Data Processing Addendum

Who operates REEVUU

REEVUU is operated by Harry Winter trading as REEVUU, a sole trader based in the United Kingdom. REEVUU is a trading name, not a limited company.

• Website: https://reevuu.co.uk
• Contact: hello@reevuu.co.uk
• Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA
• VAT: REEVUU is not VAT registered. Prices shown do not include VAT added by REEVUU.

Roles and scope

This addendum forms part of the Terms of Service and applies where your business's use of REEVUU involves personal data contained in the documents you upload. For that document content, you are the controller — you decide what to upload and why — and Harry Winter trading as REEVUU is your processor, processing it solely to provide the review service. For account, billing and service-security data, REEVUU acts as a controller in its own right, as described in the Privacy Notice.

Processing instructions

REEVUUprocesses your uploaded documents only on your documented instructions — which are: to extract their content, produce the review you requested, answer your follow-up questions about it, and store, export or delete content as you direct through the product's own controls. Your documents are not used to train AI models and are not shared with other customers.

Confidentiality and security

Document content is stored in private storage with per-customer access controls enforced at the database layer (row-level security); access requires your authenticated session, and source-document access is granted only through short-lived signed links after server-side ownership verification. The only person with operator access is Harry Winter, who is bound to treat customer content as confidential and accesses it only where necessary to provide or secure the service.

Subprocessors

You authorise the subprocessors listed at https://reevuu.co.uk/subprocessors, which states each provider's purpose and processing location. The list is updated before a new subprocessor processes customer document content; continuing to use the service after an update constitutes acceptance, and you may terminate if you object.

International transfers

Primary database and file storage are hosted in the United Kingdom (London region). Where a subprocessor's processing involves transfers outside the UK, those transfers rely on the subprocessor's standard contractual safeguards (such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses), as recorded per provider on the subprocessor list.

Incident assistance

If REEVUU becomes aware of a personal data breach affecting your document content, it will notify you at your account email without undue delay with the information reasonably available, so you can meet your own notification obligations.

Data-subject rights, deletion and return

The product's own controls are the primary mechanism: you can export review content, delete individual files or reviews, and delete the account (which removes stored document content), at any time. REEVUUwill provide reasonable assistance with data-subject requests that reach it directly by referring them to you and, where instructed, acting on your deletion or export instruction. On termination of the service, deletion follows the Privacy Notice's retention rules.

Audit information

On written request, REEVUUwill make available the information reasonably necessary to demonstrate compliance with this addendum — a description of the security measures above and the relevant compliance documentation of the underlying infrastructure providers. On-site audits are not offered at REEVUU's current scale; the underlying providers publish their own independent certifications.

Liability

This addendum is subject to the same liability provisions as the Terms of Service; it does not create a separate or additional liability cap.