Last updated: 21 July 2026
1. Introduction
This Privacy Policy explains how Flip The Review Ltd, company number 16755813, registered office 4 Washbrook Road, Portsmouth, England, PO6 3SA ("we", "us", "our") collects, uses, shares, and protects personal data relating to members, Clients, and visitors to our website and Member Portal, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For the purposes of data protection law, Flip The Review is the "controller" of the personal data described in this policy. If you have any questions about this policy or how we handle your data, contact us at customerservice@flipthereview.com.
This policy covers two groups of people whose data we handle: our members, and the Clients that members submit Reviews about. Clients are not members and do not interact with the platform directly, but because Reviews contain personal data about them, this policy explains how their information is handled too.
2. Information we collect about members
When you visit our website, apply for membership, or use the Member Portal, we may collect the following categories of personal data about you as a member:
- identity information: your name and date of birth (for identity verification purposes);
- business information: business name, trade or business type, and business address, where provided;
- contact information: email address, telephone number, and residential or business address;
- account information: your password (stored in encrypted form), membership status, and payment status;
- survey and health check data: your responses to our Annual Trade Industry Health Check;
- content you submit: Reviews about Clients, enquiries submitted through the Member Portal, and any correspondence you send us;
- technical and usage data: anonymous or pseudonymised data about how you use the website and Member Portal, including pages visited and features used, collected to help us understand usage and improve the platform;
- payment status information from our payment provider (but not your full card details, which are held by the payment provider itself).
3. Information we collect about Clients
Where a member submits a Review about a Client, we will hold the information contained in that Review, which may include the Client's name and other details relevant to the member's experience of working for them. Members are required, under our Membership Terms, to keep this to the minimum necessary and relevant, and not to include excessive personal information such as a full home address unless genuinely necessary.
We collect this information from the member submitting the Review, not from the Client directly. Because of this, Clients will not normally be told at the time a Review is submitted that their information has been recorded. We address the fairness of this in paragraph 5 below.
4. How we use information and our legal basis
We use members' personal data, and rely on the legal bases set out below, as follows:
- to create and administer your membership, verify your identity, and process payments, necessary for the performance of our contract with you;
- to send you service-related communications, such as updates to the Member Portal, changes to Content, and matters affecting your membership, billing, or account, necessary for the performance of our contract with you and our legitimate interest in keeping members properly informed; you cannot opt out of these communications while your membership is active, as they are necessary for us to operate the service;
- where you have given consent, to send you marketing communications about offers, promotions, and updates from us and from our Trusted Partner Network, based on your consent, which you may withdraw at any time by clicking unsubscribe in any marketing email or by contacting us;
- to hold Reviews on record and disclose the text of a Review privately to another member who makes a specific request about a specific Client, without disclosing the Client's name, address, or other personal identifying details held on our systems as part of that disclosure, based on our legitimate interest, and that of our members, in helping tradespeople make informed decisions about prospective clients, balanced against the interests and rights of the Client concerned;
- to analyse anonymous or pseudonymised usage data to understand how the platform is used and to improve our services, based on our legitimate interest in developing and improving the platform;
- to detect, investigate, and prevent fraud, misuse of the platform, or breaches of our Membership Terms, based on our legitimate interest in protecting the platform and its members;
- to comply with our legal and regulatory obligations, including obligations relating to tax, accounting, and responding to lawful requests from authorities
Where we rely on legitimate interests as our legal basis, in particular for holding and disclosing Reviews about Clients, we have considered this against the potential impact on Clients, and have limited disclosure to what is reasonably necessary, restricted access to members who make a specific request, and given Clients the ability to query or challenge a Review, as set out below.
5. Reviews about Clients: fairness and transparency
Because Reviews contain personal data about Clients that is collected from someone else (the member), rather than from the Client, UK GDPR generally expects Clients to be made aware that their data may be processed in this way. In practice, we address this by:
- only disclosing the text of the Review itself to another member who has made a specific request about a specific, named Client, and withholding the Client's name, address, and other personal identifying details held on our systems from that disclosure;
- declining to disclose, or editing, a Review where its wording would still reasonably identify the Client despite the removal of their name and other details;
- only disclosing Reviews privately in response to a specific request, Reviews are not published or made searchable generally;
- allowing a Client who becomes aware that a Review concerning them exists to contact us to see what is held about them, query its accuracy, and ask for it to be corrected or removed, using the rights set out in paragraph 9 below;
- periodically reviewing older Reviews and removing or restricting those that are no longer relevant.
