Legal

Privacy Policy

Last reviewed: April 2026

This privacy notice tells you what to expect us to do with your personal information.

Who we are

More Kudos Limited is the data controller for the personal information described in this notice. We are a company registered in England and Wales (company number 16742483).


What information we collect, use, and why

To provide our services and deliver goods (including Instant Review Technology™ products):

  • Your name and the name of your business
  • Email address, phone number and postal address
  • Bank account details (for setting up Direct Debit payments via GoCardless)
  • Your subscription plan, contract dates and payment history

To generate AI-powered review analysis reports for your business:

  • Customer reviews from platforms you have connected (such as Google, TripAdvisor, Trustpilot or Facebook)
  • Review text, ratings, dates and reviewer display names as published on those platforms

To operate your account and the client portal:

  • Your name and email address
  • Login activity (timestamps and authentication tokens)
  • Account preferences and settings

To deal with enquiries via the contact form:

  • Your name, email address and the content of your message

Lawful bases

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. You can find out more about lawful bases on the ICO's website.

Providing our services, delivering goods, and operating your account:

Contract — we need to collect and use this information to enter into and carry out our contract with you. This includes processing your subscription, dispatching Instant Review Technology™ products, generating your review analysis reports, and giving you access to the client portal.

Dealing with enquiries, complaints or claims:

Legitimate interests — we use your information because it benefits both you and our organisation, without causing an undue risk of harm to anyone. Our legitimate interests are: responding promptly to enquiries from prospective and existing customers, and maintaining effective communication to support our business operations.


Your data protection rights

Under UK data protection law, you have a number of rights over your personal information. Which rights apply may depend on the lawful basis we rely on. You can find out more about your rights and the exemptions which may apply on the ICO's website.

  • Your right of accessYou have the right to ask us for copies of your personal information.
  • Your right to rectificationYou have the right to ask us to correct or complete personal information you think is inaccurate or incomplete.
  • Your right to erasureYou have the right to ask us to delete your personal information in certain circumstances.
  • Your right to restriction of processingYou have the right to ask us to limit how we use your personal information in certain circumstances.
  • Your right to object to processingYou have the right to object to the processing of your personal data in certain circumstances, including where we rely on legitimate interests.
  • Your right to data portabilityYou have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
  • Your right to withdraw consentIf we ever rely on your consent as our lawful basis, you have the right to withdraw that consent at any time.

You will not normally have to pay a fee to exercise any of these rights. To make a request, please email us at hello@morekudos.co.uk. We will respond within one month.


Automated decision-making

We use artificial intelligence (provided by Anthropic) to analyse customer reviews and generate reports for your business. These reports summarise themes, sentiment and suggested actions based on the review data you have connected. The AI-generated content is provided as a business tool to support your decision-making — it does not make any decisions about you as an individual, and it does not produce any legal or similarly significant effects on any person. No automated decisions are made about you based solely on automated processing.


Where we get personal information from

We collect personal information in the following ways:

  • Directly from you, when you sign up, contact us, or use the client portal
  • From third-party review platforms (such as Google, TripAdvisor, Trustpilot or Facebook), where we retrieve publicly available reviews about your business using their official APIs

How long we keep information

We only keep personal information for as long as we need it. The specific retention periods are:

Type of dataRetention periodReason
Subscriber account data (name, email, address, subscription details)Duration of the contract plus 6 yearsTo meet our legal obligations under tax and accounting law (Taxes Management Act 1970, Companies Act 2006)
Payment and billing recordsDuration of the contract plus 6 yearsTo meet our legal obligations under tax and accounting law
Customer reviews and AI-generated reportsDuration of the contract plus 12 monthsTo allow you to access historical reports during any wind-down period
Contact form enquiries12 months from the date of your messageTo allow us to follow up and resolve any ongoing queries
Login and authentication records12 months from creationFor security and troubleshooting purposes

When a retention period expires, we securely delete the data or anonymise it so that it can no longer identify you.


Who we share information with

Data processors

We use the following third-party organisations to process personal data on our behalf. Each acts under our instructions and is bound by a data processing agreement:

OrganisationWhat they do for usLocation
AnthropicProvides the AI technology we use to analyse customer reviews and generate reportsUnited States
ResendDelivers transactional emails to our subscribers on our behalf (such as welcome emails and report notifications)United States
RailwayProvides cloud hosting and database infrastructure on which our platform operatesUnited States
VercelProvides cloud hosting on which our website frontend operatesUnited States

Separate data controllers

We also share personal data with the following organisations who act as independent data controllers in their own right (meaning they decide how and why your data is used under their own privacy policies):

OrganisationWhat they doLocation
GoCardlessProcesses Direct Debit payments for our subscription service. GoCardless acts as an independent data controller for payment data. You can read their privacy notice at gocardless.com/privacy.United Kingdom

Sharing information outside the UK

Some of our data processors are based in the United States. Where we transfer personal data outside the UK, we ensure an appropriate level of protection is in place by relying on one of the following transfer mechanisms:

OrganisationCountryTransfer mechanism
ResendUnited StatesUK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge) — Resend is certified under the Data Privacy Framework
VercelUnited StatesUK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge) — Vercel is certified under the Data Privacy Framework
AnthropicUnited StatesUK Addendum to EU Standard Contractual Clauses (incorporated into their Data Processing Addendum)
RailwayUnited StatesUK Standard Contractual Clauses (incorporated into their Data Processing Agreement)

You can contact us at hello@morekudos.co.uk to request a copy of the safeguards we have in place for any of these transfers.


Cookies

Our website uses only cookies that are strictly necessary for the site to function correctly. These include session cookies for authentication when you log in to the client portal. We do not use any advertising, analytics or tracking cookies.

Because these cookies are strictly necessary to provide the service you have requested, they do not require your consent under the Privacy and Electronic Communications Regulations (PECR).


How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we've used your data after raising a complaint with us, you have the right to complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113

Website: ico.org.uk/make-a-complaint


Changes to this privacy notice

We keep this privacy notice under regular review and will update it if our data processing activities change. The “last reviewed” date at the top of this page shows when it was last updated. If we make significant changes that affect how we use your personal information, we will notify active subscribers by email before the changes take effect.

More Kudos Limited (company number 16742483). Privacy notice last reviewed April 2026. Prepared in accordance with the ICO's guidance for small organisations.