Privacy Policy

1. Who we are

Smart Review
E-mail: hello@smart-review.nl

Smart Review provides a service that lets businesses guide customers to their Google review page via NFC tags and QR codes, with a dashboard and optional private feedback. Smart Review is the controller for data on this website and a processor for data customers collect in their own environment.

2. What data we process

On this website:

• Non-identifying statistics: we count visits, clicks and conversions without storing IP addresses. Daily unique visitors are counted via a daily-rotating salted hash that cannot be traced back to you.
• Contact and audit requests: name, e-mail address and your message - only what you submit yourself.
• Orders and sign-ups: company name, e-mail address, chosen plan and (for hardware) your delivery address.

In customer environments (a business's Smart Review application): scan statistics with hashed IP addresses, and private feedback visitors leave voluntarily. The business is the controller; Smart Review acts as processor.

3. Purposes and legal bases

• Performance of the contract: creating your environment, sending credentials, handling payments and orders.
• Legitimate interest: anonymous website statistics, security and abuse prevention.
• Consent: marketing cookies (Google Analytics 4, Meta Pixel) load only after you actively click "Accept". If you decline, nothing loads.
• Legal obligation: bookkeeping and retention duties (e.g. invoices, 7 years).

4. Cookies

Functional: one cookie for your language and one for your cookie preference (6 months). Statistics/marketing: only after consent do we load Google Analytics 4 and/or the Meta Pixel. Without consent we set no tracking cookies and load no third-party marketing scripts.

5. Who we share data with

• Mollie B.V. - payment processing (iDEAL, Bancontact, credit card).
• Hosting provider (EU) - all data is stored on servers within the EU.
• Google Fonts - fonts are loaded via Google, which sees your IP address.
• Google Analytics / Meta - only after your consent (see 4).

We never sell data and share nothing with other parties unless required by law.

6. Retention periods

• Anonymous statistics: unlimited (not identifiable).
• Contact and audit requests: up to 12 months after handling.
• Customer and invoice data: 7 years (statutory retention).
• Private feedback in customer environments: until the customer deletes it; deletion is always possible from the dashboard.

7. Security

Connections use TLS (https). IP addresses in customer environments are stored hashed only, never in plain text. System access is restricted and protected with strong passwords. Servers are located in the EU and receive updates and backups.

8. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. E-mail us at hello@smart-review.nl; we respond within 30 days. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Data processing agreement (business customers)

If you use Smart Review for your business, we process data (such as your customers' private feedback) on your behalf. A data processing agreement is available on request via hello@smart-review.nl.

10. Changes

We may update this policy, for example when adding features. The current version is always on this page; we notify customers by e-mail about significant changes.