Privacy rules and sending review invitations

In order to be able to inform consumers about the quality of your web store you can invite your customers to leave a review about your web store.

The Trustprofile review system provides two options to invite your customers:

• By email after a completed order.
• Pop-up after purchase at “thank you” page. This is our privacy first review option: order data will only be shared after permission of the customer.

In order to send the invitation, we process the following personal data: name and email address of the consumer. Optionally, the consumer’s phone number and ordered products can also be processed, e.g. to send a mobile invitation and/or collect product reviews.

The General Data Protection Regulation (GDPR) requires you to inform customers about sharing personal information with us before sending a review invitation. If you have chosen to send review invitations after a completed order, you can inform your customers by including the following text in your privacy policy:

We collect reviews through the platform of Trustprofile. If you leave a review through Trustprofile you are required to provide a name and email address. Trustprofile shares this information with us so that we can link the review to your order. Trustprofile also publishes your name on its own website. In some cases Trustprofile can contact you to give an explanation of your review. If we invite you to leave a review we will share your name and email address with Trustprofile. They use this information for the sole purpose of inviting you to leave a review. Trustprofile has taken appropriate technical and organizational measures to protect your personal data. Trustprofile reserves the right to make use of third parties for the purpose of providing the service. All the above mentioned guarantees concerning the protection of your personal data are also applicable to the parts of the service for which Trustprofile engages third parties.

If you use our privacy first review option, you do not need to add text to your privacy policy because the client is asked for specific consent before any privacy data is shared with Trustprofile.