Select how you’d like to proceed with your insurance needs.
Talk to a real insurance expert on your time.
15-minutes consultation with licensed advisors
Perfect if you’re unsure about coverage needs
Get personalised recommendations
Already have coverage? Let’s simplify your service
Keep your current carriers & policies
Simple digital authorisation process
Seamless transition to better service

To protect your small business reputation, keep your business details accurate, check reviews regularly and respond calmly when customers complain. Then fix the problems that keep coming up and protect the online accounts customers see as your business.
A bad review is often the public end of a problem that started inside the business, such as a missed appointment or an unanswered call. How you reply, and whether the same problem happens again, shapes what the next customer sees.
Some reputation problems never reach a review site. business.gov.au notes that "most unhappy customers don't complain" and simply stop using the business.
Start with what a new customer sees. Search your business name on its own, with "reviews" and with your suburb, then look at your Google Business Profile, website and social profiles. A listing that says you close at 5pm when you close at 4pm frustrates customers before you've done anything wrong.
After that, a weekly look at new online reviews, comments and open complaints keeps you up to date on the platforms your customers use. Once a month, look for patterns, because several customers raising the same issue usually points to something inside the business. A Google Alert for your business name helps you monitor the web for new mentions.
Ask genuine customers for honest feedback after a completed job, purchase or booking. A direct link in a follow-up message, or a QR code on your receipt, gives them a quick way to leave a review. Follow-up emails asking for a review need the customer's permission to email them (business.gov.au).
If the message also promotes your business, the spam rules may apply. Marketing emails and SMS need the person's consent, must identify your business and must include an unsubscribe option.
Keep the request neutral: "Thanks for choosing us, and if you'd like to share your experience, you can leave a review here." Google says merchants should not "request that specific content be included", so avoid lines such as "Loved our service? Give us five stars".
Under the Australian Consumer Law, it's illegal to create or arrange for a fake or misleading review (business.gov.au). The ACCC says reviews may also mislead consumers when they are:
As at September 2026, Google doesn't allow businesses to "discourage or prohibit negative reviews, or selectively solicit positive reviews from customers". You can offer a private way to raise a problem. It shouldn't be used to discourage negative reviews or to ask only happy customers for public reviews.
Any incentive for a review must be clearly disclosed and applied whether the review is positive or negative. Google goes further and bars incentives such as payment or discounts in exchange for posting any review.
Reply promptly and professionally, once you've checked your booking or job records and asked any staff involved. business.gov.au suggests these steps for negative reviews:
You can acknowledge a customer's concern without admitting fault. Leave their personal details out of your reply. The OAIC found in 2024 that a real estate agency interfered with a tenant's privacy when its review reply disclosed his name, occupation and finances.
If your business made a mistake: "Hi Sarah, thanks for letting us know. We're sorry about the delay and would like to put it right, so please call or email us."
If you can't find the customer in your records: "Hi James, thanks for your feedback. We can't find a matching booking, so please call or email us with your details and we'll look into it."
If you see it differently: "Hi Alex, thanks for raising this. We see what happened differently and would like to talk it through by phone or email."
Start by looking for a matching customer in your bookings, jobs, orders and staff notes. Signs of a fake review include "a spike in highly positive or negative reviews over a short period of time" (ACCC). One sign on its own is a reason to look closer, rather than proof.
You can report a review that breaks Google's policies, but not "just because you disagree with it or dislike it" (Google). Keep screenshots and a record of each report.
The ACCC suggests asking the review platform to remove a false or misleading review, or responding to correct the public record. If the reviewer is a genuine customer, a professional reply usually does more for your small business reputation than a removal request.
Get legal advice before you act on a review that makes false claims and is seriously harming your business. Under Victorian law, defamation means causing serious harm to a person's reputation by publishing material that changes how people feel about them.
An unfavourable review may still be lawful. In Victoria, a reviewer may be able to defend a claim by showing what they said is true or was an honest opinion. Under Victorian law, not-for-profits and small businesses with fewer than 10 staff can sue for defamation (Victoria Legal Aid).
Rules and time limits may differ between states and territories. In South Australia, for example, defamation proceedings must generally be commenced within 1 year of the date of publication (Law Handbook). Keep legal discussion out of your public reply, because a visible legal threat may draw more attention to the review.
Replying to a complaint helps one customer, while fixing the cause protects your small business reputation with the customers who come after them. A customer complaints procedure helps, and business.gov.au says it "lets your staff handle complaints in a calm and professional way".
A basic complaint log makes patterns easier to spot. For example, a cleaning business with repeated complaints about callbacks and late arrivals might log:
Start with the three steps cyber.gov.au lists for small businesses: turn on multi-factor authentication, update your software and back up your information. Multi-factor authentication is a security control requiring users to present two or more verification factors to gain access to systems.
A hacked email or social account may message your customers or post content without your approval. Begin with business email, your Google Business Profile, website admin, social media and booking or accounting software. Separate logins help too: cyber.gov.au recommends creating an account for each staff member.
If an account is hacked, you can call the Australian Cyber Security Centre's 24/7 hotline on 1300 CYBER1 (1300 292 371) (business.gov.au). Our guide to protecting your business from cyber crime explains cyber risks in more detail.
If customer information may have been exposed, privacy law may apply. Under the Privacy Act 1988, covered organisations must notify affected individuals and the OAIC of a data breach likely to cause serious harm.
A problem needs more than a review reply when:
Then work through these steps:
Agree ahead of time who posts from business accounts and who replies to public complaints. Some problems need help from an IT or cyber security specialist, a lawyer or a communications adviser. Our guide to creating a disaster recovery plan explains how to plan for bigger disruptions.
Business insurance is part of planning for incidents that may start a reputation problem, such as a cyber attack or a claim from a customer.
Cover depends on the policy and insurer you choose. Check the policy wording and its terms and conditions for what is and isn't included.
An upcover team member or an insurance broker can talk through options with you. Our guide to what business insurance you may need explains the common types of cover.
upcover arranges insurance for Australian small businesses. upcover works with 80+ insurance partners and can arrange quotes from a range of insurers.
Get a quote for small business insurance.
For a business with several reviews, one review is a small part of what customers see. Your reply sits under it for everyone to read. Google says helpful and positive replies to reviews can show that you're responsive to your customers.
A review is eligible for removal only if it violates Google's policies, according to Google. On your own website, removing genuine negative reviews may mislead consumers (ACCC).
Review extortion scams may involve a sudden increase in 1-star and 2-star reviews, then a demand for money, goods or services to remove them (Google). Google advises not engaging or paying, gathering evidence and reporting the scam through its merchant extortion report form.
A reply to a positive review may show customers you read their feedback. Google suggests replying where you can share a helpful update or answer a question, instead of sending the same "thank you" to everyone.
The OAIC says "most small businesses are not covered by the Privacy Act 1988, but some are", such as health service providers. For the Act, a small business has an annual turnover of $3 million or less.
Written by upcover's editorial team. This article provides general information only and does not take into account your objectives, financial situation or needs. It is not legal advice; for questions about consumer law, privacy or defamation that affect your business, get legal advice. Laws, regulator guidance and platform policies may change. Insurance availability and cover are subject to underwriting and the terms, conditions, limits and exclusions of the relevant policy. Read the policy wording and its terms and conditions before deciding. upcover arranges insurance products with selected insurers and underwriters and does not compare all general insurers or insurance products available in the market.
We are digitising commercial insurance and risk management for small, mid-market and technology businesses. We work with a global network of underwriters, challenging legacy brokers and delivering market leading coverage to our customers.