GDPR Compliance

1. Our role

Depending on how Bizz Reviews is used, we may act as a data controller or a data processor.

• For account, billing, website, and support data, Bizz Reviews generally acts as a controller
• For customer feedback data collected on behalf of a business, Bizz Reviews generally acts as a processor

2. Lawful bases for processing

We process personal data only when we have a lawful basis to do so.

Our lawful bases may include:

• Contract, when processing is needed to provide Bizz Reviews
• Consent, when required for certain cookies or communications
• Legitimate interests, such as security, fraud prevention, and service improvement
• Legal obligation, when we must comply with applicable laws

3. Your GDPR rights

If GDPR applies to you, you may have the right to:

• Access your personal data
• Correct inaccurate personal data
• Request deletion of personal data
• Restrict certain processing
• Object to certain processing
• Request data portability
• Withdraw consent where processing is based on consent
• File a complaint with a data protection authority

4. How to exercise your rights

To exercise privacy rights, contact us at
[email protected].

We may need to verify your identity before completing a request.

5. Business customer data

If your personal data was submitted through a business using Bizz Reviews, that business may be the data controller. In that case, we may direct your request to the business account owner.

6. Service providers and processors

We may use trusted service providers to help operate Bizz Reviews. These providers may process personal data only as needed to provide their services to us.

Providers may include hosting, payment processing, email, analytics, support, and security tools.

7. International transfers

Personal data may be processed in Canada, the United States, or other countries where our providers operate.

Where required, we use appropriate safeguards for international transfers.

8. Data retention

We keep personal data only as long as needed to provide the Service, meet legal obligations, resolve disputes, prevent fraud, and enforce agreements.

9. Security

We use reasonable safeguards to protect personal data from unauthorized access, loss, misuse, and disclosure.

No system is completely secure, but we work to protect data with practical technical and organizational measures.

10. Data Processing Agreement

Business customers who require a Data Processing Agreement may contact us at
[email protected].

11. Contact us

Questions about GDPR or privacy rights? Contact us anytime.