Rules and ethics
Part of A practical workflow for negative Google reviews
A practical workflow for negative Google reviews
A UK guide to negative Google reviews, with evidence and privacy checks, a reusable reply structure and steps for reporting policy breaches.
What to take away
- Reply to the facts in the review, not to the person, because a published reply is a publication in its own right.
- Defamation risk usually sits in what you assert about the reviewer, not in the apology.
- Naming or hinting at a customer in a reply is processing their personal data.
- Keep a dated copy of the reply and the evidence behind it.
- This is general guidance; individual cases need a qualified adviser.
A reply is a second publication
When you answer a review, your words go to the same audience as the original post. A careless sentence can create a fresh problem even when the review itself was unfair.
Defamation in England and Wales turns on serious harm and on defences such as truth and honest opinion. The Defamation Act 2013 sets out the framework that a claimant or a defendant would argue over.
This summary concerns England and Wales. Defamation law differs in Scotland and Northern Ireland, so get advice for the relevant jurisdiction.
In practice, the risky lines are factual claims about the reviewer. Saying a customer never paid, or that a rival wrote the review, asserts something you may not be able to prove.
Any reply that identifies a customer, even indirectly through an order number or a date, is personal data processing under the UK GDPR. Before using identifying details, establish a lawful basis and share only what is necessary; the ICO's UK GDPR guidance and resources set out the duties that follow.
Reply work can raise defamation, data protection and consumer-protection issues. In a reputation-management workflow, software can help keep the review, draft, approval and supporting evidence together; it cannot determine whether a reply is lawful, so route uncertain cases to a qualified adviser.
Run the workflow through review-management software
Examples to evaluate include Birdeye, Podium and Reputation.com; this is not a ranking. Before choosing a platform, confirm its current Google Business Profile integration and location support, and check its UK data handling, user permissions and retention controls.
Enable review notifications in Google Business Profile and alerts in the chosen platform where available. Route each new review to an owner, tag it for a service issue, possible policy breach, privacy risk or legal escalation, then draft and approve a reply before publishing it from an authorised account. Keep the review, evidence, decision, final reply, date and report outcome together in a case record, with access limited to staff who need it. Set an internal response-time target and escalation deadline that your team can meet, and track performance against them.
Four checks before you draft
- Evidence and defamation:Can you support every factual claim? If not, acknowledge the concern and describe what you will do rather than accusing the reviewer of dishonesty.
- Privacy:Can you reply without identifying the customer, a staff member or transaction details? If personal data is necessary, establish a lawful basis, limit what you share and move the conversation to a private channel.
- Consumer accuracy:Is the reply accurate and fair, without misleading claims about the product, service or remedy? Check consumer-facing claims against the Digital Markets, Competition and Consumers Act 2024; the Competition and Markets Authority (CMA) enforces the unfair-commercial-practices regime.
- Google policy and next action:Does the review appear to breach Google's review policy? If so, report it separately and keep the evidence; otherwise, prepare a calm reply.
Four checks before you draft
- Disputed statement evidenced with dated record?
- Draft names, numbers or hints at reviewer?
- Would stranger think worse of customer?
- Source record saved, such as booking log?
A reply structure you can reuse
The structure below works for most one-star reviews: acknowledge the concern, address the issue without identifying the customer, say what you are doing, invite contact through a private channel, and close courteously. Keep it under 100 words and answer in the tone of the original.
For example: “Thanks for sharing this. We’re sorry your experience fell short. We’re reviewing what happened and would welcome the chance to put it right. Please contact our team privately using the details on our profile so we can look into this with you.”
Risky reply moves vs safer versions
Risky reply move
- Saying customer is lying
- Hard-to-defend factual claim
- Naming customer or order
- Personal data published unlawfully
- Calling review fake publicly
- Accusation you cannot evidence
- Promising refund in reply
- Sets expectation for all reviewers
Safer version
- Saying customer is lying
- Our records show a different sequence
- Naming customer or order
- We have checked your booking
- Calling review fake publicly
- Does not match our records
- Promising refund in reply
- Discuss resolution directly
Reusable reply structure
- Thank reviewer without accepting disputed facts
- State verified facts in one neutral sentence
- Say what you will check or fix
- Move detail offline with contact details
- Sign off with name and role
The comparison below sets four common reply moves against a safer version.
Risk it creates
- Saying the customer is lying
- A factual claim about a person that is hard to defend
- Naming the customer or their order
- Personal data published without a lawful basis
- Calling the review fake in public
- An accusation you may not be able to evidence
- Promising a refund in the reply
- Sets an expectation for every future reviewer
Safer version
- Saying the customer is lying
- Our records show a different sequence of events
- Naming the customer or their order
- We have checked your booking and will reply by email
- Calling the review fake in public
- This does not match any record we hold, and we have reported it to Google
- Promising a refund in the reply
- We will discuss the resolution with you directly
Replies are published under the review on your Google Business Profile, which you reach from the owner account (Google Business Profile Help). To report a review, open the profile or Google's Reviews Management Tool, find the review and choose the closest reason offered. Policy grounds include fake engagement, off-topic content, restricted or illegal content, sexually explicit content, offensive or abusive content, dangerous or derogatory content, impersonation, misinformation and personal information; the options shown can vary by reporting route.
Check the report status in the Reviews Management Tool and, if Google offers an appeal, submit it there. Google considers reports under its Google Maps User-Generated Content Policy; a negative or disputed review alone does not establish a policy breach, and reporting does not guarantee removal.
Handling a review that is unfair but accurate
Some negative reviews are unfair but accurate in outline. A late delivery, a wrong item, a rude exchange: none of that is defamation, and a reply that disputes it invites an argument you cannot win.
In those cases, answer the process rather than the person. Say what went wrong, what changed, and what a customer should do next time.
Keep the reply dated and stored with the case file. If the same complaint recurs, that record is the evidence behind any later pattern claim.
When a review names a member of staff
Reviews sometimes name an employee in unflattering terms. The business is not the only party with an interest in what gets published, and an employer's reply can repeat the allegation to a wider audience.
Keep staff names out of the public reply, even to defend them. Handle it through your internal process and take advice if the employee wants to act separately.
Common questions
These answers cover when a public reply may help, what to keep private and how to handle a review you believe breaches Google's policy.
Do I have to reply to a negative review?
No. Google does not require a reply, and silence is safer than a careless response. Reply where you can correct a factual error or show other readers how you handle problems.
Can I name the customer who wrote the review?
Usually not. Naming or identifying a reviewer in a public reply is processing personal data and can create a privacy complaint even where the review is false. Keep identifying detail in a private message.
What if the reviewer has used a fake name?
You can report a policy breach to Google and keep the evidence. Do not answer with your own accusation; reply as if a real customer were reading.
