Privacy Policy

1. Who We Are (Data Controller)

For the purposes of applicable data protection laws — including the UK/EU GDPR — TopBlast is the data controller in respect of any personal data you provide to us or that we collect.

Legal entity: TopBlast Sàrl
Contact: 0xsi@topblast.pro

2. What Data We Collect

We collect a small amount of data, and only what is necessary for our services to function.

2.1 Data you give us directly

• Email address — if you sign up to our waitlist or mailing list. Used solely to send product updates and announcements.
• Communications — any information you include when you contact us directly.

2.2 Data collected automatically

• Usage and analytics data — pages visited, time on site, browser type, device type, and approximate geographic location, collected via Google Analytics.
• IP address — collected by our hosting infrastructure and Google Analytics, with IP anonymisation enabled.
• Cookies — described in full in Section 4.

We do not collect sensitive personal data (financial account details, government IDs, or health information) through this website.

3. Why We Collect Your Data (Legal Bases)

We only process your personal data where we have a valid legal basis:

• Consent — for analytics cookies and marketing communications. Withdraw at any time.
• Legitimate interests — for website security, fraud prevention, and product improvement.
• Legal obligation — where required by applicable law.

4. Cookies and Google Analytics

4.1 What cookies we use

We use Google Analytics (provided by Google LLC) to understand how visitors use our website. Google Analytics sets cookies on your device to collect anonymised information about your visit. We do not use Facebook Pixel, advertising cookies, retargeting cookies, or any other tracking tools.

4.2 Consent

When you first visit our website, we ask for your consent before loading Google Analytics. If you decline, no analytics cookies are set.

4.3 Opting out

• Install the Google Analytics Opt-out Browser Add-on.
• Decline cookies via our consent banner on first visit.
• Use your browser's privacy mode or a tracker-blocking extension.

Google's privacy policy: policies.google.com/privacy.

4.4 Essential cookies

We set a small essential cookie (cookie_consent) to remember your preference. This does not track you and does not require consent.

5. How We Use Your Data

• To operate and improve our website and products.
• To send product updates to users who have opted in.
• To respond to enquiries or support requests.
• To understand usage patterns via Google Analytics.
• To comply with legal obligations.

We do not sell your personal data. We do not use it for automated decision-making that produces significant effects on you.

6. Data Sharing and Third Parties

• Google LLC (Google Analytics) — analytics data. Google may transfer data to servers in the United States. See Google's data processing terms.
• Hosting and infrastructure providers — cloud infrastructure. Details updated as our infrastructure matures.

We do not share your personal data with any other third parties, except where required by law.

7. International Data Transfers

Some of our service providers — including Google — are based in the United States or outside the EEA and UK. When we transfer personal data outside the EEA or UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions. Contact us for more information.

8. Data Retention

• Email addresses — retained until you unsubscribe or request deletion.
• Analytics data — up to 14 months within Google Analytics, then automatically deleted.
• Communications — up to 2 years from last contact, unless law requires longer retention.
• Cookie consent — the cookie_consent cookie expires after 365 days.

9. Your Rights Under GDPR

If you are in the EEA or UK, you have the following rights:

1. Right of access — request a copy of the personal data we hold about you.
2. Right to rectification — ask us to correct inaccurate or incomplete data.
3. Right to erasure — ask us to delete your personal data where there is no overriding reason to continue processing it.
4. Right to restrict processing — ask us to pause processing in certain circumstances.
5. Right to data portability — request your data in a structured, machine-readable format.
6. Right to object — object to processing based on legitimate interests or for direct marketing.
7. Rights re: automated decisions — we do not currently engage in automated decision-making that significantly affects you.
8. Right to withdraw consent — withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at 0xsi@topblast.pro. We will respond within 30 days. You also have the right to complain to your local data protection authority.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under CCPA/CPRA:

• Right to know — request details about the personal information we collect and how we use it.
• Right to delete — request deletion of your personal information.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale — we do not sell personal information. No opt-out needed.
• Right to non-discrimination — we will not discriminate against you for exercising your rights.

Contact us at 0xsi@topblast.pro. We respond within 45 days as required by California law.

11. Children's Privacy

Our services are not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently done so, contact us immediately.

12. Security

We implement appropriate technical and organisational measures to protect your data. However, no internet transmission is 100% secure — we cannot guarantee absolute security.

13. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date. Continued use of our services constitutes acceptance of the updated policy.

14. Contact Us

For any questions about this Privacy Policy:
0xsi@topblast.pro