Privacy Policy
We value your privacy. This policy clarifies your privacy rights and our practices regarding your personal data.
Terms used in this policy
When we use "BXB", "we", "our", or "us" refers to BXB Group Limited, located at 71 - 75 Shelton Street, Covent Garden, London, WC2H 9JQ, which is the entity responsible for processing your personal data.
When we use "website" or "platform" it includes all BXB websites and applications.
Third-party websites
Although our platform links to external websites, it doesn't necessarily mean that we endorse them. We suggest checking their privacy policies, as they might handle personal data differently from us.
Open platform notice
Our platform is open. Reviews and your BXB profile are public. Your profile reveals your location and all your reviews. If you're a business user replying to a review, your response is public too. Your anonymity depends on the details in your profile and chosen username.
Data collection
Personal data is any information that relates to an identifiable individual. When you create a BXB user account, write a review, create a business account on behalf of your business, or otherwise use our platform, we may collect and process the following personal data about you:
Contact: Names, email addresses, or other contact information.
Device & location: IP address, browser specifics, and location.
Account information: Username, password, photo, and language preferences.
Business account info: Business details, including offered services.
Usage & profiling: Interaction history, opened marketing emails, features accessed.
Review information: Business reviewed, content, date of review, location, and reference number.
Verification: Whether you're verified, the data shared for verification.
Preferences: Account preferences, including email settings and consents.
Communication: Any communication sent to us, including timestamps.
Call recordings: Calls to/from BXB might be recorded for training, quality control and compliance purposes.
Social network connection: Connecting with platforms like Facebook shares selected details such as name and/or username, email address or profile photo.
If connecting BXB with a social network, you’ll be told which information we will collect from that social network. You can disconnect your social network profile from your BXB profile via your BXB account at any time. BXB will then remove your social network unique ID, and disconnect/revoke BXB from your social network. However, your social network profile picture will remain on your BXB profile unless you change it and we will retain your name and email address.
Avoid sharing sensitive personal details like ethnicity, religious beliefs, or health.
How we collection personal data
The personal data that we process is primarily collected directly from you when you provide your details to create an account with us or interact with or your usage and profiling information, such as your interaction with our platform or marketing emails, such as by leaving reviews or posting replies to reviews.
Sometimes we're given information about you from third parties. For example, when you sign up for a BXB account via Facebook, your account is automatically pre-filled with the information we receive from them. Similarly, when a business asks us to send a review invitation to you on their behalf, they give us your name, email address and a reference number, such as an order ID or similar.
We also generate or collect information from your computer or device automatically as you use our services — like your IP address, your location, information about the device and browser you're using to access BXB, or your usage and profiling information, such as your interaction with our platform or marketing emails.
Who is the controller of your personal data?
If you’ve been sent invitations to write reviews on BXB from businesses that use our services, or from us on their behalf, those businesses will be the data controllers responsible for those invitations and for any personal data associated with them. If you have any questions about such invitations or want to exercise your rights with regards to any data used in that context, please contact the relevant businesses directly, as we’re unable to help.
In respect to all other personal data associated with our platform, such as information you provide when you create an account, leave a review, or submit a reply, BXB Group Limited is the data controller.
Why we may use your personal data
Your data helps us:
Offer our services.
Identify returning users.
Enhance our platform.
Address your queries.
Send newsletters.
Train staff and ensure service quality.
Abide by legal and regulatory standards.
For customer accounts, we also:
Confirm genuine reviews.
Send more review invitations.
Facilitate communication between businesses and customers.
Offer feedback on review performance.
Enforce our Terms & Conditions.
For business accounts, we:
Alert about new reviews.
Ensure reply legitimacy.
Provide feedback on replies or reports.
Enforce our Terms & Conditions.
Occasionally, we use data in other specific ways.
We need to process your personal data to:
Perform our contract with you or your business.
Exercise and comply with our own legal rights and obligations and operate an online review platform in compliance with applicable legal acts.
Pursue legitimate business interests related to operating our website and providing our services to you. Where we process your personal data based on a legitimate interest we will only do so where the processing is relevant, adequate and limited to what is necessary for the purpose it was collected for. And of course, we'll always ensure our legitimate interests don't unfairly impact on your own rights and freedoms.
