Privacy Policy

If you submit a review, that review may automatically be published on our Service including any Personal Data contained in that review. You can control what Personal Data (if any) is published in respect of any reviews submitted by you, and delete or amend a submitted review, by logging into your user profile on our Service.

We will only use your Personal Data when the law allows us to. Most commonly, we will use your Personal Data in the following circumstances:

• Performance of Contract. This means processing Personal Data where it is necessary for compliance with a legal obligation that we are subject to.
• Legitimate Interest. This means processing your Personal Data where it is necessary for the legitimate interests of our business (or those of a third party) in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Data for our legitimate interests. We do not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
• Comply with a legal obligation. This means processing your Personal Data where it is necessary for compliance with a legal obligation that we are subject to.
• Consent where you have given explicit opt-in consent to a particular processing activity. You have the right to withdraw consent to marketing at any time by contacting us

Change of purpose

We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your Personal Data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Retention of Data

We will only retain your Personal Data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your Personal Data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Notwithstanding the above, by law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes. In some circumstances you can ask us to delete your data (see Your legal rights below for further information) or we will anonymise your Personal Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Transfer Of Data

You consent to and acknowledge that your Personal Data may be transferred to or maintained on computers or servers located in the United States.

Many of our external third parties are based outside the UK so their processing of your Personal Data will involve a transfer of data outside the UK.

Whenever we transfer your Personal Data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data; and

Where we use certain service providers, we may use specific contracts approved for use in the UK which give Personal Data the same protection it has in the UK.

Please contact us if you want further information on the specific mechanism used by us when transferring your data.

Disclosure Of Data

We may share your Personal Data with the parties set out below for the purposes set out in the table above.

We require all third parties to respect the security of your Personal Data and to treat it in accordance with the law. We do not allow our third-party service providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with our instructions.

Business Transaction

If Judge.me Ltd is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your Personal Data in the same way as set out in this privacy policy. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Disclosure to Law Enforcement

Under certain circumstances, Judge.me Ltd may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Legal Requirements

Judge.me Ltd may disclose your Personal Data in the good faith belief that such action is necessary to:

• To comply with a legal obligation
• To protect and defend the rights or property of Judge.me Ltd
• To prevent or investigate possible wrongdoing in connection with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability

In particular, we may disclose Personal Data to HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom or United States who require reporting of processing activities in certain circumstances.

Professional advisors

Judge.me may disclose your Personal Data to professional advisers including lawyers, bankers, auditors and insurers based in the United Kingdom or the United States who provide consultancy, banking, legal, insurance and accounting services.

Performance of a contract with you

Judge.me may disclose your Personal Data to our third party platform partners including Shopify, Squarespace, WooCommerce and BigCommerce which allow us to integrate the services we provide onto your website.

Security Of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

You can read more about how we handle data securely on our Compliance Page

"Do Not Track" Signals

We do not support Do Not Track ("DNT"). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked.

You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

Your Rights

Judge.me Ltd aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

Whenever made possible, you can update your Personal Data directly within your account settings section. If you are unable to change your Personal Data, please contact us to make the required changes.

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the right:

• To access and receive a copy of the Personal Data we hold about you
• To rectify any Personal Data held about you that is inaccurate
• To request the deletion of Personal Data held about you *

* Where we share Link Data with Shopify and/or their Shop app, and the merchant whose products are the subject of any reviews to which the Link Data relates deletes our service, we are unable unilaterally to delete Link Data from Shopify and/or their Shop app. In such a circumstance we will pass on the deletion request to the relevant merchant. Our terms with merchants mandate that merchants will promptly delete any Link Data at our request.

You have the right to data portability for the information you provide to Judge.me Ltd. You can request to obtain a copy of your Personal Data in a commonly used electronic format so that you can manage and move it.

Please note that we may ask you to verify your identity before responding to such requests.

Additionally, if:

• you are established in the European Economic Area (EEA);
• you provide goods or services to customers in the EEA; or
• you are otherwise subject to the requirements of the EU General Data Protection Regulation, Judge.me's use of personal information of any data subjects is also subject to our Data Processing Addendum: https://judge.me/dpa

Service Providers

We may employ third party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

A list of our service providers and the contractual relationships that we have in place with them can be found here

We may share your Personal Data with Shopify and their Shop app. Shopify and their Shop app uses Personal Data shared with them to publish reviews of products sold by our merchant Users.

