This Privacy Policy explains how Review Acquisition, operated by Albin Fregelin (“Review Acquisition,” “we,” “us,” or “our”), collects, uses, stores, shares, and otherwise processes personal information in connection with our website, platform, and related services.
Review Acquisition is based in Sweden at Rudbecksgatan 135, Örebro, Sweden.
This Privacy Policy applies when you:
Visit reviewacquisition.com
Use the Review Acquisition platform or services
Create or maintain an account with us
Communicate with us for sales, support, or other business purposes
Connect a CRM, customer database, Google Business Profile, or other third-party service
Provide customer information to us for review request, reputation management, or related services
Review Acquisition provides review acquisition and reputation management services that help businesses request customer reviews, automate customer communications, manage reputation-related workflows, and use customer feedback to strengthen their online presence.
For questions regarding this Privacy Policy or our privacy practices, contact us at [email protected].
1. INFORMATION WE COLLECT
The information we collect depends on how you interact with Review Acquisition and which Services you use.
Information You Provide Directly
We may collect information you voluntarily provide to us, including:
Name
Business name
Email address
Phone number
Mailing or business address
Account and authentication information
Billing and subscription information
Communications with us
Information submitted through forms
Business information needed to configure the Services
Customer or contact information uploaded, imported, synchronized, or otherwise provided through the Services
Client Customer Data
Clients may provide us with information relating to their own customers (“End Customers”) for purposes such as sending review requests, customer feedback requests, notifications, and other authorized communications.
This information may include:
Customer names
Phone numbers
Email addresses
Service or transaction information
CRM records
Review-related information
Other information necessary to perform the Services
Client Responsibility for Customer Data
Clients are responsible for ensuring that any End Customer information they provide to Review Acquisition has been lawfully collected and may lawfully be used for the intended communications.
Before uploading, importing, synchronizing, or otherwise making End Customer information available to Review Acquisition, the Client represents that it has obtained all permissions, consents, and other legal authority required under applicable law to contact those individuals through SMS, email, or any other communication method being used.
Clients may be required during onboarding, account configuration, or data import to confirm that appropriate permission has been obtained.
Review Acquisition generally does not independently investigate how each Client obtained each End Customer’s contact information. We rely on the Client’s representations regarding the lawful collection and use of the data.
If an End Customer has withdrawn consent, opted out, requested not to be contacted, or otherwise may not lawfully be contacted, the Client must not provide that individual for messaging through the Services and must take reasonable steps to ensure that the individual is excluded from future communications.
Automatically Collected Information
When you access our website or Services, certain technical information may be collected automatically, such as:
IP address
Browser and device information
Operating system
Pages viewed
Login and usage activity
Referring URLs
Approximate location derived from IP address
Cookies and similar identifiers
Diagnostic and performance information
We may use this information to operate, secure, analyze, and improve the Services.
Payment Information
Payments may be processed by third-party payment processors such as Stripe.
We generally do not store complete payment card numbers. Payment processors may collect and process payment information according to their own privacy policies and terms.
2. HOW WE USE PERSONAL INFORMATION
We may process personal information to:
Provide, operate, and maintain the Services
Create and administer Client accounts
Configure review acquisition and reputation management systems
Send review requests and related communications on behalf of Clients
Process Client instructions and automated workflows
Connect and maintain CRM and third-party integrations
Provide customer support
Respond to inquiries
Send administrative and service-related communications
Process subscriptions and payments
Monitor and improve the Services
Develop new features and functionality
Prevent fraud, abuse, and unauthorized access
Maintain security and system integrity
Comply with applicable laws and legal obligations
Enforce our agreements and policies
Establish, exercise, or defend legal claims
When Review Acquisition processes End Customer information solely on behalf of a Client, the Client generally determines the purpose for which that information is used, and Review Acquisition processes it according to the Client’s instructions and the applicable agreement between Review Acquisition and the Client.
3. LEGAL BASES FOR PROCESSING
Where the General Data Protection Regulation (“GDPR”) or similar data protection laws apply, we process personal information only when we have an appropriate legal basis.
Depending on the circumstances, these bases may include:
Consent — where you have given permission for specific processing.
Performance of a contract — where processing is necessary to provide Services you have requested or fulfill our contractual obligations.
