Your privacy is our priority
At Kiyoh, we take the protection of your personal data seriously. We process your data in accordance with the General Data Protection Regulation (GDPR) and are transparent about what we collect, why we collect it and how long we keep it.
How do we handle your data?
Kiyoh only collects the data needed to publish and verify reviews. Below are the key points in short. Further down this page you will find the full explanation per topic. Last updated: 2 September 2026.
- What data — Your name, city and email address when you post a review, plus your IP address.
- What we publish — Only your first name and city. We never publish your email address.
- Purpose — To publish your review, verify that it is genuine and prevent misuse.
- Retention — IP addresses are deleted or anonymised after 90 days; review data is kept while your review is online.
- Your rights — Access, correction, deletion, objection and portability. We respond within one month.
- No sale — We never sell your data to third parties.
Who is responsible for your data?
Kiyoh is a service of Klantenvertellen B.V. Klantenvertellen is the data controller for the personal data processed through this website and our review platform.
Klantenvertellen B.V.
Steenweg 79
5301 HK Zaltbommel
The Netherlands
- Phone: 0418 729 200
- General enquiries: [email protected]
- Data protection officer: [email protected]
- Chamber of Commerce number: 81275048
- VAT number: NL862035697B01
What personal data do we process?
We do not process the same data for everyone. What we process depends on how you use Kiyoh.
| Who you are | What data we process |
|---|---|
| You post a review | Name, city and email address (required), the content of your review and your survey answers, plus your IP address. |
| You visit our website | Technical log file and cookie data, such as your IP address, browser, operating system and the pages you visited. |
| You contact us | The details you enter yourself in the contact form or in your email, such as name, email address, phone number, company name and your message. |
| You are a business customer | Contact and account details of the contact persons at the company, such as name, business email address, phone number and job title. |
We never ask you for special categories of personal data, such as data about your health, religion or political views. Please do not include this type of data in the text of your review either.
Why do we process your data and on what legal basis?
The GDPR requires us to have a legal basis for every processing activity. Below you can see which basis we rely on for each purpose.
| Purpose | Legal basis under the GDPR |
|---|---|
| Processing and publishing your review and passing it on to the reviewed company | Your consent, which you give by submitting your review |
| Checking that the service is used legitimately, for example that multiple reviews are not posted for the same company | Our legitimate interest in preventing fraud and fake reviews |
| Handling questions and complaints about your review | Performance of the agreement and our legitimate interest in good service |
| Providing our service to business customers and sending invoices | Performance of the agreement and legal obligation |
| Improving our website and service using statistics | Your consent via the cookie notice |
| Retaining our records for tax purposes | Legal obligation |
Have you given consent? You can withdraw it at any time. This does not affect processing that has already taken place.
What do we publish and who do we share your data with?
When you post a review, we publish only your first name and city alongside it. Your email address is never published. In addition to our own website, your review may also be displayed on the website of the reviewed company and with partners and search engines we work with, such as Google.
We never sell your personal data. We only share it with the following parties:
- The reviewed company — receives your name and city together with your review. The company may link your review to its own customer records and may contact you about it.
- Publication partners and search engines — receive your review with your first name and city, so that reviews can be found.
- Our IT and hosting suppliers — process data solely on our instructions under a data processing agreement.
- Our group companies — Kiyoh is part of the eKomi group; data may be shared within the group to support and manage the platform.
- Regulators and authorities — only where we are legally required to do so.
If we transfer parts of our business, including this service, to a third party, the associated data may be transferred as well. We will announce this on our website. If you do not agree with such a transfer, you can ask us to delete your data.
How long do we keep your data?
We do not keep your data longer than necessary for the purpose for which we collected it.
| Data | Retention period |
|---|---|
| Name, city, email address and the content of your review | As long as your review is published through our service. If your review is removed, we delete this data too. |
| IP address recorded when posting a review | Up to 90 days, after which it is deleted or anonymised |
| Correspondence via the contact form or email | Up to 2 years after the last contact |
| Customer and account data of business customers | Up to 2 years after the end of the agreement |
| Invoices and financial records | 7 years, based on statutory tax retention obligations |
| Cookie and statistics data | See our cookie declaration |
Once a retention period ends, we delete or anonymise your data. We may continue to use anonymised and aggregated data for research and to improve our service. This data can no longer be traced back to you.
