PRIVACY POLICY

Last updated: August 2026

We take the protection of your data very seriously. In the following, we explain what information we collect when you use our website and services, and how it is used.

What is Personal Data?

Personal Data is any information about personal or factual circumstances that relate to a person. This may include name, date of birth, email address, postal address or telephone number, but also online identifiers such as IP addresses or device IDs.

What is processing?

"Processing" is any operation or set of operations that is performed on Personal Data, whether or not it is done automatically. The term is broad and covers virtually any handling of data.

If you have any questions about this policy or our data protection practices, please contact us using info@reviewmax360.com or calling 321-599-1189.

To fulfil contractual obligations

(The purposes of the data processing are primarily based on the service we provide).

In connection with our legitimate interests

(Where necessary, we process your data beyond the actual performance of the contract to protect legitimate interests of us or third parties. Examples include:

• Ensuring IT security and IT operations,
• Corporate governance measures and further development of our services,
• Defence against claims by third parties and
• Enforcement of our own claims).

Based on your consent

(If you have given us your consent to process Personal Data for specific purposes).

To comply with legal obligations

(Processing to comply with our legal obligations.)

Am I obliged to provide data?

In the context of our business relationship, you are only obliged to provide Personal Data that is required for the establishment, implementation and termination of a business relationship or that we are legally obliged to collect. Without this data, we usually have to refuse to conclude a contract or can no longer fulfil an existing contract and may have to terminate it.

Data that we collect automatically

Log data

Each time you visit our website, our system automatically collects the following data from the visiting device and stores it in a so-called log file: (i) name of the file accessed, (ii) date and time of the visit, (iii) amount of data transferred, (iv) notification of successful retrieval, type of browser and version used, (v) IP address (identification of the user's device), (vi) operating system of the visiting device, (vii) Internet service provider of the visiting device, (viii) website from which you access our website, and (ix) which pages of our website you access. The legal basis for this processing is our legitimate interest.

Cookies

We use so-called cookies on our website. Cookies are pieces of information that are transmitted from our web server or third-party web servers to your web browser and stored there for later retrieval. Cookies may be small files or other types of information storage. There are different types of cookies: i) Essential Cookies. Essential cookies are cookies to provide a correct and user-friendly website; and ii) Non-essential Cookies. Non-essential Cookies are any cookies that do not fall within the definition of essential cookies, such as cookies used to analyse your behaviour on a website (“analytical” cookies) or cookies used to display advertisements to you (“advertising” cookies).

Cookie consent

Our website uses a cookie consent tool to obtain your consent to the storage of cookies and to document this consent. When you enter our website, the following Personal Data is transferred to us: a) Your consent(s) or revocation of your consent(s); b) Your IP address; c) Information about your browser; d) Information about your device; e) Time of your visit to our website. The basis for processing is our legitimate interest and your consent.

Links to other websites

Please note that if you use a link from our website to a third-party website, that third-party may also set new cookies that are not covered by this policy. In such cases, we recommend that you read the cookie policy on the third-party website itself.

Third-party services and content

We use content or service offers of third-party providers on the basis of our legitimate interests in order to integrate their content and services ("services").

This always requires that the third-party providers of this content are aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content.

Data we collect directly

Contact

The processing of Personal Data depends on the nature of your contact. In addition to your name and email address, IP address or phone number, we usually collect the context of your message, which may also contain certain Personal Data. The Personal Data collected when you contact us is used to process your request, and the legal basis is your consent.

Registration

As part of the registration process, users provide their a) Full Name; b) User Name; c) Email address; d) Password. The data provided will be used for the purposes of creating and using the account and providing and/or using our services. In the context of the use of our registration and the use of your account, the legal basis for the data processing is the fulfilment of our contractual obligations and, in individual cases, the fulfilment of our legal obligations as well as consent.

Client-Uploaded Customer Information

As part of providing our services, clients may upload or provide customer information, including customer names, email addresses, and telephone numbers. We use this information solely to provide and operate our review-management services, including sending and managing review requests, processing customer feedback, generating reports, providing client support, and maintaining the functionality and security of the service. Clients are responsible for ensuring they have the legal right to provide this information to us and that any required notices or permissions have been obtained.

