Privacy policy

This policy is provided by SpillHosting AS (“we”). Contact us at hello@reviewfolk.com about anything on this page.

When you write a review

• Your email address, to confirm the review is yours and to send you a link for editing or deleting it. It’s never shown publicly and companies can’t see it.
• Your display name, rating and review text, which are public once you confirm.
• A one-way hash of your IP address, used only to limit how many reviews can be posted from one connection. We can’t turn it back into your IP address.

The legal basis is our legitimate interest in running a review platform that people can trust (GDPR Article 6(1)(f)), and your consent when you choose to publish a review.

When you claim a company

We store your work email address and which companies you manage, and set one cookie that keeps you signed in for 30 days.

Cookies and storage

• One sign-in cookie, only if you sign in as a business.
• Your browser keeps your review draft and a list of reviews you wrote (so you can see them before confirming). This stays on your device.
• No advertising or analytics cookies. Our review widgets on other websites don’t set cookies either.

Who else handles your data

We use an email provider to send confirmation and sign-in emails, and a hosting provider to run the site. They process data only on our behalf.

How long we keep it

• Unconfirmed reviews and their email addresses: deleted after 7 days.
• Published reviews: until you delete them, or we remove them under our guidelines.
• Database backups: kept for about 7 days, then deleted.

Your rights

You can edit or delete any review yourself with the link in your confirmation email. You can also ask us for a copy of your data, to correct it or to delete it, by emailing hello@reviewfolk.com. If you’re in the EU or EEA, you can complain to your data protection authority: in Norway the Datatilsynet, in Sweden the Integritetsskyddsmyndigheten (IMY), in Denmark the Datatilsynet.