Log files and website statistics
Our server automatically collects data that your browser sends to us. This data includes:
- Type and version of your browser
- Type and version of your operating system
- The URL of the website that referred you to us
- Search terms you used to find our website
- Date and time of access to our website
- Names of the pages you visited
- Amount of data transmitted
This data is collected in an identity-protected manner and cannot be attributed to a specific person or customer. We use it solely for internal analytical and statistical purposes.
For website statistics we use Google Analytics, a web analytics service provided by Google. Google Analytics places cookies to analyse how visitors use our website. The information generated by the cookie, including a truncated IP address, is transmitted to Google and stored on Google's servers. We only place these analytical cookies after you have given consent via the cookie notice.
Pseudonymised profiles
After you register on our website, we may also store the data mentioned above in pseudonymised form. The data is then linked to an internal code instead of to your name or other directly identifying characteristics.
We use these pseudonymised profiles to improve our service and our communication. We build these profiles using pseudonyms only, never your real name.
Cookies
We use cookies on our website. Cookies allow our web server to recognise your individual settings and, where applicable, to store parts of your registration data in encrypted form to make the site easier to use and to enable automatic login.
Functional cookies are necessary for the website to work and are always placed. We only place analytical and marketing cookies with your consent. You can change or withdraw your choice at any time, and in your browser settings you can refuse, block or delete cookies.
Want to know exactly which cookies we place and why? Read our cookie declaration.
Transfers outside the European Economic Area
In principle, we process your data within the European Economic Area (EEA). Some suppliers we use, including Google for website statistics, may process data outside the EEA.
Where a transfer outside the EEA does take place, we only do so if a valid safeguard is in place. That may be an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or the European Commission's standard contractual clauses combined with additional measures. Would you like to know which safeguard applies to a specific processing activity? Contact our data protection officer at [email protected].
How do we secure your data?
We take appropriate technical and organisational measures to protect your data against loss and unlawful use. These include:
- Encrypted connections (TLS/HTTPS) between your browser and our servers
- Access to personal data limited to employees who need it for their work
- Data processing agreements with suppliers that process data on our behalf
- Logging and monitoring to detect unusual use of the platform
- Periodic review and adjustment of our security measures
Do you believe your data is not properly secured, or do you have an indication of misuse? Please report it immediately to [email protected].
Your privacy rights
You may ask us which personal data we process about you. On request, we will provide you free of charge with an overview of the data linked to you and your review.
Is your data incorrect or incomplete? You can ask us to correct or complete it. We will also pass the change on to the company that published your review.
You can ask us to delete your personal data. If we remove your review, we also delete the personal data that belongs to it.
You can ask us to temporarily pause the processing of your data, for example while we handle a request or a complaint from you.
Would you like to object to the further processing of your personal data? Please contact us. We will handle your objection without delay and in any event within one month, and delete the data concerned.
You can receive the data you provided to us yourself in a common digital format, so that you can transfer it to another party.
Do we process your data on the basis of your consent, for example to publish your review or to place analytical cookies? You can withdraw that consent at any time. This applies from the moment of withdrawal and does not have retroactive effect.
Are you not satisfied with how we handle your data or your request? You can lodge a complaint with the Dutch supervisory authority, the Dutch Data Protection Authority. You may also turn to the competent court.
Submitting a request or a complaint
Would you like to exercise one of your rights? Send a request to [email protected] or use our contact form. Please describe your request as clearly as possible. To prevent us from disclosing data to the wrong person, we may ask you to confirm your identity.
We will handle your request without delay and will inform you within one month of receipt about what we have done with it. If we do not grant your request, we will always explain why.
Do you have a complaint about the way we process your personal data or handle your request? Please contact our data protection officer at [email protected]. If that does not resolve the matter, you can always lodge a complaint with the Dutch Data Protection Authority.
Changes to this privacy policy
We may amend this privacy policy, for example if our service changes or if the law gives us reason to. We will announce changes on this page and update the 'last updated' date accordingly. We advise you to review this privacy policy regularly.
This privacy policy applies in addition to the terms of use of our customer review system and our general terms and conditions.
Last updated: 2 September 2026
Questions about your privacy?
At Kiyoh we believe trust starts with openness. Want to know what data we hold about you, submit a deletion request or simply ask a question? Our team is happy to help.