GDPR Policy

We are committed to processing personal data lawfully, fairly, and transparently. We apply data minimisation, purpose limitation, accuracy, storage limitation, integrity, confidentiality, and accountability across the Service.

We only collect data that is necessary to operate the Service, manage accounts, moderate reviews, provide analytics, and meet legal obligations.

We use personal data only for clearly defined purposes, including account management, review publication, fraud prevention, moderation, analytics, and legal compliance.

We take reasonable steps to keep personal data accurate and up to date. Users are responsible for providing correct information, and we may remove or correct content that appears false, misleading, or abusive.

We keep data only as long as needed for the purposes for which it was collected, unless a longer retention period is required by law.

We design our systems to reduce unnecessary processing, limit access, and protect user privacy by default. Where possible, we use pseudonymisation, aggregation, and restricted-access controls.

Depending on the context, we process data on the basis of:

• Contract performance.
• Legitimate interests.
• Consent.
• Legal obligation.
• Business purposes.

We support GDPR rights requests, including access, rectification, deletion, restriction, objection, and portability, subject to legal exceptions and verification of identity where necessary.

To promote truthful and honest reviews, we may use verification, moderation, risk scoring, duplicate detection, and abuse prevention measures. We may reject or remove reviews that appear fabricated, retaliatory, or otherwise unreliable.

All GDPR-related requests should be sent to: info@canaryspill.com.