Analytics

We may use third-party Service Providers to monitor and analyse the use of our Service.

Google Analytics

• Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.
• You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.
• For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/

HotJar

• Hotjar allows to make the behavior of web and mobile site visitors visible. To opt out of Hotjar please go to the following link: https://www.hotjar.com/policies/do-not-track/ Hotjar also honors the Do Not Track header. This means that if you have the Do Not Track header installed, Hotjar will not track you.

Facebook Pixel

• The Facebook pixel is an analytics tool offered by Facebook that measures the effectiveness of advertising by understanding the actions people take on a website.
• You can manage the activity tracked by Facebook pixel in your settings: https://www.facebook.com/off_facebook_activity. This includes viewing and clearing existing activity, as well as opting out of tracking future activity from businesses and organisations which you visit outside of Facebook, including activity on Judge.me and partner websites.
• For more information on the privacy practices of Facebook, please visit their policy web page: https://www.facebook.com/policy

Behavioural remarketing

Judge.me Ltd uses remarketing services to advertise on third party websites to you after you visited our Service. We and our third-party vendors use cookies to inform, optimize and serve ads based on your past visits to our Service.

Google AdWords

• Google AdWords remarketing service is provided by Google Inc.
• You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: https://adssettings.google.com/
• Google also recommends installing the Google Analytics Opt-out Browser Add-on – https://tools.google.com/dlpage/gaoptout – for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics.
• For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

Facebook

• Facebook remarketing service is provided by Facebook Inc.
• You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/109378269482053
• To opt-out from Facebook's interest-based ads follow these instructions from Facebook: https://www.facebook.com/help/568137493302217
• Facebook adheres to the Self-Regulatory Principles for Online Behavioral Advertising established by the Digital Advertising Alliance. You can also opt-out from Facebook and other participating companies through the Digital Advertising Alliance in the USA https://www.aboutads.info/choices/ , the Digital Advertising Alliance of Canada in Canada https://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe https://www.youronlinechoices.eu/, or opt-out using your mobile device settings.
• For more information on the privacy practices of Facebook, please visit Facebook's Data Policy: https://www.facebook.com/privacy/explanation
• We also provide hashed personal data (primarily email and telephone numbers) as part of our use of Facebook Audiences Network, the terms of which are at: https://www.facebook.com/ads/manage/audience_network/publisher_tos

AdRoll

• AdRoll remarketing service is provided by Semantic Sugar, Inc.
• You can opt-out of AdRoll remarketing by visiting this AdRoll Advertising Preferences web page: https://info.evidon.com/pub_info/573?v=1&nt=1&nw=false
• For more information on the privacy practices of AdRoll, please visit the AdRoll Privacy Policy web page: https://www.nextroll.com/privacy

Reddit

• Reddit remarketing service is provided by Reddit, Inc.
• You can opt-out of Reddit remarketing by visiting this Reddit preferences web page: https://www.reddit.com/personalization
• For more information on the privacy practices of Reddit, please visit the Reddit Privacy Policy web page: https://www.redditinc.com/policies/privacy-policy

Quora

• Quora remarketing services is provided by Quora, Inc.
• For more information on the privacy practices of Quora, please visit the Quora Privacy Policy web page: https://www.quora.com/about/privacy

Payments

We may provide paid products and/or services within the Service. In the case that the payment is not collected directly via your ecommerce platform, we use third-party services for payment processing (e.g. payment processors). We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The payment processors we work with are:

Stripe

• Their Privacy Policy can be viewed at https://stripe.com/us/privacy

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children's privacy

Our Service does not address anyone under the age of 13 ("Children").

We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

CCPA Privacy

This section is for residents of the State of California only and supplements the information contained in this Privacy Policy. It applies solely to visitors, users, and others who reside in the State of California. The California Consumer Privacy Act (CCPA) uses different defined terms to GDPR. In this section, Judge.me use the CCPA terms. Unless otherwise defined, these have the meanings given in the CCPA.

We are aware of and will comply with the requirements of the CCPA (including any regulations made under the CCPA) in connection with our services we provide to you.

Please refer to the above sections with regards to the categories of personal information collected, sources of personal information and use of personal information.

