Privacy Policy

This Privacy Policy explains how Quill Media Ltd ("we", "us", "our"), a company registered in England and Wales (Company Number: 07388080), operating as Review Multiplier, collects, uses, discloses, and safeguards your information when you use our Shopify application and related services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Data Controller: Quill Media Ltd Contact: support@reviewmultiplier.ai Website: https://reviewmultiplier.ai

We collect information that you provide directly to us and information automatically collected through your use of our Service: **Account Information:** • Shop domain and Shopify store information • Business contact details (name, email, phone) • Billing and subscription information • Account preferences and settings **Review Data:** • Customer reviews and ratings • Review metadata (timestamps, products, platforms) • Customer information associated with reviews • Review response and moderation data **Usage Information:** • Service interaction data • Feature usage analytics • Performance metrics • Error logs and debugging information **Communication Data:** • Support ticket content • Email correspondence • Feedback and survey responses

We use the collected information for the following purposes: **Service Provision:** • Operating and maintaining Review Multiplier • Processing and displaying reviews • Syncing data across platforms • Providing customer support **Service Improvement:** • Analyzing usage patterns • Developing new features • Optimizing performance • Fixing bugs and issues **Communication:** • Sending service updates • Responding to inquiries • Providing technical support • Marketing communications (with consent) **Legal Compliance:** • Meeting legal obligations • Enforcing our Terms of Service • Protecting rights and safety • Preventing fraud and abuse

Under UK GDPR, we process your data based on the following legal grounds: **Contract Performance:** Processing necessary to fulfill our service agreement with you, including providing Review Multiplier functionality and support. **Legitimate Interests:** Processing for our legitimate business interests, such as improving our services, preventing fraud, and ensuring platform security. **Consent:** Where we rely on consent (e.g., marketing communications), you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. **Legal Obligation:** Processing necessary to comply with legal requirements, court orders, or regulatory obligations.

We may share your information in the following circumstances: **Service Providers:** • Shopify (platform integration) • Cloud hosting providers (data storage) • Analytics services (usage tracking) • Payment processors (subscription billing) • Email service providers (communications) **Business Transfers:** If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. **Legal Requirements:** When required by law, court order, or governmental authority, or to protect our rights and safety. **With Your Consent:** We may share your information for other purposes with your explicit consent. We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We implement appropriate technical and organizational measures to protect your information: **Security Measures:** • Encryption in transit (SSL/TLS) • Encryption at rest for sensitive data • Access controls and authentication • Regular security assessments • Incident response procedures • Employee training on data protection **Data Breach Response:** In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach.

Your information may be transferred to and processed in countries outside the UK, including: • United States (cloud hosting and services) • European Union countries We ensure appropriate safeguards are in place for international transfers: • Standard contractual clauses approved by the ICO • Adequacy decisions where applicable • Appropriate technical and organizational measures You have the right to request information about the safeguards we use for international data transfers.

Under UK GDPR, you have the following rights regarding your personal data: **Access:** Request a copy of your personal data we hold **Rectification:** Request correction of inaccurate or incomplete data **Erasure:** Request deletion of your data ("right to be forgotten") **Restriction:** Request limitation of processing in certain circumstances **Portability:** Receive your data in a structured, machine-readable format **Objection:** Object to processing based on legitimate interests **Automated Decision-Making:** Right not to be subject to solely automated decisions To exercise these rights, contact us at support@reviewmultiplier.ai. We will respond within one month of receiving your request.

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy: **Active Accounts:** Data is retained while your account is active and you use our services **Post-Termination:** • Account data: Deleted within 90 days of account closure • Review data: Retained for 12 months or as specified by you • Legal records: Retained as required by law (typically 6-7 years) • Anonymized data: May be retained indefinitely for analytics You may request deletion of your data at any time, subject to legal retention requirements.

Our website and service use cookies and similar technologies: **Essential Cookies:** Required for service functionality and security **Analytics Cookies:** Help us understand service usage and improve performance **Preference Cookies:** Remember your settings and preferences You can control cookies through your browser settings. Disabling certain cookies may limit service functionality.

Review Multiplier integrates with various third-party services: • Shopify: Platform integration and data sync • Review platforms: Data import/export • Analytics providers: Usage tracking • Communication services: Email and notifications These services have their own privacy policies. We encourage you to review them to understand their data practices.

We may send you marketing communications about our services if: • You have opted in to receive them • You are an existing customer (soft opt-in) • We have a legitimate interest You can opt out of marketing communications at any time by: • Clicking "unsubscribe" in any marketing email • Contacting us at support@reviewmultiplier.ai • Updating your account preferences Opting out of marketing does not affect service-related communications.

Review Multiplier is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. **Notification of Changes:** • Material changes will be notified via email or service announcement • The "Last updated" date will be revised • Continued use after changes constitutes acceptance We encourage you to review this policy periodically.

For privacy-related questions, concerns, or to exercise your rights: **Data Protection Contact:** Quill Media Ltd Trading as Review Multiplier Email: support@reviewmultiplier.ai Website: https://reviewmultiplier.ai **Supervisory Authority:** You have the right to lodge a complaint with the Information Commissioner's Office (ICO): Website: https://ico.org.uk Phone: 0303 123 1113 We will always try to resolve any concerns directly before you need to contact the ICO.