Privacy Policy
Last updated: August 2026
This policy covers ReView (review-cvs.com and the ReView desktop application) only.
1. The Short Version
ReView's day-to-day data — your customers, vehicles, jobs and invoices — stays on your own PC. It is never sent to us, unless you use the optional cloud backup feature, which is covered in detail in section 4 because it's the one part of ReView that does transmit your data, and you should understand exactly what that means before relying on it.
2. What We Collect
- Local workshop data: customers, vehicles, documents, technicians, and settings entered into ReView are stored only on your own PC (or your organisation's own Main Server PC, for a networked setup). We have no access to this unless you use cloud backup.
- Licence purchase details: the email address and organisation name provided at checkout, processed via Stripe. We do not store card details.
- Technician download/login records: organisation name, technician name, IP address, and timestamp, logged each time someone downloads ReView via the technician portal — used to enforce your purchased seat quota and detect misuse of a licence.
- Vehicle lookups: a registration number is sent through ReCall (our vehicle-data service) to DVLA/DVSA when you use "VRM Lookup" or "Check MOT History." The registration itself is not retained by us beyond what's needed to serve that one request.
3. Legal Basis
Contract performance — processing necessary to provide the licence, downloads, and features you've purchased or are using — and legitimate interests, for licence quota enforcement and fraud prevention.
4. Cloud Backup — Read This Before Relying On It
Cloud backup uploads a complete copy of your local ReView data — not a summary, all of it — to our server once every 24 hours. Understand what that includes before you turn it on.
- What's included: every customer, vehicle, document, and invoice in your local database, plus your technicians' names and PINs, and your settings — including your SMTP email password if you've configured one. This is a full copy, not a curated subset.
- Who it's about: if you use ReView to store your own customers' details, a cloud backup includes their information too. You remain the data controller for that information — we act only as a processor, storing it on your behalf so it can be restored if your PC fails. You're responsible for ensuring your own use of ReView, including enabling backup, is lawful under UK GDPR for the people whose data you hold.
- How it's protected: files are transmitted over HTTPS and safely stored on a cloud-based server, accessible only using your organisation's own valid, activated licence code with an exact match on organisation name.
- How it's accessed: only retrievable using your organisation's own valid, activated licence code and an exact match on organisation name — the same check used everywhere else in ReView.
- How long it's kept: up to 5 days of backups per organisation, oldest automatically pruned once that many exist. Restoring gets you the most recent one by default, up to 24 hours old.
- See our Terms & Conditions for the full liability position on cloud backup.
5. Third-Party Services
- Stripe — payment processing for licence purchases. We never see or store your card details.
- DVLA / DVSA — the government sources for vehicle lookups. A registration number you search is sent to them to retrieve the result.
- Cloudflare — network infrastructure in front of our servers. May process request metadata (e.g. IP address) as part of normal web traffic handling.
6. Data Retention
- Licence records are retained for the duration of the licence and up to 12 months thereafter.
- Technician download logs are retained for licence quota and fraud-prevention purposes.
- Cloud backups: one rolling copy per organisation, overwritten on each new backup, until the organisation stops backing up or requests deletion.
7. Cookies
The ReView website and technician portal do not use cookies. Login to the desktop application is entirely local, via PIN, and never touches this website.
8. Your Rights
Under UK GDPR you can access, correct, or request deletion of data we hold about you (licence and download records), or object to processing. For data stored within a workshop's own local ReView install — including anything in a cloud backup — that workshop is the data controller and the first point of contact; we act as their processor. You can also lodge a complaint with the ICO (ico.org.uk).
9. Changes
We may update this policy from time to time. The current version is always available at this page.
10. Contact
[email protected]