Privacy Policy

Last updated: 8 August 2026

Five-Stars Reviews ("we", "us") is a UK review-request service operated as part of Five-Stars.com. This policy explains what personal data we handle, why, and your rights. Questions: hello@five-stars.com.

1. Data we collect about our business customers

When a business signs up we collect the account holder's name, business name, email address, password (stored hashed), review destination links, and optional personalisation details. Billing is handled by Stripe — we never see or store full card numbers.

2. Data our customers give us about their customers

Businesses using the service add their own customers' name and mobile number and/or email address so we can send a review request on the business's behalf. For this data the business is the data controller and we act as their data processor: we only use it to send the requested review invitation (and one polite reminder), to record delivery and click status, and to honour opt-outs. We never sell this data, use it for marketing, or contact these individuals for any other reason.

Received a text or email from us? It was sent at the request of a business you recently used. Reply STOP to any text, or simply ignore an email, and you will not be contacted again. Contact hello@five-stars.com to have your details removed entirely.

3. Lawful basis

We process account data to perform our contract with the business. Review-request messages are sent on the instructing business's lawful basis — our terms require businesses to only add genuine, recent customers who they may lawfully contact (UK GDPR and PECR). Messages identify the business, and every text includes a STOP opt-out that is honoured automatically.

4. Who we share data with

These providers process data only to deliver their service to us. We do not sell personal data to anyone.

5. Retention

Account data is kept while the account is active and deleted on request after closure. Customer contact details and request history are kept while the business's account is active so the business can see its own history, and are deleted when the account is deleted or on request. Opt-out records are kept so we can keep honouring them.

6. Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data, object to processing, and request portability. Email hello@five-stars.com and we will respond within one month. You can also complain to the ICO (ico.org.uk).

7. Cookies

The app uses a single strictly-necessary session cookie to keep you logged in. The marketing site sets no advertising or analytics cookies.

8. Changes

We will post any changes to this policy on this page and update the date above.