Privacy policy

Data Room Reviews (“we”, “us”, “our”) operates dataroomreviews.net, an independent, editorially run website that reviews and compares virtual data room (VDR) providers. This policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. We keep the site as low-data as we can: we do not sell products, we do not run user accounts, and we do not knowingly collect more than we need.

This policy is written to be honest and practical for a global audience. It reflects the general principles of the EU and UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), but it is not legal advice and it is not specific to any single country.

Who we are and how to contact us

Data Room Reviews is the editorial team responsible for this site. We are the data controller for the personal information described here.

For any privacy question, request, or complaint, reach us through our contact form and mark it as a privacy matter. We aim to respond to rights requests within 30 days, and sooner where the law requires it.

What information we collect

We collect very little, and most of it is technical rather than personal.

Information you give us directly. If you email us or use a contact form, we receive your email address, your message, and anything else you choose to include. That is used only to reply to you.
Automatically collected usage data. Like almost every website, our servers and analytics tools record standard technical data when you visit: IP address (often truncated or anonymized by our analytics provider), browser type and version, device and operating system, referring page, the pages you view, and the date and time of your visit.
Cookies and similar technologies. Small files and equivalent storage used for analytics and to remember basic preferences. See the cookies section below.

We do not ask for and do not want sensitive personal data (such as health, financial account, or government-ID information). Please do not send it to us.

How we use your information

We use the limited data we collect for a small set of clear purposes:

To operate, secure, and maintain the website and diagnose technical problems.
To understand, in aggregate, which pages and comparisons are useful so we can improve our reviews and rankings.
To respond to your messages and questions.
To measure, in aggregate, whether visitors found a provider through our comparison pages (see the affiliate links section).
To comply with legal obligations and to protect against fraud or abuse.

We do not use your information to build advertising profiles, and we do not run third-party ad networks on this site.

Where the GDPR applies, we rely on the following legal bases:

Legitimate interests for basic, privacy-protective analytics, site security, and responding to enquiries, balanced against your rights.
Consent for any non-essential cookies or analytics that require it in your region; you can withdraw consent at any time.
Legal obligation where we must retain or disclose data to comply with the law.

Cookies and analytics

We use a privacy-conscious analytics setup to count visits and understand which content is helpful. Depending on the provider and your region, this may set first-party cookies or use equivalent storage, and it typically records the technical usage data described above.

Where your local law requires consent for non-essential cookies, we ask for it before those cookies are set, and you can decline or change your choice later. You can also block or delete cookies in your browser settings, and you can use browser or extension controls (including Global Privacy Control signals, which we honor where applicable) to limit tracking. Blocking cookies will not break the site.

We do not use cookies to sell your data or to serve behavioral advertising.

Affiliate links and how we may earn commissions

Data Room Reviews is reader-supported. Some outbound links to providers are affiliate links, and they are labeled as sponsored. If you click one of those labeled links and later sign up or buy, we may earn a commission at no extra cost to you. This never changes our editorial verdicts, our test results, or a provider’s position in our rankings.

When you click an affiliate link, the destination provider (not us) receives standard referral information, such as that the visit came from our site and, in some cases, a referral or campaign identifier. From that point, the provider’s own privacy policy governs how they handle your data. We do not receive your name, email, or account details from these providers; at most we see aggregate or anonymized conversion counts.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We rely on a small number of service providers (“processors”) that handle data only on our instructions:

Hosting and content delivery (to serve the website securely and quickly).
Analytics (to produce aggregate visit statistics).
Email (to receive and reply to messages you send us).
Affiliate networks (to attribute clicks on labeled sponsored links).

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the public. Some of these providers may process data in countries other than your own; where that happens we rely on appropriate safeguards such as standard contractual clauses.

How long we keep data

We keep aggregate analytics for as long as it is useful for trend analysis, typically no more than 24 to 26 months, after which it is deleted or fully anonymized. Emails you send us are kept only as long as needed to handle your request and any reasonable follow-up, and then deleted on a routine schedule.

Your privacy rights

Depending on where you live, you have some or all of the following rights over your personal information:

Access a copy of the data we hold about you.
Correct inaccurate or incomplete data.
Delete your data (“right to erasure”).
Restrict or object to certain processing, including profiling.
Portability of data you provided, in a usable format.
Withdraw consent at any time where we relied on consent.
Opt out of sale or sharing of personal information. We do not sell or share your data in the CCPA sense, so there is nothing to opt out of, but you may still submit a request to confirm this.
Non-discrimination for exercising any of these rights.

To exercise any right, reach us through our contact form. We may need to verify your request (for example, by confirming the email address that sent us a message). You will not be charged for a reasonable request, and you may use an authorized agent where the law allows.

If you are in the EU, UK, or another region with a data protection authority, you also have the right to lodge a complaint with your local regulator. We would appreciate the chance to resolve your concern first.

Children’s privacy

This site is intended for a business and professional audience and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

Security

We use reasonable technical and organizational measures to protect the limited data we hold, including HTTPS across the site and access controls on our tools. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to keep risk low by collecting as little as possible.

Links to other sites

Our pages link to provider websites and to authoritative sources. Once you leave dataroomreviews.net, this policy no longer applies. We are not responsible for the content or privacy practices of other sites, and we encourage you to read their policies.

Changes to this policy

We may update this policy as our tools or the law change. When we do, we will revise the “Last updated” date above. Material changes will be reflected clearly on this page. Your continued use of the site after an update means you accept the revised policy.