Privacy

Privacy Policy

What information we collect, why we use it, when we share it, and the choices available to you.

Effective and last updated: August 11, 2026

1. Scope and controller

This Privacy Policy applies to the website, checkout, customer accounts, managed website and email services, support systems, and related communications operated by Top-Notch Hosting Services LLC, doing business as Top-Notch Hosting. Top-Notch Hosting Services LLC is the business responsible for the personal information described here, except where a third party acts independently under its own privacy notice.

2. Information we collect

  • Account and contact information: name, email address, username, organization, account preferences, and communications.
  • Order and billing information: products, prices, renewal dates, transaction status, billing address, tax information, payment-method type, and processor identifiers. Stripe processes complete card or financial-account details; we generally receive tokens and limited payment details rather than the complete number.
  • Service configuration: domain names, site names, administrator email addresses, selected regions, mailbox settings, DNS or technical configuration, service identifiers, and provisioning status.
  • Customer content: content, files, databases, email-related data, and other material stored or transmitted through a service. We ordinarily process this content to deliver the service and access it only as needed for automated operation, security, support you request, legal compliance, or protection of the service.
  • Support information: ticket messages, attachments, service details, troubleshooting records, and communications with us.
  • Technical and security data: IP address, device and browser data, login and activity timestamps, server and application logs, error records, fraud signals, cookie identifiers, and security events.

3. How we use information

We use information to provide, provision, secure, maintain, and support services; process orders and renewals; authenticate users; prevent fraud, abuse, and security incidents; communicate about accounts and service changes; maintain records; improve reliability and usability; enforce agreements; and comply with legal obligations.

Where a legal basis is required, we rely on performance of a contract, legitimate interests in operating and protecting the service, consent when requested, and compliance with law. You may withdraw consent where processing is based on consent, but withdrawal does not affect earlier lawful processing.

4. How we disclose information

We may disclose information only as reasonably necessary to:

  • payment and fraud-prevention providers, including Stripe and enabled payment-method networks;
  • cloud hosting, DNS, content-delivery, security, certificate, email-infrastructure, monitoring, and communications providers;
  • professional advisers and auditors under confidentiality obligations;
  • government, courts, regulators, or other parties when required by law or reasonably necessary to protect rights, safety, users, or systems;
  • a buyer, successor, lender, or adviser involved in a merger, financing, reorganization, or sale, subject to appropriate protections.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. If that practice changes, we will update this Policy and provide choices required by law.

5. Stripe and payments

Stripe processes payment information as our payment service provider and may also process information as an independent controller for fraud prevention, compliance, and its own legal duties. Stripe’s handling of information is governed by its privacy documentation. Enabled wallets or buy-now-pay-later methods may have separate notices and terms.

6. Cookies

We use cookies and similar storage needed for security, sessions, account login, cart and checkout, preferences, and payment functionality. Our current practices are explained in the Cookie Policy. Disabling essential cookies may prevent checkout or account features from working.

7. Retention

We retain information for only as long as reasonably necessary for the purposes described here, including providing an active service, resolving disputes, preventing fraud, enforcing agreements, meeting tax and accounting rules, and maintaining security records. Retention varies by record type and legal requirement. When information is no longer needed, we delete, anonymize, or securely isolate it. Residual copies may remain in operational backups until normal rotation completes.

Customer service data may become inaccessible or be deleted after cancellation, expiration, or termination. Customers must export required data before service ends. See the Data, Backup & Recovery Policy.

8. Security

We use reasonable safeguards designed to protect personal information, including access controls, encryption in transit, protected administrative access, monitoring, and service-specific security controls. No transmission or storage method is completely secure, so we cannot guarantee absolute security. You are responsible for securing your devices, account credentials, authorized users, and applications under your control.

9. Your privacy choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy, withdraw consent, or appeal a denied request. You may also have a right not to receive discriminatory treatment for exercising a privacy right. These rights can be limited by law, security, the rights of others, and our need to retain transaction or compliance records.

Submit a request through Contact & Support. Describe the request and the account email involved. We may need to verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, subject to verification. You may unsubscribe from non-transactional email through the message link; essential account, security, billing, and service notices will continue while relevant.

10. International processing

We and our providers may process information in the United States and other countries where infrastructure or personnel operate. Those locations may have different privacy laws. Where required, we use recognized safeguards for cross-border transfers.

11. Children

The services are intended for adults and businesses, not children under 18. We do not knowingly collect personal information directly from children. Contact us if you believe a child has provided information so we can review and take appropriate action.

12. Customers acting as data controllers

If you use our services to collect or process personal information from your own visitors, customers, employees, or users, you are responsible for your notices, permissions, lawful basis, settings, retention decisions, and requests from those individuals. Depending on the service and law, we may act as your service provider or processor for that customer-controlled data. Contact us if you need to discuss a data-processing addendum.

13. Changes and contact

We may update this Policy to reflect service, provider, or legal changes. We will post the revised version with its updated date and provide additional notice when required. Submit privacy questions and rights requests through Contact & Support.