Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Feefo is a verified customer reviews and ratings platform that collects feedback from genuine buyers and displays ratings badges and review widgets on merchant websites. It works by sending feedback invitations on behalf of the merchant and embedding a widget that loads review content and may set browser cookies. Feefo acts as a data processor when sending invitations and as a controller for the feedback it manages, and it relies on legitimate interest for the feedback request itself. The on site widget uses cookies that are not strictly necessary, so the ePrivacy Directive and GDPR require prior consent before it loads. Feefo is operated from the United Kingdom, which has an adequacy decision, and it appoints an EU representative. Merchants should obtain consent for the widget, sign a processing agreement and document the arrangement.
Feefo is a verified customer reviews and ratings platform used by merchants to collect authentic feedback and display trust badges and review widgets on their websites. Reviews are tied to confirmed purchases, which is intended to make the feedback genuine and verifiable.
Feefo collects reviews by sending feedback invitations to customers after a purchase and then publishes ratings and reviews through badges and widgets embedded on the storefront. It serves this content from Feefo infrastructure and offers a dashboard for merchants to manage and respond to feedback.
To send invitations Feefo processes customer names, email addresses and order details supplied by the merchant. On the website the widget can read browser and device information and may set cookies for authentication and to track which pages are viewed. Customers who leave a review provide their name, rating and review text.
Feefo acts as a processor when sending invitations and as a controller for the feedback it manages, relying on legitimate interest for the invitation. The on site widget sets cookies that are not strictly necessary, so the ePrivacy Directive requires prior consent. The merchant remains responsible for transparency and for honouring data subject rights.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
The widget should be blocked until the visitor consents, and declining must keep it disabled. Feefo is operated from the United Kingdom, which benefits from an adequacy decision, and it appoints an EU representative. Where any processing occurs outside the EEA or the UK, Standard Contractual Clauses apply and should be referenced in your privacy notice.
Place the Feefo widget behind your consent manager, sign a data processing agreement, and document the legitimate interest assessment for invitations. List the cookies in your cookie policy, set retention periods and provide a clear privacy notice. Test that declining consent keeps the widget fully disabled.
Websites using Feefo must obtain user consent under GDPR regulations.
DPIA considerations
A full data protection impact assessment is not usually mandatory for a standard reviews widget, but a documented assessment is recommended because Feefo processes customer contact details and feedback. Consider the use of feedback invitations sent to customer email addresses, the legitimate interest balancing for those invitations, and the cookies set by the on site widget. Document the controller and processor roles, the legal bases and retention periods. Where reviews are combined with profiling or marketing the risk increases.
Sample consent text
We use Feefo to show verified customer reviews and ratings. This may set cookies and load content from Feefo. Please accept to enable reviews, or decline to keep them disabled.
Third-party domains contacted
feefo.comapi.feefo.comcdn.feefo.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| feefo_session | third party | Session | Maintains a session for the Feefo reviews widget while the visitor browses the site. |
| feefo_visitor | third party | Up to 1 year | Recognises returning visitors and supports display of review content across pages. |
Feefo uses cookies for user preferences — inform visitors with a consent banner.
The Feefo widget and ratings badge can set cookies used for authentication and to track which pages display reviews, and may read browser and device information. Exact names vary by configuration and version, so audit your storefront with browser tools to confirm what is placed. These cookies are not strictly necessary for the store to function.
Yes, for the on site widget. Because its cookies are not strictly necessary, the ePrivacy Directive and GDPR require prior consent before the widget loads in the EEA and the UK. The feedback invitation itself relies on legitimate interest, but the storage on the visitor device still requires consent first.
Feefo relies on legitimate interest to send feedback invitations on behalf of the merchant. For the cookies set by the on site widget, consent is the appropriate basis under ePrivacy. The merchant should document a legitimate interest assessment for invitations and obtain consent for the widget.
Feefo is operated from the United Kingdom, which benefits from a European Commission adequacy decision, so transfers there are permitted. Feefo appoints an EU representative. Where any processing occurs outside the EEA or the UK, Standard Contractual Clauses apply and should be referenced in your privacy notice.
A DPIA is not always mandatory for a standard reviews service, but a documented assessment is recommended because Feefo processes customer contact details and feedback. If you combine reviews with profiling or wider marketing, or process at large scale, a DPIA becomes advisable.
Place the Feefo widget behind your consent manager so it loads only after consent, sign a data processing agreement, document the legitimate interest assessment for invitations, and list the cookies in your cookie policy. Then test that declining keeps the widget disabled.
Alternatives include other verified review platforms such as Trustpilot, Reviews.io, Yotpo, Okendo and PowerReviews. Most send invitations and load on site widgets that set cookies, so the same consent, legal basis and transfer considerations apply regardless of provider.
List Feefo under functional or marketing cookies in your cookie policy, describe its purpose, name the provider and country, indicate the cookies and their durations, and link to the Feefo privacy policy. Keep the entry in sync with what your consent manager blocks and allows.