42. Testimonials You Are Allowed to Publish

A testimonial is someone else's personal data and reputation, not a decoration you found in the project folder. Publishing it means you are allowed to, in a way you could explain if the person asked. For Malaysian businesses that explanation sits under ordinary manners and under the Personal Data Protection Act. You need a clear yes for the words, the name, and any photo. A happy chat message is not automatically a yes to put that message on the homepage.

Some trades should assume the answer is no unless a written consent says otherwise. Health, counselling, schools, and anything involving a child are at the strict end. A Johor Bahru practice such as PsyCore, which works with families and children, is a reminder that client stories in care settings are private by default. A cafe or a renovation firm has more room, and still needs permission. The rule does not get looser because the quote is flattering.

<>

Ask for permission that names the use

Ask in writing. A short message is enough. May we use these sentences, your first name, the suburb, and this photo on our website and on a printed flyer? If they say website only, do not stretch it to a billboard. Keep the reply. If they later say stop, take it down from the places you control and do not use it in the next print run. Permission is not a permanent transfer of their identity to your brand.

Let them use their own words. Drafting a glowing paragraph and asking them to approve it produces testimonials that all sound like you. It is also a poor way to get a true yes, because people agree to be polite. Edit only for length and for private details they did not realise were sensitive, and show them the edit. Do not add results they did not claim. You should not invent a number, a recovery, or a ranking and attribute it to a customer.

Publish the least identity that still feels real

A first name and a suburb is often enough for a local service. A full name and a job title help when you sell to companies and the speaker has agreed. A photo of a face needs its own yes. Do not publish children. Do not publish a house number, a number plate, or a medical detail because it happened to be in the thank-you note. Crop and delete. If the story only works by exposing something private, the story stays off the site.

• A written yes that says where the words will appear.
• The person's own wording, trimmed only with their approval.
• No invented results and no borrowed star ratings.
• No children, and no health details, without a specific consent you would show a lawyer.
• A way for them to withdraw, and a note of where you stored the yes.

Star widgets and anonymous praise blocks are a common shortcut. If you cannot show that the ratings are from real customers of yours, do not display them. A row of anonymous stars is not a testimonial. It is a graphic. Buyers who ask and how do I read one will not enjoy a vague answer. Silence is cleaner than theatre.

<>

Store the consent where the next staff member can find it

Keep a folder, named by the person or by a code if the matter is sensitive, with the approved text and the permission message. The website editor should not publish from memory. When you redesign, do not copy every old quote across automatically. Check that the permission still covers the new site and that the person is still comfortable. A quote from a client you later fell out with is a poor decoration, even if the legal yes is old. Use judgement and take it down.

If you cannot find the yes, you do not have a testimonial. You have a sentence you wish a customer had agreed to.

Staff need a script for asking. After a job goes well, one person sends the request, rather than three people fishing in the group chat. The script should make no the easy answer. Many customers are glad to help and will say so clearly. The ones who hesitate should be left alone. A testimonial campaign that pressures people will collect words you should not be proud to print.

<>

Place testimonials where they support a claim you can explain

Put a quote on the service it actually describes. A sentence about punctual cleaning does not belong on a page about renovation. Date the quote if the business has changed a lot since then, or retire quotes that describe a process you no longer use. Two specific sentences beat ten vague ones. The page should still make sense if every quote were removed, because testimonials are support, not the only evidence you exist.

Read the set once a year against your current trade. Remove anything you cannot trace to a permission, anything about a minor, and anything you would not say in front of the customer. The homepage will look slightly emptier and much safer. A business that is careful with other people's words is easier to trust with a set of keys, a child pickup, or a company account. That care is the point of the rule, not the decoration it sometimes delays.