Privacy Policy

Last updated 15 July 2026

This Privacy Policy explains how WannaCall Ltd (WannaReview, “we”, “our” or “us”) collects, uses, shares and protects your personal information when you use WannaReview, and the rights you have over that information. WannaReview is a Wannaverse product and a reputation platform: it lets people and businesses collect verified reviews, recommendations and career feedback, own that record, and display it on a public profile or embed it elsewhere.

WannaCall Ltd is the data controller, registered in England & Wales (company no. 13112226), at 124 City Road, London, England, EC1V 2NX. If you have any questions, contact us at support@wannareview.com.

1. Who this policy covers

WannaReview has two kinds of user, and we handle information for both:

Account holders– people and businesses who create a profile to collect and display reviews.
Reviewers– people who leave a verified review for an account holder. Reviewers confirm their identity through a third-party provider but do not need to create a WannaReview account.

It also applies to visitors who browse public profiles and our marketing site.

2. Information we collect

Information you provide as an account holder

Account details: your name and email address. Your password is set and stored by our authentication provider, Amazon Cognito, and is never visible to us in readable form.
Profile content: your chosen handle, display name, headline, biography, website, location, skills, social and external links, and any profile photo or company logo you upload.
Collection settings: the review request forms you build, the review types you enable, and your moderation preferences.
Communications: messages you send us for support and the email address you use to reach us.

Information from reviewers

Verified identity: when a reviewer verifies with LinkedIn, Microsoft or Google, we receive their name and verified email address from that provider (see section 3).
Review content: the rating, written feedback, and any optional details such as role, company, photos or video the reviewer chooses to submit.

Information collected automatically

Technical and usage data: IP address, device and browser type, and diagnostic and usage logs generated as you use the service, used to keep it secure and reliable.
Analytics: if you consent, Google Analytics data about how the site is used (see section 9). Nothing analytics-related is set until you accept.

Uploaded images and video are stored in Amazon S3. We do not buy personal information from data brokers or other third parties.

3. Reviewer identity verification

A review is only trustworthy if it comes from a real, identifiable person. To that end, reviewers verify their identity through an established identity provider – currently LinkedIn, Microsoft or Google– using the OpenID Connect standard. When a reviewer completes this step, the provider returns their name and verified email address to us. We use that data only to confirm the reviewer is genuine, to attribute the review, and to prevent duplicate or fraudulent submissions.

We never post anything on the reviewer’s behalf, and we do not gain access to their contacts or their account beyond the name and email they consent to share. Each provider’s own privacy policy governs how they handle that authentication.

4. How we use your information

Create, authenticate and secure accounts, and keep you signed in.
Operate the core service: build forms, collect reviews, verify reviewers, moderate submissions, and publish approved reviews.
Host public profiles and generate embeddable widgets you choose to display.
Send transactional email, such as review requests you initiate, notifications when a review is left, and team invitations.
Detect, prevent and investigate spam, fraud, abuse and security incidents.
Provide customer support and respond to your enquiries.
Understand and improve the service, including through consented analytics.
Comply with legal obligations and enforce our terms.

5. Legal bases for processing

Under the UK GDPR and EU GDPR, we rely on the following bases:

Contract: to provide the service to account holders who have signed up.
Consent: for analytics cookies, and for the identity data a reviewer chooses to share when verifying. You may withdraw consent at any time.
Legitimate interests: to keep the service secure, prevent spam and fraud, and improve our product, balanced against your rights.
Legal obligation: where we must process information to comply with the law.

6. Information that is public by design

WannaReview exists to display reputation, so some information is deliberately public. Your profile (handle, display name, headline, bio, photo or logo, links) and any review you approve for publication are shown on your public profile at https://wannareview.com/your-handle and in any widget you embed. A reviewer’s name and the provider they verified with appear alongside their published review; their email address is never shown publicly. Please do not put information in a profile or review that you would not want to be public. You control what is published, and you can unpublish or delete reviews and edit or remove your profile at any time.

7. Teams, organisations and manager visibility

Business accounts can invite team members by email and set a reporting structure. Within an organisation, colleagues can exchange peer feedback, and a person’s managers in their reporting line can view the peer feedback relating to those they manage, for performance and recognition purposes. Peer feedback is not published to a public profile unless the subject chooses to publish it. If you are invited to a team, the inviting organisation can see that you were invited and your membership status.

We do not sell your personal information. We share it only with service providers who process it on our behalf under contract, and where the law requires. These include:

Amazon Web Services (AWS): hosting, database (DynamoDB), file storage (S3), authentication (Cognito) and email delivery, primarily in the London (eu-west-2) region.
Identity providers (LinkedIn, Microsoft, Google): only during reviewer verification, as described in section 3.
Email delivery: transactional email is sent through our mail infrastructure at mail.wannaverse.com.
Google Analytics: only where you have consented (section 9).

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition or sale of assets, in which case we will ensure it remains protected under terms consistent with this policy.

9. Cookies and analytics

We use a small number of strictly necessary cookies to sign you in and keep the service secure, and, only with your consent, Google Analytics to understand how the site is used (with IP anonymisation). You choose whether to accept analytics through our cookie banner, and can change your mind at any time. Full detail is in our Cookie Policy. We do not use advertising cookies.

10. Data retention

We keep account and profile information for as long as your account is active. When you delete your account, we remove your profile and the reviews attached to it from the live service, except where we must keep limited information to comply with the law, resolve disputes, prevent abuse, or preserve the integrity of verified reviews (for example, a reviewer’s verified email may be retained to stop repeat fraudulent submissions). Residual copies may persist in secure backups for a limited period before being overwritten.

11. International data transfers

Your information is stored primarily in the United Kingdom (AWS London, eu-west-2). Some of our providers may process information in other countries. Where information is transferred outside the UK or European Economic Area, we rely on appropriate safeguards such as UK adequacy regulations or Standard Contractual Clauses. You can request details of these safeguards using the contact details below.

12. Security

We use technical and organisational measures to protect your information, including encryption in transit (HTTPS), password hashing handled by Amazon Cognito, signed and expiring session tokens, scoped access controls on our database and file storage, and least-privilege access to production systems. No method of transmission or storage is completely secure, but we continually review and improve our safeguards.

13. Your rights

Depending on where you live, you may have the right to access a copy of your personal information; to correct inaccurate information; to request erasure; to restrict or object to processing; to data portability; and to withdraw consent where we rely on it. You can exercise most of these directly in your settings, or by contacting us at support@wannareview.com. We will respond within the timeframes required by law. If you are in the UK or EEA and believe we have handled your information unlawfully, you may complain to your data protection authority (in the UK, the Information Commissioner’s Office, ico.org.uk).

14. Children

WannaReview is not intended for anyone under 18. We do not knowingly collect information from children. If we learn that we have, we will delete the account and its data. If you believe a child has provided us information, contact us at support@wannareview.com.

15. Automated decision-making

We use basic automated spam scoring to flag potentially abusive review submissions for human review. This does not, by itself, produce legal or similarly significant effects: account holders control whether reviews are published, and flags are reviewed by a person. We do not carry out automated decision-making that produces legal effects concerning you without human involvement.

16. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the current version. If we make material changes, we will notify you by posting a prominent notice or contacting you directly.

17. How to contact us

For any privacy question or request, email support@wannareview.com or write to WannaCall Ltd, 124 City Road, London, England, EC1V 2NX. For matters concerning the wider Wannaverse family, our data protection contact is contact@wannaverse.com. This policy is governed by the laws of England & Wales.