Privacy Policy

Review & More is a business-to-business platform. Organisations use it to collect customer feedback; those organisations decide what to ask, which channels to run and how long to keep a survey in service. Each organisation remains responsible for the notices it presents to its own customers at the point of collection.

The platform processes three broad categories of information:

• Feedback responses. Ratings and any free-text comments a customer chooses to submit, together with the survey, location, channel and—where applicable—the employee the response relates to, and the time of submission.
• Organisational records. Account details for the staff who sign in to the InstaView workspace, along with the employee, location and survey records an organisation creates.
• Operational data. Kiosk device records, activation state, heartbeat timestamps and similar technical information needed to keep devices running.

Feedback responses are processed to provide the reporting, analytics and corrective-action features the platform is built around. Organisational records are processed to authenticate users, enforce tenant isolation and attribute responses correctly. Operational data is processed to manage device state and detect connectivity issues.

Each organisation's data is isolated at the database level. Row-level security policies prevent one organisation from reading or writing another's records. Administrative operations that cross tenant boundaries are restricted to privileged server-side functions and are not callable by ordinary authenticated users.

When a customer submits feedback through a kiosk, QR code or email-signature link, the submission is handled server-side. Public links use opaque tokens that do not expose employee email addresses or internal database identifiers. A thank-you confirmation is shown only after the response has been successfully stored.

The platform relies on third-party infrastructure providers for hosting, database services and transactional email. These providers process data on our behalf in order to deliver the service.

If you gave feedback to an organisation and want to ask about it, contact that organisation directly: it controls the survey and holds the relationship with you. If you are an organisation using the platform and need to raise a data request, use the contact route established in your service agreement.

This policy may be updated as the platform develops. Material changes affecting organisations using the platform will be communicated through the account contact on record.