Privacy Policy
Last updated: March 2026
Review Magnet is a product of ABL Media Group. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website at review-magnet.ie and any associated services.
1. Who We Are
Data controller: ABL Media Group, Ireland.
Contact: [email protected]
Where you use Review Magnet to collect reviews from your own customers, you are the data controller for those individuals and we act as your data processor. The terms of that processing are set out in our Data Processing Agreement.
2. What Data We Collect
- Account data — name, email address, and business name when you create an account.
- Order data — name, email, phone number, shipping and billing address when you place an order.
- Payment data — payments are processed by Stripe. We do not store card details on our servers.
- Usage data — IP address (hashed), browser type, pages visited, and scan events from your NFC cards and QR codes.
- Audit tool data — when you use our Free Google Business Audit, we record the business audited, your hashed IP address, and your account ID if you are logged in.
- Feedback data — messages submitted through your review funnel by your customers.
3. Why We Collect It (Legal Basis)
- Contract performance — to process orders, programme and ship products, and provide your dashboard.
- Legitimate interests — to operate and improve our platform, prevent abuse, and provide analytics to account holders.
- Legal obligation — to maintain financial records as required by Irish law.
- Consent — for any optional marketing communications, where separately requested.
4. How We Use Your Data
- To fulfil and ship your order
- To programme your NFC cards and QR products with your link
- To provide your review funnel and dashboard
- To send transactional emails (order confirmation, shipping updates, monthly reports)
- To limit free tool usage and prevent abuse
- To comply with legal and tax obligations
5. Data Sharing
We do not sell your personal data. We share data only with:
- Stripe — payment processing
- AWS — cloud hosting and database infrastructure
- Resend — transactional email delivery
- Google — Places API used for the audit tool (business name lookups only, no personal data sent)
All processors are bound by data processing agreements and comply with GDPR.
6. Data Retention
- Order and payment records: 7 years (Irish Revenue requirement)
- Account data: retained while your account is active, deleted within 30 days of account closure on request
- Scan and audit logs: 24 months
- Feedback entries: deleted within 30 days of your request
7. Your Rights (GDPR)
Under GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (subject to legal retention obligations)
- Object to or restrict processing
- Data portability
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Data Protection Commission Ireland at dataprotection.ie.
8. Cookies
We use strictly necessary cookies to maintain your session and shopping cart. We do not use advertising or third-party tracking cookies. No cookie consent banner is required for strictly necessary cookies under the ePrivacy Regulations.
9. Security
All data is transmitted over HTTPS. IP addresses stored in our audit and scan logs are hashed with SHA-256 and cannot be reversed. Payment data is handled entirely by Stripe and never touches our servers.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be notified by email to registered account holders. The current version is always available at review-magnet.ie/privacy.
11. Contact
ABL Media Group — Review Magnet
Ireland
[email protected]