Privacy policy
Last updated:
This policy explains what personal data TryTestimonials collects, why we collect it, who helps us process it, how long we keep it, and the rights you have over it. We collect as little as we can.
Who we are
TryTestimonials (trytestimonials.com) is run by George Ryder, a sole trader trading as RallyDigital, based in the United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, George Ryder is the data controller for the personal data described in this policy, except where we say otherwise below.
You can contact us about anything in this policy at george@trytestimonials.com.
Who this policy covers
- Owners: people who sign up for a TryTestimonials account to collect and display testimonials.
- Testimonial givers: people who fill in an owner's collection form to leave a testimonial.
- Visitors: people who browse this website, or a website or wall page that shows a TryTestimonials widget.
What we collect
If you have an account (owners)
- Your email address. You can sign in in one of two ways:
- With Google: we receive your email address from Google. Google also passes your name and a link to your profile picture. Our authentication provider stores these with your account record, but we do not use them for anything.
- With email and password: you give us your email address and choose a password. Your password is stored only as a secure one-way hash, so nobody, including us, can read it.
- Sign-in records: whether your email address has been confirmed, which sign-in methods your account uses, and when you last signed in.
- Your walls and settings: the names you give your walls, the colour and layout you choose, and the questions you set.
- Your plan and billing status: which plan you are on, and the customer and subscription references that Paddle gives us so we can match a payment to your account. We never receive or store your card or bank details.
If you leave a testimonial (testimonial givers)
- What you type into the form: your testimonial text, your name, and, if you choose to give them, your role, your company and a star rating.
- Your consent: a record that you ticked the box agreeing that your name, role and words may be shown publicly, and the date you sent it.
- A hashed IP address: when you send a testimonial, we turn your IP address into a one-way hash using a secret key, and store only that hash. We use it for one thing: limiting how many submissions can come from the same person in a short time, to stop spam. We never store your raw IP address, and the hash cannot be used to work out the original address or to identify you.
We do not ask testimonial givers for an email address, an account or any contact details.
If you visit this site or see a widget (everyone)
We do not use advertising, tracking pixels or tracking cookies, and we do not build profiles of visitors. The testimonial widget that owners embed on their websites sets no cookies and does not track the people who see it.
Analytics. To understand which pages of trytestimonials.com are useful, we use Vercel Web Analytics. It counts page views without using cookies or storing anything on your device. For each visit it records the page you viewed, the site that referred you, your country (worked out from your IP address), and your browser, operating system and type of device. It does not store your IP address. To tell whether two page views come from the same visit, it uses a one-way hash of the request that is discarded after 24 hours, so it cannot recognise you across days or across other websites. We only see totals, such as how many people visited the pricing page. Analytics runs only on our own website, never inside the widget on owners' sites.
Like any website, our hosting provider (Vercel) receives the technical details your browser sends with each request, such as your IP address, browser type and the page requested, and keeps them briefly in server logs so it can deliver the site, keep it secure and fix faults. We do not use these logs to identify or track you.
Cookies
We do not use any tracking, analytics or advertising cookies, so we do not show a cookie banner. Our analytics are cookieless (see above). Our marketing pages, the testimonial widget and the public collection form set no cookies at all.
When an owner signs in to their dashboard, we store a sign-in session in the browser so that they stay signed in. This is strictly necessary to provide the account they asked for, which is why it does not need consent under the Privacy and Electronic Communications Regulations. It is removed when you sign out.
Why we use your data, and our lawful basis
| What we do | Lawful basis under UK GDPR |
|---|---|
| Create and run your account, send account emails (confirming your address and resetting your password), store your walls, and show your approved testimonials | Performance of a contract with you (Article 6(1)(b)) |
| Take payments and keep billing and tax records | Performance of a contract, and our legal obligations (Article 6(1)(b) and (c)) |
| Store a testimonial and show it publicly once the owner approves it | Your consent, given by ticking the box on the form (Article 6(1)(a)) |
| Hash IP addresses to limit spam, and keep server logs | Our legitimate interests in keeping the service secure and free of abuse (Article 6(1)(f)) |
| Count anonymous page views with cookieless analytics | Our legitimate interests in understanding how our website is used so we can improve it (Article 6(1)(f)) |
| Reply when you contact us | Our legitimate interests in answering your questions (Article 6(1)(f)) |
We do not sell your data, use it for advertising, or use it to make automated decisions about you.
