7Feedback Privacy Policy

1Who controls your data

The role of 7Feedback, a Business, a White Label Partner and a Managed Business depends on the context. The following matrix is the default role allocation unless a separate agreement, published notice or product configuration says otherwise.

Scroll the table sideways →

In plain terms: if you left feedback for a café, the café decides what to do with it and is the controller. We are the technology it used.

2Data we collect

• Feedback data. The rating you submit and anything you choose to attach to it — a comment, a photo, or a video — together with the business location and Staff Login the submission came from and the time it was made. Attachments are always optional: a rating on its own is a complete submission.
• Optional contact details. A phone number, WhatsApp, Telegram or email address, only if you choose to leave one and tick the consent box, together with the consent record itself.
• Account and identity data for business users: name, email address, phone number if provided, login identifier, business name, staff roles and account permissions.
• Business and billing data: company details, tax identifiers where provided, plan, invoices, Staff Login counts, payment metadata, partner billing metadata and support history.
• Communication and consent data: consent status, consent text and version, communication preferences, unsubscribe records, timestamp, source, channel and related audit logs.
• Technical and security data: IP address, browser and device data, operating system, logs, crash reports, authentication events, session records, fraud and abuse signals and security audit data.
• Camera data. The terminal and scanner applications use the device camera to read QR codes. We do not record, store or transmit video or images from the camera except for a photo or video you deliberately attach to your feedback.

We do not ask a Customer to create an account, log in, or identify themselves in order to leave feedback.

3How we use data and legal bases

Scroll the table sideways →

4Your contact details, if you leave them

Leaving a contact detail is optional and the feedback is sent with or without it. Where you do leave one:

• It is given with an explicit consent tick, not by default and not as a condition of sending feedback.
• It covers that one piece of feedback and nothing else. No newsletters, no other messages, no addition to a marketing list.
• It is deleted after approximately 90 days.
• You can withdraw consent at any time, by telling the Business or by writing to us at info@7feedback.com.

5Communications and consent

Marketing communications are promotional or commercial messages, including offers, campaigns and partner promotions. Service communications are messages needed to run the Service, such as feedback notifications to a business, account notices, security alerts and billing messages.

Marketing consent is optional and separate from accepting the Terms or this Privacy Policy. Refusing or withdrawing it does not prevent a Customer from submitting feedback or a Business from receiving it. Recipients may manage email preferences through unsubscribe and preference links. Important account, security, legal, billing or service notices may still be sent where necessary.

6White Label and the visible brand

When a Customer uses a partner-branded feedback page or admin domain, the visible brand may be a White Label Partner, a Business, a Managed Business or another Program Operator. The page should identify the Program Operator responsible for the feedback programme. 7Feedback may appear only as the technology provider, or may not appear at all, depending on the White Label configuration.

Where a White Label Partner or Managed Business controls the feedback programme, that entity is responsible for its own privacy notices, consent wording, support contacts and customer-facing communications. We store consent records and provide technical tools, but do not guarantee that partner-provided legal texts are correct for the partner's jurisdiction or business model.

7Cookies, pixels and similar technologies

Our use of cookies on this website is described in the Cookie Policy.

By default, feedback pages and White Label Service Domains use only cookies and similar technologies that are strictly necessary to provide the Service, authenticate users, maintain sessions, prevent fraud, secure the platform, remember essential preferences and operate the feedback page and admin workflows, unless optional analytics, advertising or similar tracking is separately enabled through a supported configuration.

If a White Label Partner enables optional analytics, advertising, pixels, tags, SDKs or similar tools on partner-branded domains, the partner is responsible for determining whether those tools are lawful, obtaining any required consent before they operate, honouring opt-outs and maintaining accurate disclosures. We may disable tracking configurations that create material legal, security, platform or reputational risk.

8Sharing of data

• With the Business, White Label Partner or Managed Business the feedback was submitted to.
• With service providers and sub-processors such as hosting, authentication, database, email delivery, payments, support, analytics necessary for operation and security providers.
• With integration providers or other third parties chosen or enabled by the Business, Partner or Managed Business.
• With authorities, courts, regulators or advisors where required by law or necessary to protect rights, safety and security.
• In connection with a merger, acquisition, restructuring or sale of assets, subject to appropriate safeguards.

We do not sell personal data, and we do not publish feedback on any public page of our own.

9International transfers

We may process data in countries outside the country where it was collected. Where required, we use lawful safeguards such as adequacy decisions, EU Standard Contractual Clauses, UK transfer mechanisms, Data Privacy Framework certification where applicable, or other lawful transfer mechanisms.

10Retention

• Optional contact details: deleted after approximately 90 days.
• Ratings, comments and attachments: retained for as long as the Business needs them to operate its feedback programme and for the account's retention settings, then deleted, anonymised or aggregated.
• Consent records: retained as evidence of consent for as long as needed to demonstrate compliance.
• Billing, tax and accounting data: retained for the periods required by law.
• Security and audit logs: retained for the period needed for security, fraud prevention and dispute resolution.

When data is no longer needed, we delete, anonymise or aggregate it where reasonably practicable. Backup copies may persist for a limited period until overwritten or securely deleted according to our backup cycles.

11Your rights

Depending on your location and the processing context, you may have rights to access, correct, delete, restrict, object to processing, withdraw consent, receive a copy of your data, opt out of certain processing, or lodge a complaint with a supervisory authority. In Slovakia the supervisory authority is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky).

If the feedback programme is operated by a Business, White Label Partner or Managed Business, we may forward your request to the relevant controller or assist that controller in responding. Write to info@7feedback.com and, where you can, tell us which business and roughly when you left the feedback, so we can find it.

12California and U.S. state privacy rights

Where U.S. state privacy laws apply, additional rights and disclosures may apply. We do not sell personal information as commonly understood. Where we process personal information on behalf of a covered business as a service provider or contractor, we process it for limited and specified business purposes and subject to the applicable data processing terms. White Label Partners and Managed Businesses are responsible for assessing whether they are covered by California or other U.S. state privacy laws and for publishing any required partner-specific notices.

13Children

The Service is not directed at children. Feedback pages are intended for people aged 16 or over, or the minimum age required by applicable law. We do not knowingly collect personal data from children below that age. If you believe a child has submitted personal data, contact us and we will delete it.

14Changes

We may update this Privacy Policy from time to time. Material changes will be notified through the Service, the website, email or other reasonable means where required.