Privacy Policy

Information we collect

• Account information: your name, email address, password hash, email-verification state, and subscription status.
• Project information: business or project names, website URLs, logos, colours, and widget settings supplied by account holders.
• Testimonial information: a submitter’s name, testimonial, rating, consent choice, and—when provided—company, job title, email address, and photo. Photo submission is available only where the requesting account’s plan permits it.
• Service and security information: IP address, request metadata, error and security logs, and session data needed to operate, protect, and diagnose the service.
• Support information: information included when you contact us.

We ask only for information needed to provide and protect the current service. Testimonial email addresses are available to the requesting business for review but are not displayed on public Walls of Love or widgets.

How information is used

We use information to provide accounts and projects, receive and moderate testimonials, publish approved content, operate billing, send verification and password-reset messages, respond to support requests, prevent abuse, and maintain service reliability and security.

Account holders decide which submitted testimonials they approve and publish. A testimonial submitter’s information is shared with the business that requested the testimonial, as explained on the collection form.

Service providers

Stripe processes subscription checkout, payment details, invoices, and the customer billing portal. TestiFollow stores Stripe customer and subscription references and billing status, but does not receive or store full payment card details.

Microsoft 365 is used to deliver transactional messages from support@testifollow.com, including email verification and password-reset messages. Hosting, database, Redis, storage, logging, and backup providers may process information solely as needed to operate the service.

Lawful basis and choices

Depending on the context, information is processed to perform the service contract, pursue legitimate interests in operating and securing the service, comply with legal obligations, or act on consent. Testimonial publication relies on the submitter’s required publication permission and the account holder’s approval.

You may request access, correction, deletion, restriction, or a portable copy of personal information where applicable, and may object to certain processing or withdraw consent for future publication. Contact us using the address above. We may need to verify your identity and may retain information where legally required or necessary to establish or defend claims.

Retention and security

We retain account and project data while an account is active and for a reasonable period afterwards for support, security, backup, dispute, and legal purposes. Testimonial content remains until the relevant account holder deletes it, the account is closed, or a valid deletion request is completed. Backups expire on their normal protected retention cycle.

We use access controls, encrypted HTTPS transport, password hashing, signed billing webhooks, restricted uploads, and other proportionate safeguards. No internet service can promise absolute security; please report suspected issues promptly.

International processing and updates

Some service providers may process information outside the United Kingdom. Where required, appropriate contractual or legal safeguards will be used. We may update this policy as the service or legal requirements change and will publish the revised date on this page.