The only emails we send are the ones needed to run your account: confirming your email address, resetting your password, and important notices about your account, billing or these policies. We do not send marketing emails.
Testimonials and the owners who collect them
When you leave a testimonial, you are giving it to the business or person who sent you the link (the owner). The owner decides whether to approve it, may correct typing errors, and chooses where it appears. For that use the owner is responsible for your data as a controller, and TryTestimonials stores and displays it on their behalf. Owners must follow our terms of service, which forbid editing a testimonial in a way that changes its meaning.
If you want a testimonial changed or removed, you can ask the owner. You can also ask us at george@trytestimonials.com and we will help, including removing it if the owner does not respond.
Who processes your data for us
We use a small number of service providers (processors). Each processes data only on our instructions.
| Provider | What they do |
|---|---|
| Supabase | Database and authentication. Stores account details, walls, testimonials and hashed IP addresses. |
| Vercel | Hosts the website, the dashboard and the widget, keeps short-lived server logs, and provides our cookieless website analytics. |
| Paddle | Merchant of record for all payments. Paddle sells the subscription or lifetime plan to you, takes payment, handles sales tax and VAT, and sends receipts. Paddle is an independent controller for the payment details it collects, under its own privacy notice. |
| Provides the “Sign in with Google” option. Google handles that sign-in under its own privacy policy. | |
| Resend | Delivers account emails, such as confirming your email address and resetting your password. It receives your email address and the content of those emails. |
We store our database in a UK or European Union region where we can. Some providers may process data in other countries, including the United States. Where that happens, the transfer is protected by safeguards recognised under UK law, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK-US data bridge.
We may also disclose data if the law requires it, for example in response to a valid court order.
How long we keep it
- Account data is kept while your account is open. When you delete your account, we delete your account, your walls and every testimonial in them.
- Testimonials, along with the hashed IP address stored with them, are kept until the owner deletes them, the owner deletes the wall or account, or we receive a valid request to delete them.
- Spam-limiting records (a hashed IP address and a time) are only needed for a short window and are deleted with the wall they relate to, or sooner on request.
- Billing records are held by Paddle as merchant of record. We keep only the customer and subscription references needed to match payments to accounts, and delete them with your account unless the law requires us to keep them longer.
- Emails you send us are kept for as long as needed to deal with your request.
You can ask us to delete your data at any time by emailing george@trytestimonials.com.
Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you and get a copy of it.
- Rectification: have inaccurate data corrected.
- Erasure: have your data deleted.
- Restriction: ask us to limit how we use your data.
- Object to processing we carry out on the basis of legitimate interests.
- Data portability: receive data you gave us in a common, machine-readable format.
- Withdraw consent at any time, where we rely on consent. For a testimonial, this means we will remove it. Withdrawing consent does not affect anything done before you withdrew it.
To use any of these rights, email george@trytestimonials.com. We will reply within one month. We may need to ask you to confirm who you are first. There is no charge.
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or by phone on 0303 123 1113.
Security
Data is encrypted in transit. Access to the database is restricted so that each owner can see only their own walls and testimonials. The public can submit testimonials only through our server, never directly to the database. Testimonial text is always displayed as plain text, so it cannot be used to run code on an owner's website.
Children
TryTestimonials is a business tool and is not intended for children. You must be 18 or over to open an account. We do not knowingly collect data from children under 13.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change significantly affects how we use your data, we will tell account holders by email before it takes effect.
Contact
George Ryder, trading as RallyDigital, United Kingdom. Email: george@trytestimonials.com.