6. Sharing information
We do not sell personal data to third parties. We may share personal data with the following categories of recipient, only where necessary and proportionate to do so:
- our payment provider, Stripe, to process membership payments;
- IT, hosting, and technical support providers who help us operate the website and Member Portal;
● another member, but only in relation to a specific Client Review, and only where that member has made a specific request in accordance with our Membership Terms; - Trusted Partner Network members, but only where a member has specifically requested, or agreed to, an introduction to that partner, and only to the extent necessary to make that introduction;
- professional advisers, such as our accountants or legal advisers, where necessary for their advice to us;
- regulators, law enforcement, or other authorities, where we are required or permitted to do so by law;
- a buyer or successor, if we sell or restructure our business, subject to that party agreeing to handle data in accordance with this policy.
Where any of our service providers are located outside the United Kingdom, we will ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or an assessment of the destination country's data protection standards, before any such transfer takes place.
7. How long we keep information
We retain members' membership and account data for as long as they remain a member, and for 12 months afterwards, to allow us to deal with any queries, disputes, or legal obligations that may arise after membership ends, and for our accounting and tax records.
We retain Reviews about Clients for 10 years from submission, after which they are automatically deleted or reviewed for continued relevance, unless a Client requests earlier removal or correction under paragraph 9, or unless we reasonably need to retain a Review for longer to deal with an ongoing dispute or legal claim.
Annual Trade Industry Health Check responses and enquiry records are retained for 10 years to allow us to track trends over time and respond to any follow-up queries, after which they are deleted or anonymised.
8. Keeping information secure
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including storing passwords in encrypted form, restricting access to Reviews to the private request process described above, and restricting access to personal data generally to those who need it to perform their role. No system can be guaranteed to be completely secure, but we review our security measures periodically and take prompt action to address any issues identified.
9. Rights of members and Clients
Under UK data protection law, both members and Clients have the right to: request access to the personal data we hold about them; request that inaccurate data be corrected; request that their data be deleted, in certain circumstances; object to or request that we restrict certain processing, including processing based on our legitimate interests; request that their data be provided to them, or transferred to another organisation, in a structured, commonly used, machine-readable format (for members, in relation to their own account data); and, where relevant, withdraw consent at any time (for example, for marketing communications), without affecting the lawfulness of processing before consent was withdrawn.
A Client who becomes aware that a Review concerning them exists may in particular ask us what information we hold, request that it be corrected if inaccurate, or object to it being held or disclosed, we will consider any such request in accordance with our Membership Terms and this policy, balancing the Client's rights against the legitimate interest of members in sharing genuine, relevant experiences.
To exercise any of these rights, contact us at customerservice@flipthereview.com. We will respond within one month, save where the request is complex, in which case we may extend this by a further two months and will explain why.
Members and Clients also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, or by telephone on 0303 123 1113, if they believe we have not handled personal data properly. We would, however, welcome the opportunity to address any concerns directly in the first instance.
10. Cookies and similar technologies
Our website and Member Portal may use cookies and similar technologies to enable core site functionality, keep you securely logged in, and collect anonymous or pseudonymised usage data to help us understand how the platform is used.
11. Children
Our services are intended for tradespeople and businesses and are not directed at children. We do not knowingly collect personal data from anyone under the age of 18, whether as a member or as a Client named in a Review.
12. Changes to this policy
We may update this policy from time to time to reflect changes in our practices, our services, or legal requirements. Where we make material changes, we will notify members by email in advance of the changes taking effect. The "last updated" date at the top of this policy shows when it was last revised.
13. Contact
Questions about this policy, or requests relating to personal data, can be sent to customerservice@flipthereview.com.