Governance and accountability
- 1.1
Policy & legal framework
This clause addresses governance and accountability within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 1.2
Your rights
You retain the right to receive plain-English information about governance and accountability, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 1.3
Your obligations
In relation to governance and accountability you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 1.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to governance and accountability. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Roles, responsibilities and RACI
- 2.1
Policy & legal framework
This clause addresses roles, responsibilities and raci within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 2.2
Your rights
You retain the right to receive plain-English information about roles, responsibilities and raci, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 2.3
Your obligations
In relation to roles, responsibilities and raci you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 2.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to roles, responsibilities and raci. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Personal data inventory and classification
- 3.1
Policy & legal framework
This clause addresses personal data inventory and classification within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 3.2
Your rights
You retain the right to receive plain-English information about personal data inventory and classification, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 3.3
Your obligations
In relation to personal data inventory and classification you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 3.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to personal data inventory and classification. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Data flow mapping and diagrams
- 4.1
Policy & legal framework
This clause addresses data flow mapping and diagrams within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 4.2
Your rights
You retain the right to receive plain-English information about data flow mapping and diagrams, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 4.3
Your obligations
In relation to data flow mapping and diagrams you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 4.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to data flow mapping and diagrams. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Encryption in transit (TLS 1.2+)
- 5.1
Policy & legal framework
This clause addresses encryption in transit (tls 1.2+) within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 5.2
Your rights
You retain the right to receive plain-English information about encryption in transit (tls 1.2+), to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 5.3
Your obligations
In relation to encryption in transit (tls 1.2+) you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 5.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to encryption in transit (tls 1.2+). Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Encryption at rest (AES-256)
- 6.1
Policy & legal framework
This clause addresses encryption at rest (aes-256) within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 6.2
Your rights
You retain the right to receive plain-English information about encryption at rest (aes-256), to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 6.3
Your obligations
In relation to encryption at rest (aes-256) you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 6.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to encryption at rest (aes-256). Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Key management and rotation
- 7.1
Policy & legal framework
This clause addresses key management and rotation within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 7.2
Your rights
You retain the right to receive plain-English information about key management and rotation, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 7.3
Your obligations
In relation to key management and rotation you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 7.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to key management and rotation. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Secrets management and vaulting
- 8.1
Policy & legal framework
This clause addresses secrets management and vaulting within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 8.2
Your rights
You retain the right to receive plain-English information about secrets management and vaulting, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 8.3
Your obligations
In relation to secrets management and vaulting you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 8.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to secrets management and vaulting. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Access control and least privilege
- 9.1
Policy & legal framework
This clause addresses access control and least privilege within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 9.2
Your rights
You retain the right to receive plain-English information about access control and least privilege, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 9.3
Your obligations
In relation to access control and least privilege you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 9.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to access control and least privilege. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
SSO, MFA and identity federation
- 10.1
Policy & legal framework
This clause addresses sso, mfa and identity federation within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 10.2
Your rights
You retain the right to receive plain-English information about sso, mfa and identity federation, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 10.3
Your obligations
In relation to sso, mfa and identity federation you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 10.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to sso, mfa and identity federation. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Privileged access management
- 11.1
Policy & legal framework
This clause addresses privileged access management within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 11.2
Your rights
You retain the right to receive plain-English information about privileged access management, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 11.3
Your obligations
In relation to privileged access management you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 11.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to privileged access management. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Network segmentation and firewalling
- 12.1
Policy & legal framework
This clause addresses network segmentation and firewalling within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 12.2
Your rights
You retain the right to receive plain-English information about network segmentation and firewalling, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 12.3
Your obligations
In relation to network segmentation and firewalling you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 12.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to network segmentation and firewalling. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Application security and SDLC
- 13.1
Policy & legal framework
This clause addresses application security and sdlc within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 13.2
Your rights
You retain the right to receive plain-English information about application security and sdlc, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 13.3
Your obligations
In relation to application security and sdlc you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 13.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to application security and sdlc. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Dependency scanning and patching
- 14.1
Policy & legal framework
This clause addresses dependency scanning and patching within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 14.2
Your rights
