Last updated: December 12, 2025
We value your privacy. This policy outlines your privacy rights and how we collect, use, disclose, transfer, and store your personal data.
Terms we use in this policy
When we say “Califica”, “we”, “our” or “us”, we are referring to Eugenio Rafael Carrio Donoso, postal code 29190, Málaga, Spain, who is responsible for processing your personal data, email [email protected]
When we say “website”, “platform” or “service”, we mean all of Califica’s websites, applications and other services.
When we say “public personal data”, we mean personal data published on our website that anyone on the Internet and authorized on our site can access, and when we say “private personal data” we mean personal data that we do not publish on our website.
Third-party websites
Our platform contains links to other websites, but that doesn't mean we endorse them. We recommend that you review the privacy policies of these third-party websites because their procedures for collecting, managing, and processing personal data may differ from ours.
We are an open platform
When you write a review, both the review itself and your Califica profile will be visible to anyone who visits our website. Clicking on your profile will show your country and all the reviews you've written, including the locations and products you've reviewed, as well as any photos or videos you've submitted with your reviews. If you're a business user and reply to a review about your company, this will also be visible on our website. We consider all of this information to be public personal data. You can share any personal information you wish when creating your Califica profile and username.
Personal data we collect
Personal data is any information relating to an identifiable natural person. When you create a user account on Califica, write a review, create a business account on behalf of your company, or use our platform or services, we may collect and process your personal data.
We ask that you do not share with us any confidential personal documents or personal data, such as information that reveals ethnic origin, religious beliefs or health information, whether yours or that of others.
We may collect the following public and private personal data:
Public personal data
Which business have you reviewed?
Which product did you review?
The date you wrote your review.
Whether you've written a service review, a business review, a location review, or a product review.
Content of your review and star rating.
Photographs or videos of your product (if you provide them along with the product review).
The location of the business you reviewed.
The date of your experience with the company you wrote the review about.
Name and/or username.
Profile picture
Before your request to link your Califica profile to a social network is processed, you will be informed what information we will collect from that network. You can disconnect your Califica profile at any time through your Califica account. Califica will remove your unique social network ID and disconnect/revoke your Califica account. However, your profile picture will remain on your Califica profile unless you change it, and we will retain your name and email address.
If you hold a Califica business account, we may also collect the following public personal data:
Private personal data
Which business did you ask the question to?
The product you asked the question about.
The content of the question.
The date you asked the question.
The company's response to the question.
Chrome extension : If you download our Chrome extension, we may collect the following information:
If the session ID is linked to your account, we may associate data related to your use of the Chrome extension and browser and device information with you.
If you hold a Califica business account, we may also collect the following private personal data:
Your contact details.
Images of the documents you submitted.
Number and expiration date of the documents you submitted
Your age and date of birth.
Your bank account details (if you have a paid plan).
How we collect personal data
The personal data we process is primarily collected directly from you when you provide your details to create an account with us, or your usage and profile information, i.e., your interaction with our platform, services, or marketing emails, such as leaving reviews or posting responses to reviews.
Occasionally, we receive information about you from third parties. For example, when you create a Califica account through Facebook, your account is automatically populated with information we receive from them. Similarly, when a company asks us to send you an invitation to review their profile, they provide us with your name, email address, and a reference number, such as an order ID. We may also receive information from third parties for research and fraud detection purposes.
We also automatically generate or collect information from your computer or device while you use our services, such as your IP address, your location, information about the device and browser you are using to access Califica, or your usage and profile information, such as your interaction with our platform or marketing emails, or your use of our other services.
Who is responsible for processing your personal data?
The data controller decides how and why your personal data is used and is responsible for ensuring its proper management. The data processor acts on the controller's instructions to process your data. These definitions are derived from the General Data Protection Regulation (Regulation (EU) 2016/679).
