Compatible with Shopify Online Store 2.0OS 2.0

Privacy Policy

Effective date: March 29, 2022

Judge.me Ltd ("us ", "we ", or "our ") operates the judge.me website (the "Service "). This page informs you of our policies regarding the collection, use, and disclosure of Personal Data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from judge.me

Definitions

Personal Data

Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).

Usage Data

Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Cookies

Cookies are small pieces of data stored on a User's device.

Data Controller

Data Controller means a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any Personal Data are, or are to be, processed. For the purpose of this Privacy Policy, you are a Data Controller.

Data Processor (or service providers)

Data Processor (or Service Provider) means any person (other than an employee of the Data Controller) who processes the data on behalf of the Data Controller.

We may use the services of various Service Providers in order to process your data more effectively. For the purpose of this Privacy Policy, we are a Data Processor of your data.

Data Subject

Data Subject is any living individual who is the subject of Personal Data.

User

The User is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.

Who is the controller of your data?

We receive Personal Data in four main ways:

  1. From merchants via ecommerce platforms relating to that merchant's customers (and in some circumstances in respect of the merchants themselves where the ecommerce platform is the data controller). In this case we are a Data Processor of that Personal Data;
  2. Directly from reviewers (when they create an account on our Website, or when they interact directly with our Website). In this case we are a Data Controller in respect of that Personal Data;
  3. Directly from merchants in respect of the merchants (when they create an account on our Website and otherwise interact directly with our website). In this case we are a Data Controller; and
  4. Directly from influencers (when they create an account on our Website, or when they interact directly with our Website). In this case we are a Data Controller in respect of that Personal Data.

The relevant information about us is as follows:

  • Full name of legal entity: Judge.me Ltd
  • Company number: 12157706
  • Email address: support@judge.me
  • Postal address: c/o Buckworths, 1-3 Worship Street, London EC2A 2AB

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO) in the UK which is the UK regulator for data protection issues (www.ico.org.uk). If you are based within the EU, you may also make a complaint to your national regulator. We would however appreciate the chance to address your concerns before you approach a regulator so please contact us in the first instance.

Information collection and use

We collect several different types of information for various purposes to provide and improve our Service to you.

Where we need to collect Personal Data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel the account you have with us but we will notify you if this is the case at the time.

Types of data collected

Identity data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City
  • Cookies and Usage Data

We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.

Usage data

We may also collect information how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Technical data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

  • Session Cookies. We use Session Cookies to operate our Service.
  • Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
  • Security Cookies. We use Security Cookies for security purposes.

Use of data

We have set out below, in a table format, a description of all the ways we plan to use your Personal Data and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your Personal Data where more than one ground has been set out in the table below.

Purpose / Activity

Type of data

Lawful basis for processing including basis of legitimate interest

To register you as a new customer

Identity

Performance of a contract with you

To provide and maintain our Service

Identity Technical Usage

Performance of a contract with you

To notify you about changes to our Service

Identity

Performance of a contract with you
Necessary for our legitimate interests (to develop our services and grow our business)

To allow you to participate in interactive features of our Service when you choose to do so

Identity Technical Usage

Performance of a contract with you
Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)

To provide customer support

Identity Technical Usage

Performance of a contract with you

To gather analysis or valuable information so that we can improve our Service

Technical

Necessary for our legitimate interests (to ensure the efficient operation of our Service)

To monitor the usage of our Service

Technical Usage

Performance of a contract with you
Necessary for our legitimate interests (to ensure the efficient operation of our Service)

To detect, prevent and address technical issues

Technical Usage

Performance of a contract with you

To create a Facebook audience using hashed Personal Data

Identity Technical Usage

Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)

To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information

Identity

Necessary for our legitimate interests (to develop our services and grow our business)

To manage our relationship with you which will include: (a) notifying you about changes to our terms or privacy policy; or (b) notifying you of publication / deletion of a review

Identity

Performance of a contract with you
Necessary for our legitimate interests (to ensure the efficient operation of our Service)

To allow you to connect, share to or link from your website or social media accounts.

Identity Technical Usage

Performance of a contract with you

To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.

Identity Technical Usage

Necessary for our legitimate interests (to study how customers use Our Site and products/services, to develop them, to grow our business and to inform our marketing strategy)

If you submit a review, that review may automatically be published on our Service including any Personal Data contained in that review. You can control what Personal Data (if any) is published in respect of any reviews submitted by you, and delete or amend a submitted review, by logging into your user profile on our Service.

We will only use your Personal Data when the law allows us to. Most commonly, we will use your Personal Data in the following circumstances:

  • Performance of Contract. This means processing Personal Data where it is necessary for compliance with a legal obligation that we are subject to.
  • Legitimate Interest. This means processing your Personal Data where it is necessary for the legitimate interests of our business (or those of a third party) in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Data for our legitimate interests. We do not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
  • Comply with a legal obligation. This means processing your Personal Data where it is necessary for compliance with a legal obligation that we are subject to.
  • Consent where you have given explicit opt-in consent to a particular processing activity. You have the right to withdraw consent to marketing at any time by contacting us

Change of purpose

We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your Personal Data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Retention of Data

We will only retain your Personal Data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your Personal Data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Notwithstanding the above, by law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes. In some circumstances you can ask us to delete your data (see Your legal rights below for further information) or we will anonymise your Personal Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Transfer Of Data

You consent to and acknowledge that your Personal Data may be transferred to or maintained on computers or servers located in the United States.

