Privacy Policy

reacquired.com ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, the legal bases on which we rely, and the rights you have over your data. This policy applies to our website, marketing pages, and the review-management services we provide to businesses.

1. Information we collect

• Account data: name, business name, email, password hash, billing details.
• Customer contact data uploaded by business users: names, email addresses, phone numbers, transaction context. This data is processed on behalf of the business under a Data Processing Agreement.
• Usage data: pages viewed, features used, device/browser info, IP address, approximate location.
• Cookies and similar technologies for authentication, security, preferences, and analytics. See our Cookie Policy.

2. How we use information

• Provide, operate, and improve the service.
• Send transactional emails (account, billing, security).
• Send review request SMS / email on behalf of the business customer.
• Detect fraud, abuse, and protect the security of the service.
• Meet legal and regulatory obligations.

3. Legal bases (GDPR / UK GDPR)

Contract performance, our legitimate interests in running and improving the service, your consent (where required, e.g., marketing), and compliance with legal obligations.

4. Sharing

We do not sell personal information. We share data with sub-processors strictly to provide the service (cloud hosting, email/SMS delivery, payment processing, analytics). A current list is available on request.

5. International transfers

Where data is transferred outside your region, we rely on Standard Contractual Clauses or equivalent safeguards.

6. Retention

We keep personal data only as long as necessary for the purposes set out above, or as required by law. Customer contact data uploaded by business users is deleted within 30 days of account closure.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, portability, restriction, or objection regarding your personal data, and withdraw consent. Contact us at privacy@reacquired.com. You also have the right to lodge a complaint with your local data protection authority.

8. Security

We use TLS in transit, encryption at rest, least-privilege access controls, and regular security reviews. No system is 100% secure; we encourage you to use a strong unique password and enable available account protections.

9. Children

The service is not directed to children under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy; material changes will be notified by email or in-app.

11. Contact

reacquired.com — privacy@reacquired.com