How we handle your data. Plain English — no fine print games.
CREATE Reviews is a product operated by CREATE, run as a sole trader from Tiverton, Devon, United Kingdom. References to "we", "us" and "our" mean CREATE Reviews. References to "you" mean a website visitor, customer, or recipient of a review invitation sent via the CREATE Reviews platform.
Data Controller details:
CREATE Reviews is a business-to-business service. We do not provide services directly to consumers, and we rely on the Data Protection (Charges and Information) Regulations 2018 exemptions accordingly. We still adhere fully to UK GDPR for any personal data we do process.
We collect personal data in three ways:
Under UK GDPR, we rely on:
We do not sell your personal data. We share it only with:
We keep enquiry data for up to 24 months unless you become a customer, in which case data is retained for the duration of the contract plus 6 years for accounting purposes. Cookie-based analytics is typically retained for up to 14 months. You can request earlier deletion at any time.
Under UK GDPR you have the right to:
To exercise any right, email hello@createreviews.uk. We respond within 30 days.
This website uses essential cookies (required for the site to work) and optional analytics cookies (only set if you accept them via the cookie banner). We do not run ad-tracking or third-party marketing pixels by default. Full details, including a table of cookies and how to control them, are in our Cookie Policy.
Where data is transferred outside the UK (for example, to a US-based hosting provider), we rely on UK-approved transfer mechanisms such as the UK Addendum to the EU Standard Contractual Clauses or adequacy decisions issued by the UK Government.
We use industry-standard security measures — HTTPS, encrypted database storage, restricted access controls and routine review of providers. No system is perfect; we promise to respond promptly and openly to any incident, and to notify the ICO and affected individuals where required by law.
CREATE Reviews is a B2B service intended for businesses and adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we'll delete it.
We send marketing emails only to those who have opted in or are existing customers (in line with PECR's "soft opt-in"). Every marketing email contains an unsubscribe link, and you can opt out any time by emailing hello@createreviews.uk.
We may update this policy from time to time. The "Effective" date at the top reflects the latest revision. Material changes are flagged on this page.
If you're unhappy with how we handle your data, please contact us first — we want to put it right. You also have the right to complain directly to the UK supervisory authority, the Information Commissioner's Office: ico.org.uk · 0303 123 1113.
Questions, requests, or complaints: hello@createreviews.uk · +44 33 33 44 88 33