Privacy Notice

This notice explains what personal data Aber Reviews collects, why, and what rights you have. It applies to the website only (not to Facebook, which has its own privacy policy).

What we collect

• Account data: email address, display name, password (stored hashed), and account activity.
• Review content: the text, ratings, and any photos you choose to submit.
• Technical/abuse-prevention data: a salted, one-way hash of the IP address used to submit a review (not the raw IP), used only to spot duplicate-submission and abuse patterns.
• Moderation records: decisions, reason codes, and correspondence relating to your submissions or reports you make.

Why (lawful basis)

We process account and review data under contract — to provide the account and review service you asked for — and under legitimate interests: moderation, fraud and abuse prevention, and maintaining the accuracy and trustworthiness of published reviews.

Data minimisation and retention

We only ask for what a feature needs. We keep your account and any reviews you submit for as long as your account stays active. A review you withdraw, or one a moderator rejects, is kept on file (never published) so the moderation decision behind it stays accountable — the same is true of the underlying moderation log. Evidence submitted only for moderation purposes is kept private and is never published. You can ask us to delete your account and data at any time — see Your rights below.

Photos and evidence

Public review photos are re-processed on upload to strip location/EXIF metadata before publication. Evidence submitted only for moderation purposes is kept private and is not published.

Your rights

Under UK GDPR you have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise any of these, contact us. We aim to respond within one month, as UK GDPR requires.

Who we share data with

We share data with our hosting provider (Hetzner) and our transactional email provider (Brevo), each processing it only to provide their service to us — never for their own marketing. If you choose to log in with Facebook, that login is handled by Meta directly; we only ever receive your name and email back from it. We do not use any analytics or advertising trackers, and we do not sell or share your data for marketing purposes. See also our Cookie Notice.