GDPR · UK DPA 2018

Reviews that respect every subject right.

Lawful basis built in. Self-service export and erasure. EU and UK data residency. Signed DPAs available on request — no upgrade required.

Lawful basis: legitimate interest SARs answered in 30 days EU + UK residency Signed DPA on request
GDPR · UK DPA 2018 · live signal
DSAR SLA
30d
Statutory
Region
EU/UK
Primary residency
Retention
Custom
Per-tenant config
Subprocessors
12
Publicly listed
Verified & audit-logged
30d
DSAR SLA
EU/UK
Region
Custom
Retention
12
Subprocessors
Voices

What teams say after their first 90 days.

Verified quotes from UK service firms running ScoreReviews in production — operators, partners and clinical leads.

"GDPR · UK DPA 2018 replaced three tools and a spreadsheet. The verification ladder is the part our compliance team actually trusts."
Priya Shah
Head of Operations, Holborn Tax Advisory
"We shipped in an afternoon. The first verified review landed inside an hour, the first reply was drafted by AI and approved in seconds."
James Whitfield
Managing Partner, Mayfair Legal
"Direct booking conversion went up 38% the month we embedded the widget. Nothing else in the funnel changed."
Dr. Amara Okafor
Clinical Director, Northern Clinics Group
Capabilities

Everything you need, animated into one workflow.

Lawful basis built in

Invitation flows scoped to legitimate interest with clear opt-outs and balancing tests on file.

Explore Lawful basis built in

Self-service DSARs

Subjects can request export or erasure directly from their review page — no support ticket required.

Explore Self-service DSARs

EU + UK residency

London and Dublin regions by default. US opt-in. No silent cross-border replication.

Explore EU + UK residency

Right to erasure

Hard delete tooling with audit trail. Anonymised reviews remain only with explicit policy approval.

Explore Right to erasure

Consent management

Granular consent for invitations, follow-ups and surveys. Withdrawn instantly across channels.

Explore Consent management

PECR-aware messaging

Email and SMS templates pre-flighted against PECR, CAN-SPAM and CASL requirements.

Explore PECR-aware messaging
Live preview

Answer subject questions before they escalate.

An always-on support layer explains verification labels, data rights and submission flow — in plain language, with a real human on standby.

New review
5.0 · Verified
Verification
Invitation Verified
10:245G
S
Sasha · Review Support
online
Message
Integrations

Plug into the tools your team already runs on.

Native connectors for every major CRM, helpdesk, accounting platform and scheduler — plus a typed REST API and signed webhooks for the rest.

Browse the catalogue
HubSpot
CRM
Salesforce
CRM
Pipedrive
CRM
Xero
Finance
QuickBooks
Finance
Calendly
Scheduling
Slack
Comms
Microsoft Teams
Comms
Zapier
Automation
Make
Automation
Shopify
Commerce
WooCommerce
Commerce
From request to resolution

Four steps for any subject right.

1

Request

Subject submits via self-service portal, email or your support team.

2

Verify

Identity confirmed via tokenised link tied to the original engagement.

3

Action

Export, rectify, restrict or erase — logged with reason codes.

4

Confirm

Subject receives signed confirmation; you receive an audit entry.

Comparison

GDPR posture compared.

Compliance is a baseline, not a feature flag.

CapabilityScoreReviewsTrustpilotYotpo
Signed DPA on every plan
Self-service DSAR portal
EU/UK data residency
Granular consent log
Subprocessor change notifications
Who it's for

Built for the operators that take reputation seriously.

Three shapes of customer use this every day. Pick the closest match — the playbook follows.

Mandate-grade

Professional services

Accountants, solicitors and consultants use verified reviews to win mandate work without a single testimonial page.

Read a playbook
Per-site analytics

Multi-location brands

Clinics, dealers and hospitality groups roll out brand-consistent collection across every site, with per-location dashboards.

Read a playbook
Tenant-scoped

Marketplaces & networks

Co-ops, franchises and B2B marketplaces share a single verification standard while keeping member data isolated.

Read a playbook
Outcomes

The numbers we're measured on.

Aggregate outcomes across UK service firms using ScoreReviews in production. Refreshed quarterly, methodology published.

+38%
Conversion uplift
On product & service pages
47%
Median response rate
Across verified invitations
< 24h
Moderation SLA
Human-reviewed, every item
4.7×
Year-one ROI
Across 200+ UK firms
Subject rights covered

Every right, every plan.

  • Right to access (export in JSON, CSV or PDF)
  • Right to rectification (in-line edit log)
  • Right to erasure (hard delete + anonymise)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
GDPR FAQ

What DPOs ask before signing.

Legitimate interest, supported by documented balancing tests. Subjects can object at any point and we honour opt-outs across channels within minutes.

Ready when you are

Compliance without the friction.

Request the DPA, residency map and subprocessor list — all in one pack.

Demo rating · platform preview UK GDPR aligned Independent moderation