Effective date: 29 October 2025
At ReviewLab Lda. (hereinafter, "ReviewLab," "Company," "we," "us," or "our"), we respect and protect the privacy of visitors to our websites under the reviewlab domain (collectively, the "Sites") and our customers who use our SaaS product, review widgets, tools, and related services (together with the Sites, the "Platform").
This Global Privacy Policy (the "Policy") explains how we collect, use, disclose, and protect information when you interact with the Platform. Any discussion of your use of the Platform in this Policy includes your visits and other interactions with the Sites, whether or not you are a registered customer of ReviewLab.
Capitalized terms not defined in this Policy have the meanings assigned in our Terms of Service (including any agreement, policy, or addendum incorporated therein, as amended from time to time).
By accessing or using the Platform, you agree to this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform.
We provide layered transparency through this Policy and just-in-time notices (e.g., cookie banner/consent manager and context-specific prompts) that explain data collection and choices where they are most relevant.
Depending on how you interact with ReviewLab, we may process:
We do not intentionally collect data about children or special categories of personal data. See §13.
Because public reviews are authored on third-party platforms, contacting each reviewer individually is often not feasible. We therefore rely on this Policy and in-product notices to provide transparency and we honor rights requests sent to info@reviewlab.pro.
We use personal data to:
Direct marketing includes communications that primarily promote our products or services. Transactional or service emails (e.g., security alerts, billing notices) are not direct marketing. You can opt out of direct marketing at any time via the unsubscribe link in our emails, through account email settings (where available), or by emailing info@reviewlab.pro. We will stop direct marketing without undue delay.
We use necessary cookies for core functionality (authentication, security, fraud prevention). With your consent, we may use analytics to understand usage and improve the product and, where used, advertising technologies to reach or re-engage audiences.
Manage preferences via our cookie banner/consent manager at any time. Where supported, we honor browser-level signals such as Global Privacy Control for relevant choices.
We share personal data only as necessary to operate and improve the Platform, comply with law, and protect our users. We do not publicly list every service provider. Instead, we describe the categories of recipients below.
Categories of recipients we may engage:
Our Commitments for Onward Transfers & Subprocessors. We contractually require our processors and sub-processors to: (i) process personal data only for specified purposes and on our documented instructions; (ii) implement protections equivalent to applicable Data Protection Laws; (iii) assist us in honoring data-subject requests; and (iv) notify and cooperate with us regarding lawful government access requests where legally permitted.
International transfers are addressed in the "International Data Transfers" section of this Policy.
We are established in the EU (Portugal). When personal data is transferred outside the EEA/UK/Switzerland, we use appropriate safeguards, such as adequacy decisions and/or Standard Contractual Clauses, along with supplementary measures where appropriate. Further information is available on request.
We retain personal data only as long as necessary for the purposes described above or as required by law. In addition to general practices, we apply these category-specific timeframes:
When data is no longer needed, we delete or anonymize it.
Depending on where you live, you may have rights to access, portability, rectification, erasure, restriction, and objection (including to processing based on legitimate interests and to direct marketing), and to withdraw consent where processing relies on consent. You also have the right to contact your local data-protection authority (e.g., CNPD in Portugal).
How to exercise. Email info@reviewlab.pro. We may need additional information to verify your identity before acting on a request. We aim to respond within one month; where requests are complex or numerous, we may reasonably extend this timeframe and will let you know.
Limitations. We may deny or restrict a request when required or permitted by law, when fulfilling it would adversely affect the rights and freedoms of others, when necessary to protect our rights or property, or when a request is manifestly unfounded or excessive.
Notifications to recipients. When we rectify, erase, or restrict processing of your personal data, we will notify recipients to whom the data was disclosed, unless this proves impossible or involves disproportionate effort; upon request, we will inform you about those recipients.
Public reviews. If you authored a public review and object to our reuse of your personal data in our widgets, contact us with a link to the review and the platform name. We will assess and, where appropriate, suppress display of our cached copy. You can also edit or remove your review on the original platform; our systems reflect changes on refresh.
We use technical and organizational measures appropriate to the risk, including encryption in transit, access controls and segmentation, environment isolation, backups, monitoring, and least-privilege practices. No online service can guarantee absolute security; please keep your credentials confidential and use strong passwords and, where available, two-factor authentication.
The Platform is intended for business use and is not directed to children. We do not knowingly collect personal data from anyone under the local age of digital consent (which varies by jurisdiction, typically 13–16). If you believe a child has provided personal data to us, please contact us so we can take appropriate steps.
Our analytics may include AI-based summaries, categorization, and sentiment/rankings of publicly available reviews. These features are designed to provide business insights and are not intended to produce legal or similarly significant effects for individuals. You may contact us to learn more about the logic involved and safeguards, and you may object to these uses where applicable.
If a personal data breach occurs, we will assess the risk and notify the competent supervisory authority without undue delay and, where feasible, within 72 hours, unless the breach is unlikely to pose a risk to individuals. Where there is a high risk, we will also inform affected individuals without undue delay, subject to applicable exceptions.
We may update this Policy from time to time. The Effective date shows the latest revision. For material changes, we will provide prominent notice (for example, through the Platform and/or by email, where appropriate).
ReviewLab is operated by Roman Verevkin, self-employed individual registered in Portugal (NIF 323154190), with registered address in Matosinhos, Portugal.
Email: info@reviewlab.pro
Links
Contacts