Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Getting negative reviews can feel personal - especially when you’ve poured time, money and a lot of late nights into your business.
But before you hit “reply” and say what you really think, it’s worth pausing. The way you respond to a negative review can create legal risk (and reputational damage) far beyond the original complaint.
The good news is that you can respond firmly, professionally and effectively, while staying on the right side of UK law. Below, we’ll walk you through a practical, small-business-friendly approach - and the key legal traps to avoid.
This article is general information only and does not constitute legal advice. If you need advice about your specific situation, speak to a solicitor.
Why Your Response To Negative Reviews Can Become A Legal Problem
Most businesses focus on the marketing side of online reviews (brand trust, conversion rates, reputation management). That matters, but there’s also a legal layer that’s easy to overlook.
A response to negative reviews can create liability because you’re publishing a statement about someone else (and sometimes about your staff, suppliers, competitors, or even ongoing disputes). It can also involve personal data and confidential information.
Common legal issues we see when businesses respond to negative reviews include:
- Defamation risk (making allegations about a reviewer - for example, dishonesty or criminal conduct - that you can’t justify, or that go beyond what’s necessary).
- Privacy and data protection breaches (sharing booking details, addresses, phone numbers, medical info, or order history).
- Confidentiality breaches (posting screenshots of private emails/messages or internal notes).
- Harassment or discrimination (responses that are aggressive, threatening, or target protected characteristics).
- Consumer law and advertising issues (misleading claims about refunds, guarantees, “no cancellations”, or what customers are entitled to).
If you want a deeper overview of the practical and legal angles, bad online reviews are something you can plan for (and manage) with the right process.
Step-By-Step: A Safe Process For Responding To Negative Reviews
When a negative review pops up, it’s tempting to respond in minutes. In practice, the safest approach is a short internal checklist before you post anything publicly.
1) Don’t Respond Immediately (Even If You’re Right)
Take a beat. Most legal and PR problems happen because a business responds emotionally and publishes something they later can’t justify.
A good rule is: write the response, save it as a draft, and revisit it after 30–60 minutes.
2) Verify Whether The Reviewer Was Actually A Customer
Not every review is genuine. Some are posted by people who never bought from you, ex-employees, competitors, or anonymous accounts.
Internally, confirm:
- Do you have a matching order/booking record?
- Is the date/time consistent with your records?
- Is the complaint about something you actually provide?
Even if you believe it’s fake, be careful: calling it fake publicly can still escalate conflict. Often, it’s better to invite the person to contact you directly and provide a reference number.
3) Decide The Goal Of Your Reply
Your response isn’t only for the reviewer - it’s for future customers reading the thread.
In most cases, your goal is to show that:
- you take feedback seriously,
- you have a clear complaints process, and
- you resolve issues fairly.
4) Keep It Short, Neutral And Fact-Based
Safe responses usually:
- acknowledge the concern,
- state a high-level fact (without personal data), and
- offer a clear next step (email/phone/in-store follow-up).
If you need a script, a strong default template is:
Template:
“Thanks for your feedback - we’re sorry to hear about your experience. We’d like to look into this properly. Please contact us at with your order/booking reference so we can resolve it.”
5) Move The Details Offline
If the complaint involves sensitive details (refunds, medical issues, safety concerns, alleged misconduct), you’re usually better off handling it privately.
This reduces legal risk and gives you space to investigate properly.
What You Must Not Do When Responding To Negative Reviews (Common Legal Traps)
There’s a difference between defending your business and creating new legal exposure. Here are the big “don’ts”.
Don’t Share Personal Data (Even If They “Started It”)
A major trap is revealing personal information to “prove” the reviewer is wrong, for example:
- “You stayed in Room 3 on Friday and checked out late.”
- “Your address is and our driver called you twice.”
- “We refunded you on to card ending .”
- “You told our staff you had .”
In the UK, personal data is regulated by the UK GDPR and the Data Protection Act 2018. Even if you’re frustrated, “they posted first” isn’t a free pass for your business to disclose more data publicly.
A practical way to reduce mistakes is to ensure your external communications and data handling are aligned with a proper Privacy Policy, and that your team knows what can and can’t be shared publicly.
Don’t Post Screenshots Of Private Messages Without Thinking
Businesses sometimes post screenshots of emails, DMs, or text messages to “show what really happened”. This can be risky because it may:
- reveal personal data,
- reveal confidential commercial information (prices, supplier arrangements, internal processes), or
- create a dispute about consent and privacy expectations.
Even if the screenshot feels justified, you should assume it could be forwarded, reported, or used in a complaint later.
Don’t Make Threats You’re Not Prepared To Follow Through On
Statements like “We will sue you” or “Remove this review within 24 hours or else” often inflame the situation - and can look unreasonable to the public.
If the review is genuinely harmful and untrue, it may be more appropriate to take a measured legal step (for example, a formal request for removal, or a properly drafted letter) rather than posting threats in a public comment thread.
Where a review crosses a legal line, a Cease And Desist Letter may be a more sensible option than a heated public argument.
Don’t Accuse The Reviewer Of Criminal Behaviour (Defamation Risk)
Calling someone a “fraud”, “scammer”, “thief”, or saying they are “extorting” you can be legally risky - particularly if you can’t support the allegation with evidence and it goes beyond what’s necessary.
Defamation law is complex, but the practical takeaway for small businesses is simple: avoid publishing allegations you’re not in a position to justify, especially allegations that would seriously harm someone’s reputation.