If you have received an invitation to write a review about a business that uses our services (either from us or directly from the business), or have provided information to a business through the "Request Information" tool, that business will be the data controller and Califica will be the data processor. If you have any questions or wish to exercise your rights regarding the personal data used to send you review invitations, you should contact the business or businesses in question directly, as they are the data controllers.
Regarding all other personal data associated with our platform, such as the information you provide when creating an account, leaving a review, or submitting a response, Califica A/S is the data controller. Depending on the services our business clients use, they may also be responsible for processing data such as the reviews they write, their username, and the date of their experience.
Why and how we use your personal data
We may use your personal data for the following purposes:
If you have a Califica user account, we may also use your personal data to:
If you have a business account on behalf of your company with Califica, we will also use your personal data to:
We may also use the information in other ways, for which we will provide specific notice at the time of collection.
We may use automated means, including machine learning and artificial intelligence, to accomplish the purposes mentioned above.
We need to process your personal data to:
In cases where you have given us your explicit consent to process your personal data, for example, by subscribing to our newsletters or accepting certain cookies on your device, you can withdraw that consent at any time, either by using the functionality provided in the relevant product feature or by contacting us (see the "Contact" section below). However, please note that we may still be entitled to process your information if justified by any of the other legal bases mentioned above.
You have the right to object to how we process your personal data or to request that we restrict such processing. See the "Your Rights" section below for more information.
Who can access your personal data?
Your personal data is publicly available on Califica (for both reviewers and business users)
We share your public personal information on our platform so others can learn about your experience with a specific company. Please remember that if you've chosen to use your real name as your username, this could reveal your identity on our public website.
Similarly, if you are a business user, depending on the information you choose to include in your Califica public profile, this will be considered public personal information and will be accessible to anyone who visits the Califica website.
Your private personal data on Califica (both for reviewers and business users)
Some Califica employees will have access to your data to facilitate everything described in the "Why and How We Use Your Personal Data" section of this privacy policy. However, Califica operates on principles that limit access to those with a genuine work-related need.
If you are a consumer and have received an invitation to leave a review through our platform from one of our business clients, that client will have access to your data in their Califica Business account. If you write a review on Califica in response to an invitation sent by a business through our invitation services, that business may link your review to their invitation. Please remember that our business clients are responsible for processing this data, and if you have any questions, we recommend contacting them.
Your personal data shared with independent third-party services, websites, and companies
One of Califica's primary goals is to maximize the visibility, availability, and usefulness of reviews and related content for everyone. Therefore, we allow independent third parties to access publicly available personal data, including but not limited to usernames, user profile information, review content, and responses to business reviews (as described in more detail in the "Personal Data We Collect" section of this privacy policy), through application programming interfaces (APIs) and other programmatic data transfer methodologies available on our platform, and to use and incorporate such publicly available personal data into their own products and services. This increases awareness among potential audiences, as well as consumers and businesses, of Califica and consumer reviews, and the valuable information they provide. We make publicly available personal data to these third parties in this way only when they agree to the terms of the data license, which implements appropriate data protections and data subject rights. Please see the "Your Rights" section below for information on how to opt out of certain parts of this data sharing.
The types of third parties that may access, use, and incorporate such public personal data include:
If you choose to respond to a request for information from a company you've rated (for example, through our "Request Information" tool), this information will be sent directly to the requesting company. Occasionally, we may need to request documentation to verify your experience. For example, when our software flags your review and removes it from Rate. We will never share your documentation with the rated company; however, in certain circumstances, if you have a reference number, order ID, or similar information, we may share it with the company unless you ask us not to.
Your personal data shared with data processors
These third parties are processors of the personal data for which we are responsible. We have data processing agreements with these processors, and these agreements stipulate that they must act solely in accordance with our instructions. We may instruct these processors to process data in accordance with this policy and for the purposes of using the platform.
We conduct checks to ensure that data processors have taken reasonable technical and organizational measures to protect information against accidental or unlawful destruction, loss or damage, and against disclosure to unauthorized persons, misuse or processing in other ways in violation of data protection laws.
