I am interested in what most businesses do relating to obtaining permission to publish reviews on their websites. Google policy is that permission should be obtained, but in practice, does this happen 100% of the time? For reviews that are prompted by a request, it is easier to build it into the request message, but for those organically obtained, permission would be hard to track.