Establish, exercise or defend legal claims, where necessary.
In circumstances where you have expressly given your consent for us to process your personal data, for example, when subscribing to our newsletters or accepting certain cookies on your device, you are free to revoke your consent at any time, either by using the functionality provided within the appropriate product feature or by contacting us (see ‘Contact us’ below). However, please be aware that we may have the right to continue to process your information if it can be justified on one of the other legal bases mentioned above.
You have the right to object to how we process your personal data, or ask us to restrict the processing. Please see ‘Your rights’ below, for more details.
Who may access your personal data?
Your personal data on BXB
We share your reviews on our platform so that others can read about your experience with a specific business. When you write a review, other users of our platform will be able to see your username, your location (country), all reviews you’ve written, and other information you have chosen to connect with your public profile. They can also see whether you’ve marked other reviews as “useful”.
Remember that if you’ve selected to use your real name as your username, this could reveal your identity. We recommend you exercise care in deciding which information to make available on our platform, and be aware that depending on the level of information provided, you may or may not be anonymous.
If you connect to a social network, information such as your profile photo, your name, birth year and approximate location will be collected from your social network profile and used to identify you on our platform. Subject to your privacy settings and the level of information available from the social network, users of our platform can use this information to identify the reviews you have written.
If you’ve chosen to preserve anonymity by not using your name for your BXB username, be aware that information from social networks can reveal your identity in part or in full and make it possible to identify which reviews you have written.
Your personal data on BXB when you create a business account on behalf of your business
When you create a business account on behalf of your business, we will disclose your business name, business address, domain, country and other information you have chosen to connect with your business's public profile.
We recommend you exercise care in deciding which information to make available for disclosing on the website and be aware that depending on the level of information provided, you may or may not disclose personal data.
Other information provided by you on the website, including your replies to users’ reviews about your business, are also made available for other users of the website.
Your personal data shared with third-party platforms
At BXB, our priority is to increase the reach and accessibility of customer reviews. This is why we've collaborated with other platforms to showcase reviews that originate on our site, encompassing any potential responses by businesses to these reviews. Such collaborations allow for wider exposure, thus heightening the general awareness about BXB and the reviews we host.
Your reviews, coupled with your public user profile, or if you operate a business account on BXB, your responses to company reviews, might be displayed across:
Search engines like Google and Bing.
The very businesses you've reviewed on our platform.
Portals catered to customers and businesses, for instance, shopping directories, price comparison sites, etc.
Integration with partners and platform providers such as Shopify, Magento, Prestashop, and WooCommerce.
Other review platforms where BXB feels there’s relevance for users to search for reviews.
Social media platforms.
If a review you posted on BXB was in reply to a business's invite through our review invitation service, the business can link your review back to their invitation.
While we pledge not to disclose any verification documents you submit to us about your experience with a reviewed business, we might forward any reference number, order ID, or similar to the said business unless you instruct us not to.
Your personal data and data processors
We share your personal data with selected third parties (including BXB subsidiaries and other companies within the BXB group, and companies we work with to provide our services) that provide us with a variety of different services that support the technical operation of our platform and the delivery of our services ("data processors"). These third parties are data processors for the personal data for which we are the data controller. We have data processing agreements in place with the data processors, and it follows from these agreements that they must act solely in accordance with our instructions. By accepting this policy, you authorise us to instruct the data processors to process data in accordance with this policy and for the purposes of using the platform.
We carry out checks to ensure that data processors have taken reasonable technical and organisational measures to protect against the information being accidentally or illegally destroyed, becoming lost or deteriorating, and to protect against the information being disclosed to unauthorised persons, being misused, or in other ways being processed in violation of data protection laws.
Some of these data processors and third-party services will be located in countries outside of the one in which you are based and may have different, or less stringent, data protection standards. However, subject to the local laws in these countries, we will ensure that necessary safeguards are in place to protect your data, regardless of location. We do this through a combination of appropriate technical, organisational and administrative security measures, and by putting in place the necessary legal contracts to back up these requirements. For example, we will only transfer European users’ personal data outside the European Economic Area where a European Commission-approved method of validating the transfer has been put in place.
Further disclosures
Beyond the scenarios highlighted, your personal data could be shared:
In compliance with legal statutes.