Some of these data processors and third-party services will be located in countries other than your domicile and may have different or less stringent data protection standards. However, in accordance with the local laws of these countries, we will ensure that the necessary security measures are in place to protect your data, regardless of their location. To this end, we combine appropriate technical, organizational, and administrative security measures and establish the necessary legal contracts to support these requirements. For example, we will only transfer personal data of European users outside the European Economic Area when a transfer validation method approved by the European Commission has been implemented.
Other disclosures
In addition to the above, we share your personal data with the following parties and under the following circumstances:
How long do we keep your personal data?
We only keep your data for as long as we need it or are legally required to do so. This depends on the reason for collecting it and whether we have a valid legal basis for doing so (for example, to fulfill a contract, provide a service you requested, comply with legal requirements, or for our legitimate interests). When we no longer have a valid reason to keep your data, we will delete it or anonymize it so that you cannot be identified. We process data differently depending on its use, but you can delete your personal data or ask us to do so at any time (see "Your Rights" below).
The personal data you provide to us, including your reviews, is retained for as long as you have a Califica account or as necessary to provide you with our services. If you delete your Califica account, we retain certain information that we are legally required to keep or that we have a compelling legitimate interest in retaining. Reasons why we might retain some data for longer periods include, but are not limited to, security, preventing fraud and abuse of the platform, complying with legal or regulatory requirements, and defending our legitimate business interests.
How do we keep your personal data safe?
Keeping your personal data secure is our top priority. We use various organizational, technical, and administrative measures to protect your personal data within our organization and regularly audit our system for vulnerabilities. However, because the internet is not a completely secure environment, we cannot guarantee the security of the information you transmit to us. Emails sent through the platform may not be encrypted, so we recommend that you do not include sensitive information in emails you send to us.
We are always working to improve our security practices and policies, and we will update this information as these practices evolve over time.
Do we use cookies?
We use cookies and similar technologies to help deliver, optimize, personalize and analyze our services, and for advertising purposes.
We use a combination of cookies and other technologies, such as pixels and tracking codes, to collect information for your use in accordance with the purposes set out in this policy.
What is a cookie?
A cookie is a small text file that is stored on your computer or device, through your web browser, at the request of the websites you visit or the applications you use. Cookies record information such as your preferences and settings, which helps us obtain the information needed to provide you with the most consistent and relevant experience. We also use cookies to record information about experiments or new features we may test to track how you use our services and determine their effectiveness.
Cookies on our website may be installed by us, by third parties we work with, or by independent third parties, such as advertisers.
What are pixels?
Pixels are small, transparent image files within a web page or email. We use them to understand how you interact with our services, including marketing emails.
What are tracking codes?
Tracking codes are snippets of code inserted into your page to measure things like visits and interactions. We use them to learn more about how you interact with our services, the ads you see, and how you generally use our platform.
Please see our Cookie Policy for more information and details about the types of cookies and similar technologies we use.
Your rights
If we hold personal data about you, you have rights in relation to this data, as set out below.
These rights may be limited, for example, if processing your request involves disclosing another person's personal data, or if you ask us to delete information that we are legally obligated to retain or that we have an overriding legitimate interest in keeping. If you have any unresolved concerns, you have the right to lodge a complaint with a data protection authority.
Access and download your personal data
You have the right to obtain confirmation as to whether Califica A/S is processing your personal data and, if so, to access such data and other information about it.
If you have a business account with Califica, or if you don't have an account, you can send an email to [email protected] and request information about your personal data.
Correction and deletion of your personal data
If any of the personal data we hold about you is incorrect or misleading, if your personal data changes, or if you no longer wish to appear on the platform, you can correct, edit, or delete it yourself through your Califica user account. Alternatively, you can email [email protected] to request the correction or deletion of your information.
