Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Reevoo is a UK customer reviews and ratings platform that collects verified reviews from buyers and displays ratings, reviews, and user generated content on your site. The on site widgets can set cookies and process visitor data such as IP address, while review collection processes the contact and order data of purchasers. Operated from the United Kingdom, which has an EU adequacy decision, its widgets still set non essential cookies, so they require prior consent under the GDPR and the ePrivacy Directive.
Reevoo is a customer reviews and user generated content platform operated from the United Kingdom that gathers verified reviews from people who have bought a product and displays ratings and reviews on retailer and brand websites. Retailers invite buyers to review and embed Reevoo widgets to show that content. Adding the widgets loads scripts that can set cookies in the visitor browser.
Reevoo processes the reviews and ratings people submit, the reviewer name or initials shown, and the contact and order data used to invite verified buyers, along with technical data such as IP address when widgets load. The on site widgets can set cookies to measure engagement with reviews. Reviews are personal data about identifiable reviewers, and free text can include more than expected.
The review widgets can set non essential cookies, so the ePrivacy Directive requires prior consent for those, and the GDPR requires a lawful basis for inviting buyers and publishing their reviews. Review invitations to customers and the display of named reviews are personal data processing that must be transparent. Reevoo acts as your processor for this, so a data processing agreement is required.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Obtain prior, opt in consent before the Reevoo widget sets non essential cookies, and block it behind your consent banner. Inviting existing customers to review can often rely on legitimate interest or the soft opt in, with a clear opt out, while publishing a review needs the reviewer to understand it will be shown. Make cookie consent specific and easy to withdraw.
Reevoo is operated from the United Kingdom, which benefits from a European Commission adequacy decision, so transfers to the UK do not require additional safeguards such as SCCs. Confirm whether any subprocessors operate outside adequate countries and apply Standard Contractual Clauses and a transfer impact assessment if they do. Record the data locations in your documentation.
To use Reevoo compliantly, gate its widget cookies behind consent, set a clear lawful basis for review invitations, and sign a data processing agreement. Tell reviewers how their review and name will be displayed, set retention limits, and moderate free text for personal data. List Reevoo in your cookie policy and privacy notice and review its subprocessors periodically.
Websites using Reevoo must obtain user consent under GDPR regulations.
DPIA considerations
Reevoo processes reviewer identities, purchase data used for invitations, and review content, and its widgets set cookies, which shapes its risk profile, though UK adequacy lowers transfer risk. Key DPIA points: (1) processing of purchaser contact and order data to invite verified reviews; (2) publication of named or attributable reviews, which is personal data; (3) widget cookies that require consent; (4) data processed in the UK (an adequate country) and any subprocessors elsewhere; (5) the need for transparency to reviewers, moderation of free text, and retention limits. A DPIA is advisable for large scale review programmes.
Sample consent text
We use Reevoo to collect and display verified customer reviews. With your consent, the Reevoo widget sets cookies to measure engagement with reviews and processes technical data such as your IP address. If you submit a review, your review and the name or initials you choose may be published. Reevoo is operated from the United Kingdom, which has an EU adequacy decision. You can withdraw your cookie consent at any time.
Third-party domains contacted
reevoo.commark.reevoo.comcdn.reevoo.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| reevoo_session | Functional | Session | Maintains the review widget session and state during a visit. |
| reevoo_engagement | Analytics | 1 year | Measures engagement with the reviews and ratings displayed on the page. |
| reevoo_visitor | Analytics | 1 year | Stores a visitor identifier used to attribute interactions with reviews. |
Reevoo uses cookies for user preferences — inform visitors with a consent banner.
The Reevoo on site widgets can set cookies that measure engagement with reviews and remember widget state. These are typically non essential and require consent. Review collection by email or link does not rely on website cookies.
Yes for the widget cookies, because they are non essential, so obtain prior, opt in consent before they load. For inviting customers to review, you need a lawful basis and transparency, and reviewers must understand their review may be published.
The widget cookies rely on consent (Art. 6(1)(a)) and the ePrivacy Directive. Inviting existing customers to review can rely on legitimate interest (Art. 6(1)(f)) or the soft opt in, and publishing reviews relies on the reviewer being informed, often with consent.
Reevoo is based in the United Kingdom, which has an EU adequacy decision, so transfers to the UK do not need SCCs. Check whether any subprocessors are outside adequate countries and apply Standard Contractual Clauses and a transfer impact assessment if so.
A DPIA is advisable for large scale review programmes. Assess the purchaser data used for invitations, the publication of named reviews, the widget cookies, subprocessor locations, and your retention periods.
Block the widget cookies behind your consent banner, set a clear lawful basis for review invitations, and sign a data processing agreement. Tell reviewers how their review is displayed, moderate free text, set retention limits, and document Reevoo in your cookie policy and privacy notice.
Yes. EU based or self hosted reviews tools can keep review and customer data in the EU and reduce widget cookies. They provide verified reviews and ratings with more control over data location, though network reach may differ.
Add a Reevoo entry listing the widget cookies, their purposes and durations, and the fact that review and customer data is processed in the UK under an adequacy decision. Link to Reevoo''s privacy notice and review the entry when its cookies or subprocessors change.