Many of our external third parties are based outside the UK so their processing of your Personal Data will involve a transfer of data outside the UK.

Whenever we transfer your Personal Data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data; and

Where we use certain service providers, we may use specific contracts approved for use in the UK which give Personal Data the same protection it has in the UK.

Please contact us if you want further information on the specific mechanism used by us when transferring your data.

Disclosure Of Data

We may share your Personal Data with the parties set out below for the purposes set out in the table above.

We require all third parties to respect the security of your Personal Data and to treat it in accordance with the law. We do not allow our third-party service providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with our instructions.

Business Transaction

If Judge.me Ltd is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your Personal Data in the same way as set out in this privacy policy. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Disclosure to Law Enforcement

Under certain circumstances, Judge.me Ltd may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Legal Requirements

Judge.me Ltd may disclose your Personal Data in the good faith belief that such action is necessary to:

  • To comply with a legal obligation
  • To protect and defend the rights or property of Judge.me Ltd
  • To prevent or investigate possible wrongdoing in connection with the Service
  • To protect the personal safety of users of the Service or the public
  • To protect against legal liability

In particular, we may disclose Personal Data to HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom or United States who require reporting of processing activities in certain circumstances.

Professional advisors

Judge.me may disclose your Personal Data to professional advisers including lawyers, bankers, auditors and insurers based in the United Kingdom or the United States who provide consultancy, banking, legal, insurance and accounting services.

Performance of a contract with you

Judge.me may disclose your Personal Data to our third party platform partners including Shopify, Squarespace, WooCommerce and BigCommerce which allow us to integrate the services we provide onto your website.

Security Of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

You can read more about how we handle data securely on our Compliance Page

"Do Not Track" Signals

We do not support Do Not Track ("DNT"). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked.

You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

Your Rights

Judge.me Ltd aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

Whenever made possible, you can update your Personal Data directly within your account settings section. If you are unable to change your Personal Data, please contact us to make the required changes.

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the right:

  • To access and receive a copy of the Personal Data we hold about you
  • To rectify any Personal Data held about you that is inaccurate
  • To request the deletion of Personal Data held about you

You have the right to data portability for the information you provide to Judge.me Ltd. You can request to obtain a copy of your Personal Data in a commonly used electronic format so that you can manage and move it.

Please note that we may ask you to verify your identity before responding to such requests.

Additionally, if:

  • you are established in the European Economic Area (EEA);
  • you provide goods or services to customers in the EEA; or
  • you are otherwise subject to the requirements of the EU General Data Protection Regulation, Judge.me's use of personal information of any data subjects is also subject to our Data Processing Addendum: https://judge.me/dpa

Service Providers

We may employ third party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

A list of our service providers and the contractual relationships that we have in place with them can be found here

Analytics

We may use third-party Service Providers to monitor and analyse the use of our Service.

Google Analytics

  • Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.
  • You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.
  • For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/

HotJar

  • Hotjar allows to make the behavior of web and mobile site visitors visible. To opt out of Hotjar please go to the following link: https://www.hotjar.com/policies/do-not-track/ Hotjar also honors the Do Not Track header. This means that if you have the Do Not Track header installed, Hotjar will not track you.

Facebook Pixel

  • The Facebook pixel is an analytics tool offered by Facebook that measures the effectiveness of advertising by understanding the actions people take on a website.
  • You can manage the activity tracked by Facebook pixel in your settings: https://www.facebook.com/off_facebook_activity. This includes viewing and clearing existing activity, as well as opting out of tracking future activity from businesses and organisations which you visit outside of Facebook, including activity on Judge.me and partner websites.
  • For more information on the privacy practices of Facebook, please visit their policy web page: https://www.facebook.com/policy

Behavioural remarketing

Judge.me Ltd uses remarketing services to advertise on third party websites to you after you visited our Service. We and our third-party vendors use cookies to inform, optimize and serve ads based on your past visits to our Service.

Google AdWords

  • Google AdWords remarketing service is provided by Google Inc.
  • You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: https://adssettings.google.com/
  • Google also recommends installing the Google Analytics Opt-out Browser Add-on – https://tools.google.com/dlpage/gaoptout – for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics.
  • For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

Facebook

AdRoll

Reddit

Quora

  • Quora remarketing services is provided by Quora, Inc.
  • For more information on the privacy practices of Quora, please visit the Quora Privacy Policy web page: https://www.quora.com/about/privacy

Payments

We may provide paid products and/or services within the Service. In the case that the payment is not collected directly via your ecommerce platform, we use third-party services for payment processing (e.g. payment processors). We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The payment processors we work with are:

Stripe

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children's privacy

Our Service does not address anyone under the age of 13 ("Children").