Legitimate interests — where processing is reasonably necessary for legitimate business purposes and those interests are not overridden by your rights and interests.
Legal obligations — where processing is required to comply with applicable law.
Establishment or defense of legal claims — where necessary to protect our legal rights.
Where we rely on consent, consent may generally be withdrawn at any time, subject to applicable law.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
4. CLIENTS, END CUSTOMERS, AND DATA PROCESSING
Review Acquisition may act in different privacy roles depending on the processing activity.
For information relating directly to our own website visitors, prospects, Clients, billing, support, and business operations, Review Acquisition may act as a data controller.
When we process End Customer information solely to provide Services according to a Client’s instructions, the Client generally acts as the controller or responsible business and Review Acquisition acts as a service provider or processor on the Client’s behalf.
Clients remain responsible for determining whether their collection and use of End Customer information is lawful.
Where required by applicable law, the relationship between Review Acquisition and a Client may be governed by additional data processing terms.
5. SMS, EMAIL, AND CUSTOMER COMMUNICATIONS
Review Acquisition may facilitate or send SMS messages, emails, and other electronic communications on behalf of Clients.
These communications may include:
Review requests
Review reminders
Customer feedback requests
Service-related notifications
Other communications authorized by the Client and permitted through the Services
The Client is responsible for ensuring that recipients may lawfully receive the communications requested by the Client.
SMS Opt-Out
Recipients may opt out of SMS communications by replying STOP to an applicable message.
Additional instructions, including HELP, may be provided where required or appropriate.
Message and data rates may apply depending on the recipient’s carrier and mobile plan.
Clients must honor opt-out requests and must not intentionally re-add or re-contact individuals who have withdrawn consent or requested not to receive further communications, except where otherwise permitted by applicable law.
Mobile Opt-In Information
Mobile phone numbers and SMS opt-in information collected or processed through the Services will not be sold or shared with third parties for those third parties’ independent marketing or promotional purposes.
Information may, however, be provided to service providers and telecommunications partners when necessary to deliver and operate the messaging Services.
6. WHEN AND WITH WHOM WE SHARE INFORMATION
We may disclose personal information to service providers and business partners that assist us in operating the Services.
These may include:
Cloud hosting providers
CRM and automation platforms
GoHighLevel and related service providers
SMS and telecommunications providers
Email delivery providers
Payment processors
Analytics providers
Authentication and security providers
Customer support systems
Artificial intelligence service providers
Professional advisers
Other technology providers necessary to deliver the Services
These providers may process information only as permitted by their agreements with us and applicable law.
We may also disclose information:
To comply with legal obligations or lawful requests
To protect our rights, property, users, Clients, or others
To investigate fraud, abuse, security incidents, or unlawful conduct
In connection with a merger, acquisition, restructuring, financing, or sale of all or part of our business
We do not sell End Customer contact lists as a business model.
7. THIRD-PARTY PLATFORMS AND INTEGRATIONS
The Services may integrate with third-party platforms such as:
CRM systems
Google Business Profile
Review platforms
Social media platforms
GoHighLevel
Payment providers
Email and SMS providers
Third-party services operate independently and are governed by their own terms and privacy practices.
Review Acquisition does not control the operation of third-party platforms and cannot guarantee the continued availability, functionality, visibility, or permanence of information hosted by those services.
For example, third-party review platforms may modify, filter, restrict, or remove reviews according to their own policies.
8. INTERNATIONAL DATA TRANSFERS
Review Acquisition is based in Sweden, but some of the technology providers used to deliver the Services may operate or store information outside Sweden or the European Economic Area (“EEA”), including in the United States.
Where required by applicable data protection law, we take reasonable steps to ensure that international transfers of personal information are supported by an appropriate legal mechanism or safeguard.
Clients acknowledge that providing Services involving international technology providers may require personal information to be processed in multiple countries.
9. COOKIES AND TRACKING TECHNOLOGIES
We may use cookies and similar technologies to:
Maintain website and platform functionality
Authenticate users
Protect accounts and systems
Remember preferences
Understand how visitors use our Services
Measure website performance
Improve user experience
Where required by applicable law, non-essential cookies or similar technologies will be used only with appropriate consent.
Browser settings may allow users to control or disable certain cookies, although doing so may affect functionality.
