Privacy policy

1. Who processes personal data

For seller account, billing, access and security data, the feedback.page provider acts as data controller. Its identity and contact details will be completed before production.

For buyer feedback, purchase information and support requests, the brand presenting the form normally acts as controller and feedback.page processes data on that brand's behalf. The brand name is shown on the product page.

2. Data we may collect

We may process ratings, selected variants, comments, dates and case status. If a buyer chooses to identify a purchase, we may also process their name, email address and order number.

We process limited technical session and security data, such as IP address, browser information and anti-fraud or CAPTCHA results. Seller account data may include credentials, profile, plan and configured billing details.

3. Purposes and legal bases

Data is used to provide the service, deliver coupons, validate purchases, manage issues, secure the platform, answer requests and comply with legal obligations. Depending on the context, processing may rely on performance of a service, legitimate interests in operating and protecting the platform, legal obligations or consent.

Brand marketing messages are only sent where the buyer has opted in. Consent may be withdrawn at any time without affecting earlier processing.

4. Recipients and vendors

Buyer data is available to the relevant brand and to vendors required for hosting, email, security and support. We do not sell personal data. Actual processors and safeguards for any international transfer will be documented before production.

Security checks may use Cloudflare Turnstile, which processes the technical data required to prevent automated submissions under its own terms.

5. Retention and security

Data is kept for as long as needed to provide the service, manage the brand relationship, resolve claims and meet legal retention periods. Specific periods for each category will be documented before production.

We apply technical and organisational measures proportionate to risk. No system is entirely infallible; relevant incidents will be handled under applicable law.

6. Your rights

Individuals may request access, rectification, erasure, restriction, objection and portability, and may withdraw consent where applicable. Buyers should first contact the brand shown on the form; sellers may contact the provider using the details completed before production.

A complaint may also be filed with the Spanish Data Protection Agency or the competent supervisory authority in the individual's country of residence.