A Google review needs a Google account, a login and a public identity. A large share of your happiest customers will simply not do it — but they will type three sentences into a form.
What to record
- Which fields they agreed to publish — name, photo, company, and whether the quote may appear in paid ads
- The timestamp and the wording they agreed to
- A withdrawal link that works without contacting you
Keep testimonials visually distinct from Google reviews on your site. Mixing them without labels misleads visitors and erodes the trust you are trying to build.
This is how ReviewMix's testimonial form works: consent is recorded per field in a ledger that is appended to and never edited, and every submission carries a self-service link to view, edit, withdraw, export or erase — the data rights article has the detail.
For the asking itself, the question to use and the moment to send it, see how to collect customer testimonials without it being awkward.
If you are still deciding which product to use for this, how to choose a testimonial collection tool sets out what to compare and what to ask a vendor before you commit.
Displaying what you have collected raises a separate question, because a third-party embed meets your cookie banner: embedding reviews without breaking your consent banner covers that side.
Consent recorded per field is also what makes a later change workable: can a customer withdraw a testimonial after it is published? walks through a partial withdrawal.
