Reply without any detail the customer did not post themselves: no purchases, balances, appointments, health information or addresses. Acknowledge the experience, describe your general practice, and move the specifics to a phone call or private message.

The reply that wins the argument

A review appears that the owner knows is unfair. The customer left out the missed appointments, the unpaid invoice, the instructions they ignored.

The reply writes itself, and it is full of facts: what they bought, when they came in, what they still owe, what happened at the visit.

Posting it feels like setting the record straight. To everyone else reading, it shows a business that publishes its customers' details when it is annoyed.

What gets revealed

The second is the one owners reach for most often, because it feels like the decisive fact. It is also among the details people would least want strangers to read about them.

Why it is a privacy problem

A business collects a customer's details to serve them: to book, deliver, bill and follow up. Publishing those details to win an argument is a different use altogether.

Privacy law in Canada, whether the federal act or a provincial one applies to your business, generally expects personal information to be used and disclosed only for purposes the customer agreed to.

Health practitioners usually carry stricter duties of confidentiality under their own professional rules. This is information, not legal advice, but the direction is clear.

And the customer posting their side does not give you permission to publish yours from their file.

Even confirming they were a customer

For some businesses, saying that someone is a client is itself a disclosure. A counsellor, a clinic or a lawyer replying to a review confirms a relationship the reviewer may not have meant to reveal.

Those businesses do better with a general reply that confirms nothing: we cannot discuss anyone's care or circumstances in public, and here is how to reach us.

For a shop or a trade, confirming the visit is usually fine. Everything beyond that stays private: a plumber can say a technician attended, and nothing about the state of the house.

How it reads to the next customer

People reading reviews picture themselves as the customer. A reply listing someone's balance tells every reader what will happen to them if they ever complain.

The reply also outlasts the dispute. It sits under the review for years, and a screenshot of it travels further than either.

A calm reply with no details looks like a business that can be trusted with information. That is worth more than winning the point.

What a reply can say

Thank them for taking the time. Acknowledge the experience they describe, without agreeing to facts you dispute.

Describe your general practice rather than their case: that every visit ends with a written note of the work done, for instance. It says something useful without saying anything about them.

Then name a person to contact, with a direct line or email, and invite the customer to continue the conversation there. Three or four sentences is enough.

A worked example

An aquarium maintenance service looks after tanks in homes, offices and restaurants, and holds keys or door codes for customers who are out during visits.

After a customer's fish died, a review blamed the most recent visit. The owner replied that evening, at length.

The reply named the customer's condo building, said the technician visits every second Thursday while the customer is at work, blamed overfeeding, and mentioned two unpaid invoices.

None of that was in the review. Together it told any reader which building, which day the unit stands empty, and that someone else holds a key.

The mechanism: the owner wrote to win an argument with one customer and forgot that the audience was everyone, including people who should never know a customer's schedule.

The next morning the reply became three sentences: sorry for the loss, every visit leaves a written log of water tests and work done, and the owner's direct number. Then the owner phoned.

Correcting the record without the file

Some reviews are simply wrong. You can say so without proving it from the customer's records.

Saying that your records do not match the account, and that you would like to talk it through, is a correction. Listing the dates and amounts is a disclosure.

If the reviewer was never your customer at all, say only that you cannot find a record of the visit, and ask them to get in touch.

If a review breaks the platform's rules, because it is abusive or not from a customer, report it through the platform rather than arguing in public.

Reread the old replies

Go back through every reply you have posted: on Google, on Facebook and on any review site that lists the business. Look for amounts, dates, addresses, health details and anything about other people.

Edit or delete the replies that reveal too much. Most platforms let a business change or remove its own reply at any time.

Then decide who replies from now on, and give them a short list of what never goes into a reply. An hour's pause and a second reader catch most of the rest.

Staff who answer from their own accounts, or in the comments under your posts, need the same list.

The counter-case

When the reviewer has posted details themselves, a reply can refer to what they wrote. It still should not add anything from your records.

Some facts are already public, such as a published price or opening hours, and correcting those is fine.

And a business that keeps little about its customers has less to reveal, though dates and visits still count.

Otherwise, keep every reply to what the reviewer already made public, and take the rest to the phone.

Before you post the reply

  1. List every detail your draft mentions.
  2. Delete anything the reviewer did not post.
  3. Remove amounts, dates, addresses and names.
  4. Describe your general practice instead.
  5. Give a direct number or address.
  6. Ask a second person to read it.
  7. Review your old replies the same way.

Step two is the test that catches almost everything. If the reviewer did not put it in public, the reply does not put it there for them.

The same short, calm reply works on your own page, as covered in a complaint posted on the Facebook page.


Frequently asked questions

Why not correct the review with the facts?

Because the facts are usually the customer's personal information. Publishing what they bought, owe or were treated for discloses it to everyone and reads worse than the review.

Does privacy law apply to review replies?

In general terms, yes. Information collected to serve a customer should not be disclosed for another purpose without consent, and health practitioners usually have stricter rules. This is not legal advice.

Can I mention details the reviewer posted?

You can refer to what they wrote without adding to it. Their choice to share some details is not permission for you to publish others from your records.

What should a safe reply include?

Thanks, an acknowledgement of their experience, a description of your general practice rather than their case, and a named person with a direct number to continue privately.

What if the review is false?

Say your records do not match and invite them to talk. Report it to the platform if it breaks the rules, but never prove your case with their file.

What about replies posted years ago?

Reread them, and edit or delete any that reveal purchases, balances, visits, health details or addresses. Most platforms let the business change or remove its own reply.

West Coast Media Solutions Inc. provides web design, web development, hosting, digital marketing, and business consulting to organisations across Canada, drawing on more than twenty-five years in the field.

Old review replies saying too much?

Send us your listing links. We will flag every reply that discloses customer details and suggest safer wording.

Start a Conversation