TABLE OF CONTENTS

Introduction


As part of our commitment to data protection and privacy, we want to provide you, our valued customer, with a brief guide on updating your privacy policies to align with the new data protection regulations, specifically regarding Feefo's role and data handling practices.


Please note that while we offer this information to help you understand how Feefo handles customer data, we are not providing legal advice. It is essential to seek legal counsel to ensure your privacy policies are fully compliant with applicable laws.

Controllers and Processors


Feefo operates as both a data processor and a data controller. As a data processor, we send feedback invitations to your customers upon your request. On the other hand, as a data controller, we manage the feedback received from your customers and the responses you send to them. In this capacity, we act as an intermediary facilitating the feedback process.


Information to Include in Your Privacy Policy


To address Feefo's role as a processor and the data involved in the feedback process, you should include the following information in your privacy policy:


Personal Data Used for the Activity: Specify the personal data shared with Feefo for feedback invitations. This typically includes the customer's name, email address, and details of the purchased product or service.


Data Source: Mention where you obtained the personal data for sending feedback invitations. For example, you can indicate that the data was obtained through your order form.


Purpose of Processing: Clearly state the purpose of processing this personal data, such as "to request feedback via email."


Legal Basis for Processing: Merchants may rely on "legitimate interests" as the legal basis for data processing, provided they have conducted a legitimate interests assessment and are satisfied with the outcome.


Data Sharing: Indicate that you share the specified personal data with Feefo for the purpose of sending feedback invitations.


Example of How to Incorporate Feefo in Your Privacy Policy:

To assist you further, we have prepared an example statement that you can incorporate into your privacy policy:


How We Use Personal Data to Ask for Feedback via Email:

"We share your name, email address, and details of the product/service you purchased (as obtained during the order process) with Feefo. Feefo will then send you an email on our behalf, inviting you to provide feedback on your purchase. Our legal basis for this data processing is our legitimate interest in requesting feedback to improve our products and services.


Please refer to Feefo's privacy policy for more information on how Feefo uses the reviews you submit.

Get in Touch


If you have any questions or require further assistance in updating your privacy policy to include Feefo's data handling practices, feel free to contact us at GDPRcompliance@feefo.com. Our team will be more than happy to help ensure your privacy policy aligns with the data protection regulations.


Conclusion


By updating your privacy policy to reflect Feefo's role as a data processor and the information shared for feedback invitations, you can maintain transparency with your customers and demonstrate your commitment to data protection. For any inquiries or clarifications, don't hesitate to reach out to our team at GDPRcompliance@feefo.com.