To engage with government or regulatory bodies.
For upholding our terms and conditions.
To ensure our platform's security and to safeguard rights and interests.
In scenarios such as mergers, acquisitions, or asset transfers, there might be the sharing of some user data.
How long do we store your personal data?
We only keep your data for as long as we need it, or are required to for legal reasons. This depends on why it was collected, and if we have a continuing legal basis to do so (such as to fulfil a contract between us, perform a service you requested, meet legal requirements, or for our legitimate interests). When we no longer have a valid reason to keep your data, we'll either delete it or anonymize it so that it doesn't identify you. We treat data differently depending on what it's used for, but you can delete your personal data or ask us to do that for you at any time (see ‘Your rights’ below).
Personal data you provide, including your reviews, is kept for as long as you have a BXB account, or as needed to provide you with our services. If you choose to delete your user account, we will save a log with the following information: your name, email address and the date of the deletion of your account. We will keep the log for three years. In some cases, even if you delete your BXB account, we retain certain information we are required by law or have compelling legitimate interests to keep. Reasons we might retain some data for longer periods of time include (but are not limited to) security, fraud and platform abuse prevention, complying with legal or regulatory requirements, and defending our legitimate business interests.
Personal data we receive from companies that use our automated services to send a review invitation to you on their behalf is kept for three years.
Securing your data
Ensuring the security of your data remains our topmost priority. We adopt rigorous measures to safeguard your data. We periodically review our systems for potential vulnerabilities. Emails sent via the platform may not be encrypted, and we therefore advise you not to include any confidential information in your emails to us.
Cookie usage
We deploy cookies and akin technologies for offering, optimising, and personalising our services and for advertising goals. We encourage you to review our Cookie Policy for further details.
Your rights
If you've got a BXB user account, you can access, edit, download or delete the key personal data associated with your profile at any time by logging into your account. From here you can also manage your email subscription preferences.
You also have rights in relation to the personal data we have about you. These rights may be limited, for example, if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law, or have compelling legitimate interests, to keep. If you have unresolved concerns, you have the right to complain to a data protection authority such as the Information Commissioner's Office
Access and download your personal data
If you have a BXB user account, you can contact us to download information related to your account, including your reviews.
If you have a business account on BXB, or if you don’t have an account at all, you can email support@bxbapp.com and request information about your personal data.
Correction and deletion of your personal data
If any of the personal data we have about you is incorrect or misleading, if your personal data changes or if you no longer wish to appear on the platform, you can correct, edit or delete the information yourself via your BXB user account. Otherwise, you are welcome to email support@bxbapp.com requesting to correct or delete your information.
Other rights
In addition to the rights set out above concerning your personal data, you also have the right to object to the processing of your personal data, and the right to have the processing of your personal data restricted (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, for example the processing of your personal data for direct marketing purposes).
Where we have asked for your consent, you may withdraw your consent at any time. You may withdraw your consent either by using the functionality provided within the appropriate product feature or by contacting us (see ‘Contact us’ below). If you ask to withdraw your consent to BXB processing your data, this will not affect any processing which has already taken place at that time.
Children’s Data
We emphasise that our platform is not intended for children below 16, and we consciously avoid collecting their data. If you become aware that a child under the age of 16 has provided us with their personal data, please contact us using the contact information provided below.
Changes to this policy
We may change this policy from time to time. Laws, regulations, and industry standards evolve, which may make those changes necessary, or we may make changes to our services or business. We will post the changes to this page and encourage you to review our Privacy Policy to stay informed.
If we make changes that materially alter your privacy rights, we will provide additional notice, such as via email or through our platform. Your continued use of our platform or services after we publish or send a notice about the changes to the policy will mean that you accept and agree to the updated policy.
Contact us
For any questions or to exercise your rights, reach out to our Data Protection Officer at support@bxbapp.com.
For postal communications:
BXB Group Limited, 71 - 75 Shelton Street, Covent Garden, London, WC2H 9JQ Company no.: 07703178
If any grievance remains unresolved, you have further avenues to pursue, including lodging a complaint with a data protection supervisory entity such as the Information Commissioner's Office. Further details are available in our Support Center’s Privacy section.
Last updated