Privacy notice

How Donate Clothes UK Reviews handles Google account data.

Purpose and access

Donate Clothes UK operates this service to manage replies to reviews on its own Google Business Profiles. The Google connection uses the Business Profile management permission. Our review workflows use it to read these profiles and their reviews and to send owner-authorised replies. We do not use it to create customer reviews, access Gmail or Google Drive, or sell Google account data.

Data used

The service may access account and profile identifiers, review identifiers, star ratings, reviewer display names, review text, creation and update times, existing owner replies and available reply status. Profile photographs are not needed for reply drafting. It also records draft replies, approval decisions and delivery status to prevent duplicate or unauthorised replies.

Use and sharing

Data is used to prepare, check and deliver replies and to show a private review queue to authorised owners. For authorised AI drafting of written reviews, the review text and a minimised, safe name may be sent to OpenAI. Simple rating-only thank-yous do not require AI. Sensitive reviews are held for human handling rather than automatic drafting.

Infrastructure providers support hosting, protected access and workflow operation, including Cloudflare and Vultr. The notification service receives a review count and a private panel link, not customer review text. Publishing sends the owner reply to Google, where it may become public under Google's policies. The service does not use Google account data for advertising or model training.

Storage and protection

Google credentials are stored in the workflow credential store, not in source code or the browser. Review content and drafts are held in a restricted database queue. Access is limited to authorised operators. Review content is not intentionally included in source control or long-term SQL backups.

The operational queue expires review content and drafts 28 days after their initial admission; editing or approving a draft does not extend that period. Expiry does not delete the original review or a published reply from Google. Operational execution metadata and provider security records may have separate retention periods. We do not claim that every infrastructure copy is immediately erased at queue expiry.

Your choices and contact

A connected owner can revoke the application's access in their Google account's third-party connections settings. To disconnect the service, request deletion of operational data, or ask a privacy question, contact info@donateclothes.uk. We will explain any remaining provider records or legal retention requirements that apply.

The use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Last updated: 10 October 2026.