GetRekommended

Privacy policy

Last updated 6 October 2026

The short version. To check a business we read what is already public about it. We store the report, and a one-way hash of your network address for counting. We never see your card. If you connect your Google listing, the key we hold is encrypted and you can revoke it at any time from your own Google account.

Who we are

GetRekommended is operated by Paragon Business Solutions and Consultancy Services Limited. For anything in this policy, write to hello@getrekommended.com and a person will answer.

What we collect

When you run a free check

WhatWhy
The business name, its town, what it sells, how customers reach it, and its website if you give oneTo find the right business and ask the questions its customers would. Two businesses share a name more often than you would think.
Public information about that business — its Google listing, its website, pages that mention itThis is the assessment. All of it is information anyone could look up.
A one-way hash of your network addressTo count checks against a daily limit. See below.

We do not store your IP address. It is combined with a secret value and hashed before anything is written down, and only the hash is kept. That is enough to tell that two checks came from the same place and not enough to tell where that place is. We could not reverse it if we were asked to.

A free check needs your email address, and no account or card. We send your results to it, and up to three short follow-ups from Rek about what to fix. Every one has a link that stops them in one click, and we never share or sell your address.

When you subscribe

We never see your card details. Payment happens entirely on our payment provider's systems. What comes back to us is confirmation that a payment succeeded and the email address it was made with.

How access to your accounts is stored

Anything that lets us act on your behalf is encrypted before it is written down, using AES-256-GCM with a key held only in our server's environment. It is never written to a log, never included in a report, never sent to your browser, and never shared.

We ask for the narrowest access that does the job, and only when you are about to use it, and every one of them can be withdrawn by you, without telling us, and takes effect immediately: a Google connection from your Google account; a WordPress application password in your WordPress admin; a Wix API key in your Wix account; the Shopify app by uninstalling it from your store; and an FTP account by deleting it in your hosting control panel.

Cookies and your browser

We use no advertising or analytics cookies. The site sets two cookies of its own:

Your browser also keeps, only on your own device, the access code you typed during our closed test and which report you last paid for, so that returning from checkout opens it.

The tag you paste into your website

If you use our one-line tag to publish structured data, it is worth being precise about what it does, because it sits on your site and your visitors load it.

Who else sees this information

Running a check means using other companies' services. Each receives only what it needs to do its part.

ServiceWhat it receives
SerperSearch terms — the business name and town
Anthropic, Google (Gemini)Text from public pages, to pull out business details
Perplexity, OpenAI (the maker of ChatGPT), and other assistants where configuredThe customer questions we ask, such as "best dentist in Riverside". Not your private information.
Google Business ProfileOnly what you have connected, and only the changes you approve
ResendYour email address and the message we are sending
PolarPayment. They hold the card details; we do not.
RenderHosting. Our data sits on their infrastructure.

We do not sell your information, and we do not share it for advertising.

Businesses we write to

We sometimes email businesses that have not used GetRekommended, to tell them what an AI assistant said when we asked it a customer's question about their trade and town. To do that we use only public business information: the business's name, listing and website from public search results, and a general contact address the business publishes on its own website (such as info@ or contact@), never a named person's address.

How long we keep it

What you can ask us to do

Email hello@getrekommended.com to get a copy of what we hold, correct it, delete it, or close your account. We will not ask you why and we will not make it difficult. Deletion removes your reports, your history and any access you granted; it cannot recall a change that has already been published to your own listing or site.

Children

This is a service for businesses and is not directed at anyone under 18.

Changes

If this policy changes in a way that affects you, we will email you before it takes effect rather than quietly changing the date at the top.