We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

CCPA Privacy

This section is for residents of the State of California only and supplements the information contained in this Privacy Policy. It applies solely to visitors, users, and others who reside in the State of California. The California Consumer Privacy Act (CCPA) uses different defined terms to GDPR. In this section, Judge.me use the CCPA terms. Unless otherwise defined, these have the meanings given in the CCPA.

We are aware of and will comply with the requirements of the CCPA (including any regulations made under the CCPA) in connection with our services we provide to you.

Please refer to the above sections with regards to the categories of personal information collected, sources of personal information and use of personal information.

Disclosure of personal information for business purposes or commercial purposes

Judge.me may use or disclose and may have used or disclosed in the last twelve (12) months the following categories of personal information for business or commercial purposes:

  • Category A: Identifiers
  • Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
  • Category F: Internet or other similar network activity

Please note that the categories listed above are those defined in the CCPA. This does not mean that all examples of that category of personal information were in fact disclosed, but reflects our good faith belief to the best of our knowledge that some of that information from the applicable category may be and may have been disclosed.

When Judge.me disclose personal information for a business purpose or a commercial purpose, Judge.me enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

Your Rights under the CCPA

The CCPA provides California residents with specific rights regarding their personal information. If you are a resident of California, you have the following rights:

The right to notice. You have the right to be notified which categories of personal information are being collected and the purposes for which the personal information is being used.

The right to request. Under CCPA, you have the right to request that Judge.me disclose information to you about our collection, use, sale, disclosure for business purposes and share of personal information. Once Judge.me receive and confirm your request, Judge.me will disclose to you:

  • The categories of personal information Judge.me collected about you
  • The categories of sources for the personal information Judge.me collected about you
  • Our business or commercial purpose for collecting that personal information
  • The categories of third parties with whom Judge.me share that personal information
  • The specific pieces of personal information Judge.me collected about you
  • If Judge.me sold your personal information or disclosed your personal information for a business purpose, Judge.me will disclose to you:
    (a) The categories of personal information categories sold
    (b) The categories of personal information categories disclosed

The right to say no to the sale of personal information (opt-out). You have the right to direct Judge.me to not sell your personal information. Judge.me does not sell your personal information and so this right is not relevant to you.

The right to delete personal information. You have the right to request the deletion of your personal information, subject to certain exceptions. Once Judge.me receives and confirms your request, Judge.me will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. Judge.me may deny your deletion request if retaining the information is necessary for Judge.me or our service providers to:

  • Complete the transaction for which Judge.me collected the personal information, provide goods or services that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  • Debug products to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
  • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with Judge.me.
  • Comply with a legal obligation.
  • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

The right not to be discriminated against. You have the right not to be discriminated against for exercising any of your consumer's rights, including by:

  • Denying goods or services to you
  • Charging different prices or rates for goods or services, including the use of discounts or other benefits or imposing penalties
  • Providing a different level or quality of goods or services to you
  • Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services

Exercising your CCPA rights

In order to exercise any of your rights under the CCPA, and if you are a California resident, you can contact Judge.me by email at support@judge.me

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable request related to your personal information.

Your request to Judge.me must:

  • Provide sufficient information that allows Judge.me to reasonably verify you are the person about whom Judge.me collected personal information or an authorized representative
  • Describe your request with sufficient detail that allows Judge.me to properly understand, evaluate, and respond to it

Judge.me cannot respond to your request or provide you with the required information if Judge.me cannot:

  • Verify your identity or authority to make the request
  • And confirm that the personal information relates to you

Judge.me will disclose and deliver the required information free of charge within 45 days of receiving your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonable necessary and with prior notice.

Any disclosures Judge.me provide will only cover the 12-month period preceding the verifiable request's receipt.

For data portability requests, Judge.me will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

Do not sell my Personal information

You have the right to opt-out of the sale of your personal information. Judge.me does not sell your personal information and so does not provide an opt-out link.

"Do Not Track" Policy as Required by California Online Privacy Protection Act (CalOPPA)

Our service does not respond to Do Not Track signals.

However, some third party websites do keep track of your browsing activities. If you are visiting such websites, you can set your preferences in your web browser to inform websites that you do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of your web browser.

Your California Privacy Rights (California's Shine the Light law)

Under California Civil Code Section 1798 (California's Shine the Light law), California residents with an established business relationship with Judge.me can request information once a year about sharing their personal information with third parties for the third parties' direct marketing purposes.

If you'd like to request more information under the California Shine the Light law, and if you are a California resident, you can contact Judge.me using the contact information provided below.

California Privacy Rights for Minor Users (California Business and Professions Code Section 22581)

California Business and Professions Code section 22581 allow California residents under the age of 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted.

To request removal of such data, and if you are a California resident, you can contact Judge.me using the contact information provided below, and include the email address associated with your account.

Be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

Changes to this privacy policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact us

If you have any questions about this Privacy Policy, please contact us by email: support@judge.me

If you are a data subject based within the European Union, you may also contact our representative for GDPR purposes, who's details are as follows:

Buckworths (Ireland) Limited, c/o Workhub, 77 Lower Camden Street, Dublin SO2 XE80, Ireland represented by Gloria Conselmo
Email: office@buckworths.com