Updated October 26, 2026
Privacy notice
Review Paradise is operated by Trevor Fenner, founder of Ecommerce Paradise. This notice explains the information used to run reviewparadise.com, what can appear publicly, and how to contact us about your information.
Contact: trevor@reviewparadise.com.
Current stage of the platform
The business directory is public. Public registration and review collection are not open yet. Account, claim and response features are being prepared for launch. The account-data descriptions below apply when those features are available or used in an invited pilot. Shopify and WordPress storefront integrations and public social sign-in are not currently available.
Information you provide
If you contact us, we receive your email address, message and any information you choose to include. When account registration is available, we use your email address and chosen public display name to verify your email and create a WordPress account. WordPress stores a password hash, not a readable copy of your password.
Reviews include the business you select, a rating, title, review text, public name, date of experience, submission date and the account associated with the submission. Claim requests include your account, the business and your explanation of your authority. Administrators record the method and outcome of ownership verification. Business responses are associated with the representative’s account, the business and the customer review.
Do not send passwords, payment details or unredacted sensitive documents in reviews, claim statements or ordinary support messages.
What is public and what stays private
Approved reviews can display your chosen public name, rating, text, experience date and submission date. Approved business responses appear with the relevant review. Account email addresses and private claim/verification records are not displayed in the public review section.
Pending reviews and responses are available to authorized administrators for moderation and to the relevant account through its dashboard. Verified business representatives can respond to published customer reviews for their business; they do not receive the reviewer’s private account email through the response feature.
Business directory records include business names, website links, descriptions and business contact details imported from research sources or supplied to us. A listing is directory information rather than a customer testimonial. Contact us if a record contains inaccurate or inappropriate information.
How we use information
We use information to operate accounts, send verification and password-setup messages, moderate submissions, check business authority, display eligible reviews and responses, investigate reports, handle corrections and protect the site against misuse. Site administrators and authorized providers may access information needed for those tasks.
Verification links contain a random token. The pending signup record stores a hash of that token, the email and display name, and an expiry time. Links expire after one hour. Expired pending records are eligible for the site’s hourly cleanup job, which runs when WordPress scheduled tasks execute. Signup rate limits use hashed network identifiers rather than storing raw IP addresses in those rate-limit records.
Hosting, cookies and analytics
GoDaddy hosts the site, and the site is served through Cloudflare infrastructure. Hosting and security services can process technical request information, such as IP addresses, browser information and requested URLs, to deliver content and protect the site. WordPress uses cookies for sign-in and account preferences. Cloudflare can set security cookies for bot protection.
Public pages use Google Analytics through Site Kit and GoDaddy traffic-measurement scripts. CookieYes provides a worldwide opt-in banner with Accept All, Reject All and Customise choices. The observed Google tag and GoDaddy traffic scripts are blocked before consent and after rejection, and load when optional analytics is accepted. You can reopen Consent Preferences to change your choice. Google Analytics is configured to exclude logged-in users and has enhanced measurement enabled.
The account page removes the observed Google/Site Kit and GoDaddy page-analytics scripts so account URLs and verification tokens are not passed through those scripts. Hosting and security processing still applies.
See how Google uses data from sites using its services, GoDaddy’s privacy notice and Cloudflare’s privacy policy for their practices. Browser settings can clear or restrict cookies, although blocking essential cookies can affect sign-in.
Microsoft Clarity records interactions and page activity on eligible public pages after optional Analytics consent. Strict text masking is enabled. Account and review forms, pages with email or password fields or text areas, and URLs with query strings or fragments are excluded. Reject All prevents Clarity from loading. Changing consent reloads the page so withdrawal takes effect. Reopen Consent Preferences to change your choice.
See Microsoft’s privacy statement for Microsoft’s data practices. AdSense ownership verification and ads.txt are installed. Our application for advertising approval is under review. A responsive Google AdSense unit is configured through Ad Inserter after paragraph six on posts. The ad loader requires Advertisement consent. Core pages, business profiles, accounts, forms and archives are excluded from this placement. Google’s site review is pending, so ads are not confirmed as serving. Auto ads and Auto optimize are off.
Service providers and external links
WordPress and site plugins support administration, security and directory functionality. Support email is handled through our Google Workspace mailbox. Transactional email delivery is still being configured. This notice will be updated when an additional provider, social sign-in or storefront integration is enabled.
Links to business websites, social profiles and other resources take you to services with their own privacy practices. Information you send directly to those businesses is handled by them.
Retention and your requests
Account and submission records remain while needed to provide the service, moderate content, maintain ownership records and address disputes or security issues. Pending email verification uses the expiry and cleanup process described above. Support correspondence and provider logs or backups can follow separate retention schedules; removing public content does not instantly remove every backup copy.
Email trevor@reviewparadise.com to request access, correction, account deletion or removal of your review. Include the relevant profile or review link and the account email. We may need to verify your identity or authority before acting. Do not send your password. We will explain if information needs to be retained for a specific operational, dispute or legal reason.
Changes to this notice
We will update this page as the platform’s features and providers change. The date at the top identifies the latest revision. Read our review guidelines for publication and moderation standards.