GDPR & customer reviews: best practices

Key idea

Reviews may contain personal data. Keep access limited and actions traceable.

Best practices

• Minimize what you store (only what’s useful)
• Define roles (who can view / who can reply)
• Keep a reply history (traceability)
• Set a reasonable retention period

Useful links

• **Security**
• **Privacy policy**
• **Contact**