Privacy Policy

1. Information We Collect

Account information: When you create an account, we collect your name and email address.

Reviews: When you submit a review, we collect the review content, ratings, and any photos you upload.

Usage data: We collect anonymous analytics data about how you use our site, including pages visited and time spent.

2. How We Use Your Information

• To provide and improve our review platform
• To display your reviews publicly (with your chosen display name)
• To send you emails related to your account or review invitations
• To moderate content and prevent abuse
• To communicate with clinic owners about their profiles

3. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase — our database and authentication provider
• Vercel — our hosting provider
• Resend — our email delivery provider
• Google Analytics — for anonymous usage statistics

4. Data Retention

We retain your account data for as long as your account is active. Reviews remain published unless you delete them or request removal. You can delete your account at any time by contacting us.

5. Your Rights

Under UK GDPR, you have the right to access, correct, or delete your personal data. You can also request a copy of your data or object to processing. Contact us at reviews@review.clinic to exercise these rights.

6. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via Supabase, and row-level security on all database tables. Passwords are hashed and API keys are stored as SHA-256 hashes.

7. Contact

For privacy-related inquiries, email reviews@review.clinic.