If you think a review is defamatory and is causing real damage, it’s worth getting advice before responding publicly. In some cases, the right move is a private legal escalation rather than a public back-and-forth.
If you’re in a situation where someone is making serious allegations against your business (or you’re considering taking action), a defamation claim response strategy can also help you think through what evidence and wording actually matters (online reviews are typically treated as libel, rather than slander).
Don’t Make Consumer Law Promises You Can’t Honour
When responding to negative reviews, businesses sometimes say things like:
- “We don’t give refunds under any circumstances.”
- “You had 24 hours to complain, so it’s too late.”
- “All deposits are non-refundable, no exceptions.”
Be careful. Depending on what you sell and the situation, customers may have statutory rights (especially for faulty goods, not-as-described goods, or certain distance/online sales). Even in B2B, your contract terms and how you apply them matters.
If your written policies don’t match how consumer law works, you can end up escalating the dispute - and increasing the chance of chargebacks, complaints or formal claims.
For online businesses in particular, having clear Website Terms And Conditions (including cancellation, refunds and complaints processes) can make review disputes far easier to manage.
When Negative Reviews Cross The Line: What Legal Options Do You Have?
Some negative reviews are fair feedback, even if they’re uncomfortable to read. But sometimes a review goes beyond opinion and becomes something you may be able to challenge.
Common “cross the line” scenarios include:
- Fake reviews posted by someone who was never a customer.
- Reviews containing hate speech or discriminatory language.
- Reviews that disclose personal data about staff members (or other customers).
- Reviews with threats (“refund me or I’ll destroy your business”).
- Reviews making factual allegations that are untrue and damaging.
Option 1: Use The Platform’s Reporting Tools
Most review platforms have policies against hate speech, harassment, impersonation, doxxing, and fake engagement. Reporting can sometimes remove the review without you needing to engage directly.
Keep records as you go:
- screenshots of the review (including date/time),
- any messages from the reviewer, and
- your internal evidence (job sheets, receipts, booking logs).
Option 2: Make A Calm Public Reply (That Preserves Your Position)
Sometimes the most effective response is a short statement that you can’t find a record of the transaction and inviting the reviewer to contact you privately.
Example:
Template:
“Thanks for your review. We can’t locate a booking/order under this name, but we’d like to investigate. Please email with any reference details so we can assist.”
This approach avoids calling the person a liar, while still signalling to the public that something doesn’t add up.
Option 3: Consider Formal Legal Steps (Carefully)
If the review is seriously harming your business, you may need a more formal approach. This might include:
- a letter requesting removal or retraction,
- a complaint to the platform with supporting evidence, or
- legal action in extreme cases (where proportionate and commercially sensible).
Legal action is rarely the first step for small businesses - but knowing it exists can help you choose a response that protects you, instead of making things worse.
How To Protect Your Business From Future Negative Reviews (Without Silencing Customers)
You can’t always prevent negative reviews, but you can reduce how often they happen - and reduce the legal risk when they do.
Train Your Team On A Simple “Review Response” Policy
If multiple staff members have access to your accounts, you need consistency. A basic policy should cover:
- who is allowed to respond publicly,
- what information must never be posted (personal data, internal notes, allegations),
- when to move the conversation offline, and
- when to escalate to management or legal advice.
If reviews involve staff behaviour, your internal process should also be fair and structured - not trial-by-review. This is where solid HR documentation (and, for employees, a well-drafted Employment Contract) can help you investigate issues properly and consistently.
Make Complaints Easy Before They Become Public
Many reviews happen because customers felt ignored. Consider:
- a clear complaints email address on your website and invoices,
- an “issue resolution” timeframe (for example, “we respond within 2 business days”), and
- a short internal checklist for refunds, replacements, and service recovery.
Get Your Data Handling Right (So You Don’t Panic In Public)
One of the most common reasons businesses overshare in replies is that they don’t have a clear internal understanding of what they’re allowed to say.
Having your privacy compliance set up properly can make your team calmer and more consistent - including when responding to public feedback. If you’re handling customer data regularly, a GDPR Package can help you put the right policies and processes in place.
Document What Happened (So You Can Respond Confidently)
When a review is unfair, the strongest position is evidence - not anger.
Depending on your business, that could include:
- job sheets and photos (trades and services),
- booking confirmations and timestamps (hospitality and appointments),
- delivery records (ecommerce and logistics),
- refund logs and communications (retail and subscription services).
This also helps if a platform requests proof when you challenge a review.
Key Takeaways
- When responding to negative reviews, assume your reply will be read widely and could be used later in a complaint or dispute.
- Keep responses calm, brief and fact-based, and move detailed discussions offline.
- Avoid defamation risk by not making allegations you can’t justify, especially allegations of criminal behaviour.
- Don’t share personal data in public replies - even if you think it “proves” your side of the story - as this can create UK GDPR and Data Protection Act 2018 risk.
- Be careful not to over-promise on refunds or cancellations; consumer rights can apply regardless of what you say in a comment.
- If a review crosses the line (fake, abusive, threatening, or seriously untrue), consider reporting it and taking proportionate formal steps rather than arguing publicly.
- Strong legal foundations - clear terms, privacy compliance, and internal policies - make review disputes easier to handle from day one.
If you’d like help putting the right policies and terms in place, or you’re dealing with serious negative reviews and you’re not sure what you can say legally, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.


