How to Respond to a Bad Review When You're Not Allowed to Say Much

27 September 2026·4 min read

Quick answer: When confidentiality or privacy obligations stop you correcting the record in detail, respond to the reviewer, not the review. Acknowledge their experience without confirming specifics, briefly explain that you're limited in what you can discuss publicly, and invite them offline. Silence looks guilty and arguing facts in public usually breaks the same obligations twice over. 🤍

The businesses who handle bad reviews worst aren't the ones who ignore them — they're the ones who try to "win" the review in the comments, and end up confirming details they were never supposed to confirm in the first place. 💖 If confidentiality or privacy obligations mean you genuinely can't lay out your side of the story, that's not a disadvantage you have to hide. It's a constraint you can work within — calmly, and in a way that reads as professional rather than evasive.

Please note: general information, not legal advice — check current official guidance before relying on it.

What most businesses get wrong

The instinct to defend yourself in public is strong, and it usually goes one of two bad ways. Some businesses over-explain — confirming that the person was in fact a client or customer, disputing dates, or describing what "actually happened" in enough detail to identify the individual to anyone reading along. That can turn a one-star review into a confidentiality problem. Others go completely silent, which to a reader looks less like discretion and more like guilt. Neither response actually protects the business — the goal is a middle path that says "we take this seriously" without saying anything you're not allowed to.

The reply formula

Acknowledge, without confirming specifics: "Thanks for taking the time to share this — I'm sorry to hear you've had a frustrating experience."
Take ownership of the tone, not the facts: "It's clear this hasn't felt like the standard we aim for."
Name the constraint briefly, once: "Because of the confidential nature of the work we do, I'm not able to go into detail here."
Invite it offline: "I'd really welcome the chance to talk this through directly — please reach out to [contact] and I'll look into it personally."
Close, briefly: "Thanks again for the feedback."

A business bound by client confidentiality: a review named specific details about a matter the business handled. Rather than confirming or denying anything about the matter, the reply stuck to the formula above and invited the reviewer to call directly — no detail about the actual work was ever confirmed publicly, which mattered more than winning the exchange.

A business holding sensitive customer data: a complaint alleged the business had "lost" someone's information. The reply didn't confirm or deny what data was involved, simply noted that privacy obligations meant specifics couldn't be discussed publicly, and gave a direct channel to raise it — which also happens to be the compliant way to handle it.

A local service business facing an inaccurate claim: the review contained a factual error the business could have "proven" wrong with account details, but doing so publicly would have exposed a third party's information. They corrected the general point once, briefly, without the specifics, and left it there.

How to actually do this well

Never confirm, in a public reply, that someone was a client or customer — even that fact can be sensitive depending on your line of work
Move the detailed conversation to phone or a private message as fast as possible
Keep the public tone calm and warm, not clipped or legalistic
Write the reply once, have a second person read it before it's posted, and don't edit it live in the comments
Document what happened internally, separately from the public reply, in case it needs to go further
If the review breaches a platform's policy (names a third party, discloses information that isn't the reviewer's own) look into reporting it through the platform in addition to replying

💡 You're not writing for the reviewer. You're writing for everyone else who reads it later. A calm, constrained, professional reply reads as restraint to that audience — even if it never fully satisfies the person who left the review.

Mistakes to avoid

Confirming someone was a client, patient or customer in a public reply
Arguing dates, timelines or "what really happened" in the comments
Getting defensive or sarcastic, even subtly
Ignoring it completely and hoping it disappears
Using a generic copy-paste reply that doesn't acknowledge the specific complaint at all

Frequently asked questions

Can I ever share more detail to defend myself publicly?

This depends heavily on your industry, your contractual obligations and the privacy laws that apply to you, so it genuinely varies — as a general rule, if sharing detail would identify the person or disclose information about them, don't, and get specific advice if you're unsure.

Should I ask the platform to remove the review?

If the review discloses someone else's private information, breaches the platform's own content policy, or is clearly about someone who was never a customer, it's worth raising with the platform — but a review you simply disagree with usually isn't grounds for removal.

What if the review is from someone who was never actually a client?

You can say, generally and without detail, that you have no record of this person as a client, without needing to explain further. Keep it brief.

Does responding publicly at all make things worse?

Not responding tends to read worse over time than a short, careful reply. The risk isn't in replying — it's in replying with too much detail.

Keep reading 🤍

Written by

Kate, founder of Chronically Online

I help Gold Coast and Brisbane businesses grow with branding, websites and marketing that actually works.

Work with me ✦