Security Headers Policy

Policy & legal framework

This clause addresses purpose and scope of the policy within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about purpose and scope of the policy, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to purpose and scope of the policy you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to purpose and scope of the policy. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses baseline security posture within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about baseline security posture, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to baseline security posture you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to baseline security posture. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses http strict transport security (hsts) within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about http strict transport security (hsts), to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to http strict transport security (hsts) you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to http strict transport security (hsts). Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses hsts preload and subdomain coverage within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about hsts preload and subdomain coverage, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to hsts preload and subdomain coverage you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to hsts preload and subdomain coverage. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses content security policy (csp) within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about content security policy (csp), to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to content security policy (csp) you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to content security policy (csp). Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses csp nonces and strict-dynamic within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about csp nonces and strict-dynamic, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to csp nonces and strict-dynamic you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to csp nonces and strict-dynamic. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses csp report-uri and report-to endpoints within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about csp report-uri and report-to endpoints, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to csp report-uri and report-to endpoints you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to csp report-uri and report-to endpoints. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses x-content-type-options and mime sniffing within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about x-content-type-options and mime sniffing, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to x-content-type-options and mime sniffing you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to x-content-type-options and mime sniffing. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses x-frame-options and framing rules within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about x-frame-options and framing rules, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to x-frame-options and framing rules you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to x-frame-options and framing rules. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses referrer-policy and cross-origin leaks within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about referrer-policy and cross-origin leaks, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to referrer-policy and cross-origin leaks you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to referrer-policy and cross-origin leaks. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses permissions-policy (feature policy) within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about permissions-policy (feature policy), to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to permissions-policy (feature policy) you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to permissions-policy (feature policy). Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses cross-origin-opener-policy (coop) within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about cross-origin-opener-policy (coop), to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to cross-origin-opener-policy (coop) you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to cross-origin-opener-policy (coop). Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses cross-origin-embedder-policy (coep) within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about cross-origin-embedder-policy (coep), to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to cross-origin-embedder-policy (coep) you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to cross-origin-embedder-policy (coep). Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses cross-origin-resource-policy (corp) within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about cross-origin-resource-policy (corp), to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to cross-origin-resource-policy (corp) you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to cross-origin-resource-policy (corp). Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses cors and api allow-lists within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about cors and api allow-lists, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to cors and api allow-lists you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to cors and api allow-lists. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses cookie flags: secure, httponly, samesite within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about cookie flags: secure, httponly, samesite, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to cookie flags: secure, httponly, samesite you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to cookie flags: secure, httponly, samesite. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses sub-resource integrity (sri) within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about sub-resource integrity (sri), to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to sub-resource integrity (sri) you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to sub-resource integrity (sri). Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses cache-control and stale-while-revalidate within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about cache-control and stale-while-revalidate, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to cache-control and stale-while-revalidate you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to cache-control and stale-while-revalidate. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses content-type charset enforcement within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about content-type charset enforcement, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to content-type charset enforcement you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to content-type charset enforcement. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses tls configuration and cipher suites within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about tls configuration and cipher suites, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to tls configuration and cipher suites you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to tls configuration and cipher suites. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses certificate transparency and pinning within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about certificate transparency and pinning, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to certificate transparency and pinning you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to certificate transparency and pinning. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses widget iframe sandboxing within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about widget iframe sandboxing, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to widget iframe sandboxing you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to widget iframe sandboxing. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses reporting api and nel within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about reporting api and nel, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to reporting api and nel you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to reporting api and nel. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses header change management within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about header change management, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to header change management you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to header change management. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.

Policy & legal framework

This clause addresses bug bounty and responsible disclosure within the Security Headers Policy that governs your relationship with ScoreReview UK, operated by UK REAL REVIEWS LTD (company number 14587101). It is drafted to satisfy the Consumer Rights Act 2015, the Digital Markets, Competition and Consumers Act 2024, the UK GDPR and the Data Protection Act 2018 as they apply to a UK-registered review platform published at scorereview.io.

Where an obligation in this clause conflicts with mandatory statute or with a signed Order Form, the more protective provision prevails. Nothing in Security Headers Policy limits statutory rights that cannot be excluded by contract.

Your rights

You retain the right to receive plain-English information about bug bounty and responsible disclosure, to challenge any decision we take under this clause, and to escalate an unresolved complaint to the relevant supervisory authority — the Information Commissioner's Office for data matters and the Competition and Markets Authority for consumer-law matters. Escalation does not require you to waive any right of action.

Reviewers keep ownership of the content they submit; businesses keep ownership of the transactional data they upload. ScoreReview UK holds only the licence necessary to operate scorereview.io and to publish verified reviews to the audience the reviewer intended.

Your obligations

In relation to bug bounty and responsible disclosure you must provide accurate information, act in good faith, and refrain from any conduct that would mislead consumers, distort the trust ledger, or breach the acceptable-use rules published at scorereview.io/acceptable-use. Repeated or wilful breach is grounds for suspension without refund.

Where you act on behalf of a business you warrant that you have authority to bind that business to Security Headers Policy, that any customer contact you upload consented to receive a review invitation, and that you will keep records sufficient to demonstrate that consent for at least 24 months.

Disclosure, data, privacy & cookies

Personal data processed under this clause is handled in accordance with the ScoreReview UK Privacy Policy and, where you are a business customer, the Data Processing Agreement. Lawful basis is legitimate interest for platform integrity, contract for paid services, and consent for optional analytics or non-essential cookies set on scorereview.io.

We publish a disclosure log covering enforcement actions, moderation decisions and material policy changes relevant to bug bounty and responsible disclosure. Cookies used to support this clause are strictly necessary; any analytics or preference cookies require prior opt-in via the cookie banner and can be withdrawn at any time from the footer.