10. ARTIFICIAL INTELLIGENCE
Certain current or future features of the Services may use artificial intelligence or machine-learning technologies provided by us or third-party service providers.
Such features may assist with activities such as:
Drafting communications
Responding to reviews
Analyzing feedback
Generating content
Automating workflows
Improving service functionality
Where personal information is processed through AI-enabled features, we will process that information in accordance with this Privacy Policy and applicable law.
We do not guarantee that AI-generated outputs will always be complete, accurate, or appropriate. Clients remain responsible for reviewing and appropriately using outputs generated for their business.
11. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:
Provide and maintain the Services
Maintain Client accounts
Preserve business and transaction records
Comply with legal obligations
Resolve disputes
Enforce agreements
Protect against fraud and abuse
Information may remain temporarily in backups, archives, security logs, or other systems after deletion from active systems.
Where we process personal information solely on behalf of a Client, retention and deletion may also depend on the Client’s instructions and applicable data-processing obligations.
12. DATA SECURITY
We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse.
These measures may include:
Access controls
Authentication safeguards
Secure infrastructure
Encryption where appropriate
Restricted administrative access
Monitoring and security practices
However, no electronic transmission, storage system, or online service can be guaranteed to be completely secure.
13. CHILDREN'S PRIVACY
The Services are intended for businesses and individuals who are at least 18 years old.
We do not knowingly solicit or collect personal information directly from children through our Services.
If we become aware that personal information has been collected from a child in circumstances where such processing is not permitted, we will take reasonable steps to delete the information.
14. YOUR PRIVACY RIGHTS
Depending on where you live and which privacy laws apply, you may have rights regarding your personal information, including the right to:
Request access to personal information
Request correction of inaccurate information
Request deletion of personal information
Request restriction of certain processing
Object to certain processing
Withdraw consent where processing is based on consent
Request data portability where applicable
Lodge a complaint with an appropriate data protection authority
Certain rights may be subject to exceptions or limitations under applicable law.
We may request reasonable information to verify your identity before processing a privacy request.
Where Review Acquisition processes information solely on behalf of one of our Clients, we may refer the request to the relevant Client or assist that Client in responding.
15. UNITED STATES PRIVACY RIGHTS
Residents of certain U.S. states may have additional rights under applicable state privacy laws.
Depending on the law and circumstances, those rights may include:
Accessing personal information
Correcting inaccurate personal information
Requesting deletion
Obtaining a copy of personal information
Opting out of certain types of data processing
Appealing certain privacy-request decisions
Review Acquisition will respond to valid requests as required by applicable law.
16. DO NOT TRACK
Some browsers offer a “Do Not Track” (“DNT”) setting.
Because there is not currently a universally accepted technical standard governing DNT signals, our Services may not respond to all DNT signals.
Where applicable law requires recognition of a particular browser-based privacy preference signal, we will endeavor to comply with that requirement.
17. BUSINESS RESULTS, TESTIMONIALS, AND CASE STUDIES
We may use business-related information from Clients for legitimate promotional purposes, including:
Client business name
Business logo
Publicly available reviews
Testimonials provided to us
General or aggregated performance results
Review-growth results
Non-sensitive descriptions of how the Client uses the Services
Such information may appear in case studies, presentations, advertisements, social media content, website materials, or other marketing materials.
Clients who do not want their business included in future marketing materials may contact us at [email protected].
We will make reasonable efforts to honor such requests for future use.
18. UPDATES TO THIS PRIVACY POLICY
We may revise this Privacy Policy from time to time to reflect changes in our Services, business practices, legal obligations, or technology.
When changes are made, the “Last Updated” date at the top of this Privacy Policy will be revised.
Material changes may also be communicated through the Services, by email, or through another reasonable method where appropriate.
19. CONTACT US
Questions, concerns, or privacy requests may be directed to:
Review Acquisition Albin Fregelin Rudbecksgatan 135 Örebro, Sweden
You may contact us to request access to, correction of, or deletion of personal information that Review Acquisition controls.
For security purposes, we may verify your identity and authority before fulfilling a request.
Where information is controlled by one of our Clients and Review Acquisition processes that information only on the Client’s behalf, requests may need to be handled by the relevant Client.
