Privacy Policy

Last Updated: 2 October 2025

At TopSalesWeb, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Customer Relationship Management (CRM) system and visit our website.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable UK data protection laws.

1. Who We Are

TopSalesWeb is a Customer Relationship Management (CRM) platform provider based in the United Kingdom. We help businesses manage their customer relationships, sales processes, and business operations efficiently.

2. Information We Collect

We collect and process the following types of personal data:

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, company name
• Account Information: Username, password (encrypted), job title, profile information
• Enquiry Information: Subject of enquiry, message content, preferred contact method
• CRM Data: Customer records, sales data, business contacts, communication logs, notes, and any other data you input into our CRM system
• Payment Information: Billing address, payment card details (processed securely through our payment processor)

2.2 Information We Collect Automatically

• Technical Information: IP address, browser type, operating system, device information
• Usage Data: Pages visited, time spent on pages, links clicked, features used
• Cookies and Similar Technologies: Session cookies, preference cookies, analytics cookies
• Log Data: Access times, error logs, system activity

3. How We Use Your Information

We process your personal data for the following purposes under the following legal bases:

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

5. International Data Transfers

Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the UK ICO
• Adequacy decisions recognizing equivalent data protection standards
• Binding Corporate Rules for international group companies

6. Data Security

We implement industry-standard security measures to protect your personal data, including:

• Encryption of data in transit (SSL/TLS) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Regular security updates and patch management
• Employee training on data protection and security
• Incident response and breach notification procedures
• Regular backups and disaster recovery plans

While we strive to protect your data, no system is completely secure. We encourage you to use strong passwords and keep your login credentials confidential.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active and for 6 months after account closure
• CRM Data: Retained according to your subscription and data retention settings
• Financial Records: Retained for 7 years as required by UK tax law
• Marketing Data: Retained until you withdraw consent or for 2 years of inactivity
• Technical Logs: Retained for 12 months for security and system monitoring

After the retention period, we securely delete or anonymize your data.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

How to Exercise Your Rights: To exercise any of these rights, please contact us at general@topsalesweb.co.uk. We will respond to your request within one month, though this may be extended by two months for complex requests.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. Types of cookies we use:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or prominent notice on our website
• Where required, obtain your consent for material changes

We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority: