Privacy policy

From business customers: name, email, phone if you give it, billing and delivery address, business name and location, and your Google Business Profile link. From people who tap a card: the star rating they pick and any written feedback they choose to send. We do not ask a reviewer for their name or email.

To program and ship your cards, run your review page, pass private feedback to the business it is meant for, bill subscriptions, and answer support emails.

Feedback left on a review page is stored securely and shared only with that business, at the email address on their account. We do not publish it, sell it, or use it for marketing.

Only the service providers we need to run the business: Shopify for card checkout and orders, Stripe for subscription payments, Supabase for database and authentication hosting, and our email provider. Each handles data under its own security obligations. We never sell your information.

We never see or store your full card numbers. Card payments are processed directly by Shopify and Stripe.

We use essential cookies and local storage to keep your cart and your admin login working. No advertising trackers.

Data is held on encrypted, access controlled infrastructure. Access is restricted to people who need it. We keep order records for seven years to meet Australian tax rules, and delete other data when it is no longer needed.

Email hello@reviewcards.com.au to see, correct or delete the personal information we hold about you. We respond within 30 days. If you are not happy with how we handled a privacy issue, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.