Disclosure of personal information for business purposes or commercial purposes

Judge.me may use or disclose and may have used or disclosed in the last twelve (12) months the following categories of personal information for business or commercial purposes:

• Category A: Identifiers
• Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
• Category F: Internet or other similar network activity

Please note that the categories listed above are those defined in the CCPA. This does not mean that all examples of that category of personal information were in fact disclosed, but reflects our good faith belief to the best of our knowledge that some of that information from the applicable category may be and may have been disclosed.

When Judge.me disclose personal information for a business purpose or a commercial purpose, Judge.me enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

Your Rights under the CCPA

The CCPA provides California residents with specific rights regarding their personal information. If you are a resident of California, you have the following rights:

The right to notice. You have the right to be notified which categories of personal information are being collected and the purposes for which the personal information is being used.

The right to request. Under CCPA, you have the right to request that Judge.me disclose information to you about our collection, use, sale, disclosure for business purposes and share of personal information. Once Judge.me receive and confirm your request, Judge.me will disclose to you:

• The categories of personal information Judge.me collected about you
• The categories of sources for the personal information Judge.me collected about you
• Our business or commercial purpose for collecting that personal information
• The categories of third parties with whom Judge.me share that personal information
• The specific pieces of personal information Judge.me collected about you
• If Judge.me sold your personal information or disclosed your personal information for a business purpose, Judge.me will disclose to you:
  (a) The categories of personal information categories sold
  (b) The categories of personal information categories disclosed

The right to say no to the sale of personal information (opt-out). You have the right to direct Judge.me to not sell your personal information. Judge.me does not sell your personal information and so this right is not relevant to you.

The right to delete personal information. You have the right to request the deletion of your personal information, subject to certain exceptions. Once Judge.me receives and confirms your request, Judge.me will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. Judge.me may deny your deletion request if retaining the information is necessary for Judge.me or our service providers to:

• Complete the transaction for which Judge.me collected the personal information, provide goods or services that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with Judge.me.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

The right not to be discriminated against. You have the right not to be discriminated against for exercising any of your consumer's rights, including by:

• Denying goods or services to you
• Charging different prices or rates for goods or services, including the use of discounts or other benefits or imposing penalties
• Providing a different level or quality of goods or services to you
• Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services

Exercising your CCPA rights

In order to exercise any of your rights under the CCPA, and if you are a California resident, you can contact Judge.me by email at support@judge.me

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable request related to your personal information.

Your request to Judge.me must:

• Provide sufficient information that allows Judge.me to reasonably verify you are the person about whom Judge.me collected personal information or an authorized representative
• Describe your request with sufficient detail that allows Judge.me to properly understand, evaluate, and respond to it

Judge.me cannot respond to your request or provide you with the required information if Judge.me cannot:

• Verify your identity or authority to make the request
• And confirm that the personal information relates to you

Judge.me will disclose and deliver the required information free of charge within 45 days of receiving your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonable necessary and with prior notice.

Any disclosures Judge.me provide will only cover the 12-month period preceding the verifiable request's receipt.

For data portability requests, Judge.me will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

Do not sell my Personal information

You have the right to opt-out of the sale of your personal information. Judge.me does not sell your personal information and so does not provide an opt-out link.

"Do Not Track" Policy as Required by California Online Privacy Protection Act (CalOPPA)

Our service does not respond to Do Not Track signals.

However, some third party websites do keep track of your browsing activities. If you are visiting such websites, you can set your preferences in your web browser to inform websites that you do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of your web browser.

Your California Privacy Rights (California's Shine the Light law)

Under California Civil Code Section 1798 (California's Shine the Light law), California residents with an established business relationship with Judge.me can request information once a year about sharing their personal information with third parties for the third parties' direct marketing purposes.

If you'd like to request more information under the California Shine the Light law, and if you are a California resident, you can contact Judge.me using the contact information provided below.

California Privacy Rights for Minor Users (California Business and Professions Code Section 22581)

California Business and Professions Code section 22581 allow California residents under the age of 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted.

To request removal of such data, and if you are a California resident, you can contact Judge.me using the contact information provided below, and include the email address associated with your account.

Be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

Changes to this privacy policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact us

If you have any questions about this Privacy Policy, please contact us by email: support@judge.me

If you are a data subject based within the European Union, you may also contact our representative for GDPR purposes, who's details are as follows:

Buckworths (Ireland) Limited, c/o Workhub, 77 Lower Camden Street, Dublin SO2 XE80, Ireland represented by Gloria Conselmo
Email: office@buckworths.com

‍