This Privacy Notice for HighRep Ltd (“we,” “us,” or “our”), explains how and why we collect, store, use, and share (“process”) your personal information when you use our services (“Services”), including when you:
Visit our website at www.highrep.com or any site that links to this Privacy Policy. Use HighRep, our review generation and reputation management software. Engage with us in sales, marketing, or events.
Business information: name, email, phone, billing details, login details. Customer information (uploaded by clients): names, emails, phone numbers (used only to send review requests). Payment information: processed securely via our payment provider. Technical data: IP address, device/browser type, usage logs, cookies. Other sources: social media, integrations (e.g., CRM).
2. How We Use Your Information
We process data to:
Provide and improve our Services. Send review requests to your customers (via SMS, WhatsApp, email, etc.). Communicate with you about updates, security, and support. Detect fraud, abuse, or illegal activity. Meet legal and regulatory obligations. With your consent, send marketing or promotional content (you may opt out anytime).
3. Legal Bases for Processing
Under the GDPR and Guernsey Data Protection Law 2017, we rely on:
All providers act as processors under contract and cannot use your data for their own purposes.
We may also share data if required by law or in business transfers (e.g., merger, sale).
5. International Transfers
Your information may be transferred outside Guernsey/the EU. Where this happens, we use safeguards such as Standard Contractual Clauses (SCCs) to ensure your data remains protected.
6. Data Retention
We keep your personal data only as long as necessary for the purposes described in this policy, unless longer retention is required by law. When no longer needed, data is securely deleted or anonymised.
7. Cookies & Tracking
We use cookies and similar technologies to operate our website and improve user experience. Where required, we obtain your consent through a cookie banner. For details, see our Cookie Policy.
8. Children’s Data
Our Services are not intended for children under 18 years old, and we do not knowingly collect data from them.
9. Your Rights
Under GDPR/Guernsey law, you have the right to:
Access your personal data Correct inaccuracies Request deletion (“right to be forgotten”) Restrict or object to processing Request data portability Withdraw consent at any time
To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Office of the Data Protection Authority (ODPA), Guernsey.
10. Data Security
We use appropriate technical and organisational measures to protect your information. However, no system is 100% secure, so we cannot guarantee absolute security.
11. Updates
We may update this Privacy Policy from time to time. Changes will be posted on this page with the “last updated” date.
12. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