See 'How long do we store your personal data?' for more information on how to delete your data.
Other rights
In addition to the rights set out above regarding your personal data, you also have the right to object to the processing of your personal data and to restrict such processing (in particular, where we do not have to process the data to comply with a contractual or other legal requirement, e.g., the processing of your personal data for direct marketing purposes).
If we have requested your consent, you can withdraw it at any time. You can do this using the functionality provided in the relevant product feature or by contacting us (see the "Contact Us" section below). If you request to withdraw your consent for Califica to process your data, this will not affect any processing that has already taken place.
Please note that the rights mentioned above are not absolute and may be limited. For example, we may not be able to grant your request if doing so would disclose another person's personal data, or if you ask us to delete information that we are legally obligated to retain or that we have compelling legitimate interests in keeping. If you have any unanswered questions, you have the right to lodge a complaint with a data protection authority.
Privacy rights in the U.S.
This section provides additional details about the personal data we collect from U.S. consumers who are granted rights under applicable state data protection and privacy laws. These laws include, but are not limited to, the California Consumer Privacy Act, the California Privacy Rights Act, the Colorado Privacy Act, the Connecticut Personal Data Privacy and Online Monitoring Act, the Delaware Personal Data Privacy Act, the Florida Digital Bill of Rights, the Iowa Consumer Data Protection Act, the Montana Consumer Data Privacy Act, the Nebraska Data Privacy Act, the New Jersey Data Protection Act, the New Hampshire Expectation of Privacy Act, the Oregon Consumer Data Privacy Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act, the Virginia Consumer Data Protection Act, and any other state or local laws applicable to the data of U.S. residents. These laws may be amended, repealed, or replaced over time (the "Privacy Laws"). of the U.S.").
When we say personal data in this section, we mean “personal data” or “personal information” as defined in applicable U.S. Privacy Laws.
For more information about the personal data we collect, please see the "Personal Data We Collect" section above. We collect this data for the purposes described in the "Why and How We Use Your Personal Data" section. We share this data with the categories of third parties described in the "Who Can Access Your Personal Data" section.
Under U.S. privacy laws, you have a number of rights regarding the personal data we hold about you, and we are committed to exercising those rights where appropriate. For more information about your rights regarding the processing of your personal data, please see the "Your Rights" section above.
In accordance with U.S. privacy laws, we will not discriminate against you for exercising your rights. You may submit a request to exercise your rights by contacting us via email ( [email protected] ) or by mail using the contact information below. We will verify your request using the information associated with your account, including your email address. You may appoint an authorized agent to exercise these rights on your behalf.
Califica will never sell your private personal data for profit. However, to comply with U.S. Privacy Laws, we transfer your data to our partners for activities such as, but not limited to, showing you personalized ads, licensing our data (see " Your Personal Data Shared with Independent Third-Party Services, Websites, and Companies "), or implementing improvements to our service. We allow you to opt out. We only make this type of data transfer when we believe it benefits you by providing a better experience and quality of service, or by offering you content that may be of interest to you.
Children's Information
Our platform is not directed at individuals under the age of 18, and we do not knowingly collect personal data from such individuals. If you become aware that a person under the age of 18 has provided us with their personal data, please contact us using the contact information provided below.
Changes to this policy
We may modify this policy from time to time. Laws, regulations, and industry standards evolve, which may require such changes, or we may make changes to our services or business. We will post any changes on this page, and we encourage you to review our Privacy Policy to stay informed.
If we make changes that substantially alter your privacy rights, we will send you additional notice, for example, by email or through our platform. If you continue to use our platform or services after we post or send notice about the policy changes, it will mean that you accept the updated policy.
LANGUAGE
We may provide you with certain materials in another language, but all other communications and notices under these terms must be in Spanish. If we provide a translation of these terms, it is solely for your convenience, and the Spanish version will prevail. We are not responsible for the content or accuracy of translated versions of these terms.