Legal
We've written this policy in plain English. If you have questions about anything here, email us at hello@nudgereviews.co.uk and we'll answer directly.
NudgeReviews is a service operating in the United Kingdom at nudgereviews.co.uk.
For all data-related queries, contact us at: hello@nudgereviews.co.uk
We handle two distinct categories of personal data, which are treated differently under this policy.
When you sign up for NudgeReviews, we collect:
We use this data to: provide the service, process your subscription, send monthly reports, and contact you about your account.
Legal basis: Contract performance (Article 6(1)(b) UK GDPR) — we need this data to deliver the service you've paid for.
When you submit a customer for a review request, you provide us with:
We use this data solely to send one review request message and, if there is no response, one follow-up reminder after 3 days. We do nothing else with it.
Legal basis: Legitimate interest (Article 6(1)(f) UK GDPR) — the recipient has an existing relationship with the tradesperson and a reasonable expectation of follow-up communication relating to the work carried out.
Important: As a NudgeReviews subscriber, you are the data controller for your customers' personal data. We act as your data processor. By submitting a customer, you confirm you have a legitimate business relationship with them and are entitled to contact them. Our full Data Processing Agreement is set out in our Terms & Conditions.
| Data type | Retention period | Reason |
|---|---|---|
| End customer contact details (mobile/email) | Deleted within 90 days of the review request sequence completing | No legitimate purpose after the request is sent |
| Job records (anonymised — no personal identifiers) | 12 months | Monthly reporting and trends |
| Subscriber account data | Duration of subscription + 30 days after cancellation | Active service delivery; short grace period for disputes |
| Payment and billing records | 7 years | HMRC legal requirement for financial records |
| Consent records (onboarding form submissions) | Duration of subscription + 12 months | Evidence of lawful data processing |
We do not sell personal data. We share data only with the following service providers, strictly to deliver the NudgeReviews service:
All providers are either based in the UK/EEA or operate under appropriate data transfer mechanisms (Standard Contractual Clauses).
We use a small number of cookies and similar technologies to run the site, understand how it is used, and (in future) measure the performance of our marketing.
Some technologies are essential for the site to work, for example to remember your cookie preferences. These are always on and do not require consent.
With your consent, we use Google Analytics 4 to understand which pages people visit, where visitors come from, and how the site is performing overall. GA4 sets first-party cookies (_ga and _ga_*) and processes a truncated version of your IP address.
We use Google Consent Mode v2: until you click "Accept" on the cookie banner, GA4 runs in a cookieless mode that sends only aggregated, non-identifying signals to Google. No analytics cookies are placed and no personal data is collected. If you click "Decline", that mode continues; if you click "Accept", full analytics is enabled.
If you accept analytics cookies, we may also use Google Ads conversion tracking and remarketing to measure the performance of any advertising we run and to show relevant ads on other websites. This uses cookies set by Google (_gcl_*, NID) and similar identifiers. If you decline, no advertising data is collected.
You can change your cookie choice at any time by clearing the nr-cookie-consent entry in your browser's storage for this site, or by clearing your cookies and reloading the page — the banner will appear again. You can also block cookies entirely through your browser settings, and you can opt out of Google Analytics across all sites by installing the Google Analytics Opt-out Browser Add-on.
Lawful basis: consent (UK GDPR Article 6(1)(a)) for analytics and advertising; legitimate interests for strictly necessary technologies. The data controller for Google Analytics and Google Ads data is Google LLC; their privacy policy is available at policies.google.com/privacy.
You have the following rights regarding your personal data:
To exercise any of these rights, email hello@nudgereviews.co.uk. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
If you have received a review request message from NudgeReviews on behalf of a tradesperson and wish to:
Please email hello@nudgereviews.co.uk with your request. We will action it within 5 working days. Note that by the time of most requests, your contact details will already have been scheduled for deletion within 90 days under our standard retention policy.
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include:
In the event of a data breach that poses a risk to individuals, we will notify the ICO within 72 hours and affected individuals without undue delay.
We may update this policy from time to time. When we make material changes, we will notify active subscribers by email. The date at the top of this page always reflects the most recent version.
We're happy to answer any questions in plain English.
Email us: hello@nudgereviews.co.uk
NudgeReviews