Legal
Privacy Policy
What personal data we collect, why, who else handles it and what rights you have under the GDPR.
Last updated: 11 November 2026
1. Who is responsible for your data
The controller is {{LEGAL NAME}}, registration no. {{REGISTRATION NUMBER}}, {{ADDRESS}}. Contact for privacy questions: contact@replyingo.com.
2. What we collect
We collect only what the service needs. We have no user accounts and we do not run analytics or advertising trackers.
- Contact form: your name, email, the subject and your message.
- Details form after payment: business name, contact name, email, phone number, the link to your Google profile, the offer you bought, your payment reference and optional notes.
- Quote form: business name, contact name, email, number of locations, what you need and your message.
- Payment: card payments are handled by Airwallex. We receive the confirmation and the payment reference. We never see or store your card number.
- Technical data: like any website, our hosting provider processes your IP address and request data to deliver pages, stop abuse and keep the site secure. We also use your IP address, in hashed form, to limit how many times a form can be sent.
- Public information: the reviews on your public Google, Tripadvisor or Facebook profile, which we read to write replies.
3. Why we use it and the legal basis
Swipe sideways to see all columns.
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Do the work you bought and keep in touch about it | Details form, public reviews, emails | Performance of a contract (6.1.b) |
| Answer your questions and quote requests | Contact and quote forms | Steps before a contract and our legitimate interest in replying (6.1.b and 6.1.f) |
| Take and record payments, refunds and accounting | Payment reference, offer, amount | Performance of a contract and legal obligation (6.1.b and 6.1.c) |
| Keep the site secure and stop abuse | IP address, request data | Legitimate interest (6.1.f) |
| Handle disputes and legal claims | Order and message records | Legitimate interest and legal obligation (6.1.f and 6.1.c) |
4. Who else handles your data
We use only the providers below. We do not sell your data and we do not use it for advertising.
Swipe sideways to see all columns.
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, content delivery, security and the database that stores the forms you send us | United States and worldwide edge network | EU-US Data Privacy Framework and Standard Contractual Clauses |
| Airwallex (UK) Limited and affiliates | Card payment processing for the offers you buy | United Kingdom, EEA, Hong Kong and Singapore | UK adequacy decisions and Standard Contractual Clauses |
We may also disclose data if the law requires it, or to protect our rights in a dispute.
5. No AI training
We never use your content to train AI models.
6. How long we keep it
Swipe sideways to see all columns.
| Data | Kept for |
|---|---|
| Contact messages | 12 months, then deleted automatically |
| Quote requests | 12 months, then deleted automatically |
| Details sent after payment | 3 years, to deliver the work, handle disputes and meet accounting duties, then deleted automatically |
| Payment records held by Airwallex and our accounts | As long as the law requires accounting records to be kept |
| Rate-limit records | Under 24 hours |
| Admin session (staff only) | 7 days |
7. International transfers
Cloudflare and Airwallex may process data outside the European Economic Area. Where they do, the transfer is protected by the safeguards in the table above, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.
8. Your rights
You have the right to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent where we rely on it. To use a right, write to contact@replyingo.com or use the contact page and choose “Privacy request”. We answer within one month.
You may also complain to the data protection supervisory authority of the country where you live or work, or where {{LEGAL NAME}} is established.
9. Automated decisions
We do not make decisions about you based only on automated processing, and we do not build profiles of visitors.
10. Notice for US residents
We do not sell personal information and we do not share it for cross-context behavioral advertising. We collect the categories described above for the business purposes described above. If you live in a US state with a privacy law, you may ask to know, correct or delete your personal information, and we will not treat you differently for asking. Write to contact@replyingo.com.
11. Security
The site is served over HTTPS. Form data is stored in an encrypted Cloudflare database, access to the back office needs a login, and forms are protected against abuse. Read more on our Security page. No system is perfectly secure, so please do not send us passwords or card numbers by email or in forms.
12. Children
The service is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children.
14. Changes
We may update this policy. The date at the top shows the latest version.
Contact
{{LEGAL NAME}}, {{ADDRESS}}. Registration no. {{REGISTRATION NUMBER}}.
Email: contact@replyingo.com or use the contact page. Phone: {{PHONE}}. Opening hours: Monday to Friday, 9:00 to 17:00 (time zone of our registered office).