You retain the right to receive plain-English information about dependency scanning and patching, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 14.3
Your obligations
In relation to dependency scanning and patching you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 14.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to dependency scanning and patching. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Vulnerability management and pen-testing
- 15.1
Policy & legal framework
This clause addresses vulnerability management and pen-testing within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 15.2
Your rights
You retain the right to receive plain-English information about vulnerability management and pen-testing, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 15.3
Your obligations
In relation to vulnerability management and pen-testing you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 15.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to vulnerability management and pen-testing. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Logging, monitoring and SIEM
- 16.1
Policy & legal framework
This clause addresses logging, monitoring and siem within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 16.2
Your rights
You retain the right to receive plain-English information about logging, monitoring and siem, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 16.3
Your obligations
In relation to logging, monitoring and siem you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 16.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to logging, monitoring and siem. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Audit trails and immutable logs
- 17.1
Policy & legal framework
This clause addresses audit trails and immutable logs within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 17.2
Your rights
You retain the right to receive plain-English information about audit trails and immutable logs, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 17.3
Your obligations
In relation to audit trails and immutable logs you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 17.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to audit trails and immutable logs. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Backups, integrity and restore drills
- 18.1
Policy & legal framework
This clause addresses backups, integrity and restore drills within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 18.2
Your rights
You retain the right to receive plain-English information about backups, integrity and restore drills, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 18.3
Your obligations
In relation to backups, integrity and restore drills you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 18.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to backups, integrity and restore drills. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Business continuity and disaster recovery
- 19.1
Policy & legal framework
This clause addresses business continuity and disaster recovery within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 19.2
Your rights
You retain the right to receive plain-English information about business continuity and disaster recovery, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 19.3
Your obligations
In relation to business continuity and disaster recovery you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 19.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to business continuity and disaster recovery. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Data residency and hosting regions
- 20.1
Policy & legal framework
This clause addresses data residency and hosting regions within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 20.2
Your rights
You retain the right to receive plain-English information about data residency and hosting regions, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 20.3
Your obligations
In relation to data residency and hosting regions you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 20.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to data residency and hosting regions. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Sub-processor due diligence
- 21.1
Policy & legal framework
This clause addresses sub-processor due diligence within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 21.2
Your rights
You retain the right to receive plain-English information about sub-processor due diligence, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 21.3
Your obligations
In relation to sub-processor due diligence you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 21.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to sub-processor due diligence. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Retention schedules and secure deletion
- 22.1
Policy & legal framework
This clause addresses retention schedules and secure deletion within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 22.2
Your rights
You retain the right to receive plain-English information about retention schedules and secure deletion, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 22.3
Your obligations
In relation to retention schedules and secure deletion you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 22.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to retention schedules and secure deletion. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Personal data breach response
- 23.1
Policy & legal framework
This clause addresses personal data breach response within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 23.2
Your rights
You retain the right to receive plain-English information about personal data breach response, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 23.3
Your obligations
In relation to personal data breach response you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 23.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to personal data breach response. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Regulatory and customer notification
- 24.1
Policy & legal framework
This clause addresses regulatory and customer notification within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 24.2
Your rights
You retain the right to receive plain-English information about regulatory and customer notification, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 24.3
Your obligations
In relation to regulatory and customer notification you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 24.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to regulatory and customer notification. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Continuous improvement and assurance
- 25.1
Policy & legal framework
This clause addresses continuous improvement and assurance within the Data Protection Statement that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.
Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Data Protection Statement limits statutory rights that cannot be excluded by contract.
- 25.2
Your rights
You retain the right to receive plain-English information about continuous improvement and assurance, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.
Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.
- 25.3
Your obligations
In relation to continuous improvement and assurance you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.
Where you act on behalf of a business you warrant that you have authority to bind that business to Data Protection Statement, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.
- 25.4
Disclosure, data, privacy & cookies
Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.
We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to continuous improvement and assurance. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.
Contact
Questions about this document? Email legal@scorereview.io. For a signed counterpart or a redlined version, contact your account manager.
This document is provided by UK REAL REVIEWS LTD (trading as ScoreReview UK), a company registered in England and Wales under company number 14587101. Registered office: Windlehall, Crank Road, St Helens, Merseyside, WA11 7RG. It is not legal advice; take independent legal advice on how it applies to your organisation.