Privacy Policy

DriveMoreReviews.com is operated by W W Media, registered in England and Wales. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, W W Media is the data controller.

If you have any questions about this policy or how we handle your data, contact us at support@drivemorereviews.com.

Business owners (our direct customers):

• Full name and email address (for account creation and login)
• Business name, address, and Google Place ID (for review link generation)
• Phone number (for SMS notification delivery)
• Billing information (processed securely by Stripe — we do not store card details)

End customers of our users:

• First name
• Mobile phone number
• Whether they opened Google’s review page from our link, and when. We cannot see whether they wrote a review, what it said, or what rating they gave.
• Any private message they choose to send the business through the review page, and when they sent it. This is free text written by the customer, so it may contain whatever they choose to include.

Links in our review-request texts use the certifyreviews.com domain, which we also operate; it simply forwards to drivemorereviews.com.

Beyond the above we do not collect or store personally identifiable information about end customers. No email addresses, surnames, postal addresses, or payment details are held for these individuals.

Who sees a private message. Only the business the customer was writing to. It is shown in that business’s own dashboard and emailed to that business. It is never published, never shown to another business, and never sent to Google. We do not use it for marketing. Staff access is limited to what is needed to operate and support the platform.

How long we keep it. A private message is part of the review request it belongs to, so it follows the same 24-month rule as the rest of that record, in section 5 below.

• Delivering SMS review requests — on behalf of business owners, we send personalised SMS messages to their customers inviting them to leave a Google review.
• Processing payments — subscription billing and one-off charges are handled by Stripe. We pass only the minimum data required to process transactions.
• Transactional emails — account confirmations, password resets, and feedback notifications are sent via Resend.
• Business lookup — we use the Google Places API to verify business details and generate accurate review links.
• The free review link generator — when you search on our Google review link generator, the text you type is sent to Google's Places API to find the listing. We do not store your search, the business you choose or its Google place ID. So that the tool cannot be scripted, we keep a one-way hash of your IP address and the time of each lookup for 48 hours, and nothing else. No account and no personal details are needed to use it.
• SMS personalisation — we use OpenAI to generate personalised SMS message text. Only the customer's first name and business name are shared for this purpose.

Business owners:

• Contract performance (Article 6(1)(b)) — processing is necessary to provide the service you have signed up for.
• Legitimate interests (Article 6(1)(f)) — account security, fraud prevention, and service improvement.

End customers:

• Legitimate interests (Article 6(1)(f)) — the SMS review request is sent by the business owner who has an existing customer relationship and has collected the customer's contact details as part of normal business operations. DriveMoreReviews acts as a data processor on behalf of the business owner (the data controller) for this purpose.

We keep personal data only for as long as the rules below say, and the deletion is performed automatically by the platform every day. The same rules appear in our Terms of Service (section 10) and, for the businesses we find on public listings, in our prospect privacy notice.

• Customer contact records, review requests and any private message a customer sent the business — Kept for 24 months after the last review request we sent to that customer (or from the date they were added, if we never sent one), then deleted automatically.
• List-upload contacts — Kept for 24 months after the message was sent (or from the upload, if it never was), then deleted automatically.
• SMS delivery logs — The number, time, delivery status and text of each message: kept for 24 months, then deleted automatically. The record of an opt-out is the exception below.
• Opt-out records — Where someone has opted out, we keep the minimum record needed to keep honouring that opt-out - the phone number, the fact they opted out and when - indefinitely, for as long as we operate. Deleting it would mean texting someone who told us to stop. This is a deliberate legitimate-interest retention, not an oversight.
• Prospect records - businesses we found on public Google listings and their own websites, and may contact — If we contact your business about DriveMoreReviews and you don't reply or sign up, we delete your details 12 months after our last contact. You can ask us to delete your details at any time and we will. If you ask us not to contact you again, we keep only your number on our do-not-contact list so we never message you again.
• Do-not-contact list — Kept indefinitely, for the same reason as opt-outs: it is how we make sure we never contact someone who asked us not to.
• Business owner accounts — Kept for the life of the account. When an account is closed, its customer records and review requests are removed within 30 days; opt-out records are kept as above.

Why these periods: 24 months covers the time within which a customer might raise a question about a message they received, or a business might need to show one was sent lawfully. Opt-out and do-not-contact records are the one exception, for the reason given above.

We share data with the following third-party service providers, each of whom processes data on our behalf under appropriate data processing agreements:

Any recipient of an SMS review request can reply STOP at any time. Opt-out is immediate and permanent for that business. The recipient will not receive any further messages from that business via our platform.

Opt-out preferences are stored at the carrier level and enforced automatically. No action is required from the business owner.

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data (“right to be forgotten”)
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email support@drivemorereviews.com. We will respond within 30 days.

W W Media is registered with the Information Commissioner's Office (ICO) as required under UK GDPR. Our ICO registration number is ZC105203.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint.

DriveMoreReviews uses session cookies for authentication only. These cookies are strictly necessary for the service to function and are exempt from consent requirements under the Privacy and Electronic Communications Regulations (PECR).

On our sign-in and sign-up pages, Google's “Sign in with Google” button sets a cookie called g_state. Google uses it to remember your choices for that button. It is not used for analytics or advertising.

We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.