Top Hand Payments Privacy Policy
Last Updated: March 1, 2026
1. Definitions
- Personal Data: Any information that identifies or can reasonably be linked to an identified individual, including name, email, phone number, address, IP address, and device identifiers.
- Usage Data: Information collected automatically when you use our services, such as IP address, browser type, pages visited, visit duration, and device identifiers.
- Cookies: Small data files stored on your device that track browsing activity and store preferences.
- Service Provider: Any third party that processes data on our behalf to support, deliver, or analyze our services.
- Account: A user account created for access to our services.
- Device: Any tool used to access our services, such as a computer, phone, or tablet.
2. Information We Collect
2.1 Information You Provide
- First and last name
- Email address
- Phone number
- Mailing address (city, state, ZIP)
- Nature and size of your business
2.2 Information Collected Automatically
When you use our services, we automatically collect Usage Data, which may include your IP address, browser type and version, pages visited, date and time of visits, time spent on pages, unique device identifiers, mobile device type and ID, mobile operating system, and other diagnostic data.
2.3 Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies to monitor activity and store information. The types of cookies we use include:
- Essential Cookies (Session): Required for authentication, security, and basic service functionality.
- Cookie Consent Cookies (Persistent): Track whether you have accepted cookie usage on our site.
- Functionality Cookies (Persistent): Remember your preferences such as login details and language settings.
- Performance Cookies (Persistent, Third-Party): Track website traffic and user behavior to help us improve our services.
- Advertising Cookies (Persistent, Third-Party): Track browsing habits to serve relevant advertising across websites.
You can configure your browser to refuse cookies, but some features of our services may not function properly without them.
3. How We Use Your Information
We use collected information for the following purposes:
- Providing, maintaining, and monitoring our services
- Managing your account and registration
- Processing transactions and fulfilling contracts
- Contacting you with updates, security notices, and service-related communications
- Sending promotional information about products, services, and events (unless you opt out)
- Responding to your requests and inquiries
- Delivering targeted advertising and measuring campaign effectiveness
- Conducting data analysis to improve our services and user experience
- Evaluating or conducting mergers, acquisitions, or asset transfers
- Complying with legal obligations and defending our rights
4. How We Share Your Information
We may share your information in the following circumstances:
- Service Providers: With third parties that assist in service delivery, payment processing, analytics, and advertising.
- Business Transfers: During negotiations or completion of mergers, acquisitions, or asset sales.
- Affiliates: With affiliated entities, who are bound by this Privacy Policy.
- Business Partners: With partners to offer specific products, services, or promotions.
- Legal Requirements: When required by law, court order, or government request, or to protect our rights, safety, or property.
- With Your Consent: For any other purpose with your explicit consent.
We do not sell the personal information of consumers under 16 years of age without affirmative authorization.
5. Third-Party Services
Our third-party vendors (such as credit card processors, banks, and clearinghouses) may independently collect information from you. We do not control how these third parties use your information, but we require them to disclose their data practices. Some third parties act solely as intermediaries and do not retain your data.
5.1 Remarketing and Advertising
We use remarketing services, including Google Ads, to display advertisements after you visit our services. These services use cookies and similar technologies to recognize your device and serve relevant ads.
You can opt out of interest-based advertising through:
- NAI: http://www.networkadvertising.org/choices/
- EDAA: http://www.youronlinechoices.com/
- DAA: http://optout.aboutads.info/?c=2&lang=EN
On mobile devices, you can enable “Limit Ad Tracking” (iOS) or “Opt Out of Ads Personalization” (Android).
6. Data Retention
We retain Personal Data only as long as necessary to fulfill the purposes for which it was collected. Specifically:
- Data related to a contract is retained until that contract is fully performed.
- Data processed for legitimate business interests is retained as long as needed for those purposes.
- Data may be retained longer if you have given consent or if required by law.
- Usage Data is generally retained for a shorter period unless needed for security or legal compliance.
Once the retention period expires, Personal Data is deleted. After deletion, rights of access, erasure, rectification, and data portability can no longer be enforced.
7. Data Transfers
Your data may be transferred to and maintained on systems located outside your jurisdiction, where data protection laws may differ. By submitting your information and agreeing to this policy, you consent to such transfers. We take reasonable steps to ensure your data is handled securely regardless of location.
8. Data Security
We use commercially reasonable measures to protect your Personal Data, including encryption for sensitive information transmitted over the internet. Access to personally identifiable information is limited to qualified employees with password-protected access. We audit our security systems regularly. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Your Rights
9.1 General Rights
Under applicable data protection laws, you may have the following rights:
- Access your Personal Data and receive a copy of it
- Correct incomplete or inaccurate information
- Request deletion of your Personal Data
- Restrict or object to certain processing
- Request data portability in a machine-readable format
- Withdraw consent at any time
- File a complaint with a supervisory authority
9.2 GDPR Rights (EU Residents)
If you are in the European Economic Area, we process your data under the following legal bases: your consent, performance of a contract, legal obligations, protection of vital interests, public interest, or our legitimate business interests. You may exercise your GDPR rights by contacting us. We may verify your identity before responding. You also have the right to lodge a complaint with your local data protection authority.
9.3 CCPA Rights (California Residents)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and share
- Request deletion of your personal information
- Opt out of the sale of your personal information
- Not be discriminated against for exercising your rights
To submit a request, contact us using the information below. We will respond within 45 days (extendable by an additional 45 days with notice). Disclosures cover the 12-month period before your request.
Categories of Information Collected (Past 12 Months)
- Identifiers (e.g., name, email, phone)
- Commercial information (e.g., transaction records)
- Professional or employment-related information
Do Not Sell My Personal Information
You have the right to opt out of the sale of your personal information. Contact us to submit an opt-out request. Note that some analytics and advertising technologies used on our site may qualify as a “sale” under the CCPA.
Do Not Track
Our services do not respond to Do Not Track browser signals. Some third-party websites linked from our services may track your browsing activity. You can manage Do Not Track preferences in your browser settings.
Shine the Light (CA Civil Code Section 1798)
California residents with an established business relationship with us may request information once per year about personal data shared with third parties for direct marketing. Contact us using the information below.
Minor Users (CA Business and Professions Code Section 22581)
California residents under 18 who are registered users may request removal of publicly posted content. Contact us with the email address associated with your account.
10. Media Recording and Storage
If we record user interactions (voice or video), we will inform you and obtain your consent per GDPR Article 7. Recorded data is stored securely and used only for specified purposes.
11. How to Contact Us or Opt Out
To exercise any of your rights, update your information, correct inaccuracies, request deletion, or opt out of communications, contact us at:
Email: legal@tophandpayments.com
If you request deletion, your information will be functionally removed from our active systems. We will not sell, transfer, or use your information going forward, though some residual data may remain in backups.
12. Changes to This Policy
We will post any changes to this Privacy Policy on our website. If changes would result in disclosure of information you previously asked us not to disclose, we will contact you directly before making those changes.
13. Links to Other Websites
Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. Review their privacy policies before providing any personal information.