help us run our business, and only as needed for them to do so. These include our website, form and CRM platform, hosting and email/SMS providers, Google (when you connect your Business Profile), AI service providers that draft review replies for Pro users, analytics providers, and Amazon for Sign orders. We may also share information if required by law or as part of a sale or reorganization of our business.

5. Where information is stored

Your information may be stored or processed in Canada, the United States or other countries outside the UK where we or our service providers operate. Canada is recognised by the UK as providing adequate protection for commercial organisations. For other transfers we use appropriate safeguards, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses or the UK-US Data Bridge, where available.

6. Cookies

The Website uses cookies and similar technologies to keep it working, remember preferences, and understand how visitors use it (for example, Google Analytics). Strictly necessary cookies are used to make the Website work. Where required by PECR, we ask for your consent before setting analytics or other non-essential cookies. You can also block or delete cookies in your browser settings, though some features may not work properly.

7. How long we keep information

We keep personal information only as long as needed for the purposes above, or as required by law. When it is no longer needed, we delete or anonymize it.

8. Security

We use reasonable administrative, technical and physical safeguards to protect personal information. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

9. Your choices and rights

Under UK GDPR you have the right to access your personal data, have it corrected or erased, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time where we rely on consent. Email us at the address below and we will respond within one month, as required by law. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to help first.

10. Children

Our services are meant for businesses and are not directed to children. We do not knowingly collect personal data from children under 13, or from anyone under 18 without a parent or guardian's consent.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it last changed. Significant changes will be posted on this page.

12. Contact us

Privacy questions or requests: [email protected]
Hedgehog Services (Review Hedgehog), British Columbia, Canada