When you use our services

We process the Personal Data that arises when you use our services in order to provide our contractual services. In particular, this includes our support, correspondence with you, invoicing, fulfilment of our contractual, accounting and tax obligations. Accordingly, the data is processed on the basis of the fulfilment of our contractual obligations and our legal obligations.

When we process personal information contained in customer lists or other data supplied by a client solely to provide review-management services, we generally process that information on the client’s behalf and according to the client’s instructions. For information used for our own account administration, billing, security, legal compliance, service improvement, and business operations, ReviewMax360 determines the purposes for which the information is processed.

We ensure that access by our employees to your data is only available on a need-to-know basis, and restricted to specific individuals. We use reasonable administrative, technical and organizational safeguards designed to protect personal information. We communicate our privacy and security guidelines to our employees and enforce privacy and protection safeguards strictly.

Further, please be advised that:

• Some jurisdictions may require you to disclose your use of our services as your processor in your privacy policy and/or data processing agreement as applicable.
• If you are providing us with Personal Data relating to a third party, you agree a) that you have in place all necessary appropriate consents. You agree to indemnify us in relation to all and any liabilities, penalties, fines, awards, or costs arising from your non-compliance with these requirements.
  
  ReviewMax360 does not sell client-uploaded customer personal information or use it to market ReviewMax360 services directly to those customers.

Administration, financial accounting, office organisation, contact management

We process data in the context of administrative tasks and the organisation of our business and compliance with legal obligations, such as archiving. In this context, we process the same data that we process in the provision of our contractual services. The processing bases are our legal obligations and our legitimate interest.

Payment Data and Processing

We use Stripe and/or Square to process payments, recurring subscriptions, refunds, and related transactions. When you make a payment, the applicable payment processor may collect information such as your name, email address, billing address, payment card or bank account information, transaction details, IP address, device information, and information used for fraud prevention and legal compliance.

Payment card numbers and card security codes are submitted directly to the applicable payment processor. ReviewMax360 does not store complete payment card numbers or card security codes. We may receive and retain limited billing and transaction information, such as your billing name, contact information, card brand, last four digits of your card, payment status, subscription status, transaction amount, receipts, refunds, disputes, and chargeback information.

Stripe and Square process personal information according to their respective privacy notices. We use payment-related information to process transactions, administer subscriptions, provide customer support, prevent fraud, maintain accounting and tax records, resolve disputes, and comply with legal obligations.

Marketing

If you have given us your separate consent to process your data for marketing and promotional purposes, we are entitled to contact you for these purposes through the communication channels for which you have given your consent.

You may provide your consent in a variety of ways, such as by checking a box on a form, submitting a request, or otherwise affirmatively agreeing to receive marketing communications from us, as permitted by applicable law.

Direct marketing is typically by email, but may include other less traditional or new channels. These forms of contact are managed by us or by our contracted service providers. Any direct addressed marketing sent or conducted by us or on our behalf will provide you with the opportunity to opt out or exclude yourself.

SMS and MMS Communications

Economic analyses and market research

For business reasons, we analyse the data we have on business transactions, contracts, enquiries, browsing behaviour etc., whereby the group of persons concerned may include contractual partners, interested parties, and users of our services.

The analyses are carried out for the purpose of business evaluations and market research. The analyses serve us alone and are not disclosed externally and processed using anonymous analyses with summarised and or anonymized values. Furthermore, we take the privacy of users into consideration and process the data for analysis purposes as pseudonymously as possible and, if feasible, anonymously (e.g., as summarised data).

Retention

We retain personal information for as long as reasonably necessary to provide our services, administer accounts and subscriptions, maintain required accounting and tax records, prevent fraud, resolve disputes, enforce our agreements, and comply with legal obligations. Payment credentials retained for recurring billing are stored by the applicable payment processor according to its policies; ReviewMax360 does not store complete payment card numbers or card security codes.

Rights

Subject to applicable law, you may request access to, correction of, or deletion of personal information we maintain about you, or request information concerning how we use or disclose it. You may also withdraw consent where processing is based on consent and opt out of marketing communications. Requests may be sent to info@reviewmax360.com. We may need to verify your identity before completing a request.