Effective date: 8 July 2026
This Privacy Policy explains how TopContractor collects, uses, shares, and protects personal information when you visit our website, book a call, use our funnels or admin/demo areas, communicate with us, or use our contractor growth services (the "Services").
TopContractor is operated by Alcanca Group OÜ, an Estonian private limited company with registry code 17299925, VAT ID EE102894253, and registered office at Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia. Certain services may be provided, supported, billed, or processed through affiliated entities or operational partners where identified in the applicable invoice, order form, checkout page, or written agreement. For privacy questions, contact us at [email protected].
1. Information We Collect
Depending on how you interact with us, we may collect:
- Contact details: name, business name, email address, phone number, and mailing or service-area information.
- Business details: trade, services offered, website, domain, Google Business Profile, social links, reviews, marketing goals, service areas, offers, photos, logos, and onboarding answers.
- Booking and communication data: call bookings, messages, forms, emails, SMS replies, support requests, and meeting notes.
- Account and access data: login details for TopContractor-controlled areas, account status, permissions, manager access, platform configuration details, DNS/nameserver information, and information needed to connect or configure third-party platforms.
- Customer/lead data processed for clients: names, contact details, job requests, calls, messages, review requests, opt-out status, and related lead or customer information submitted through client websites and automations.
- Advertising and campaign data: campaign settings, budgets, platform account details, audience or targeting information, ad performance, leads, pixels/tags, and related reporting data where needed to provide advertising or measurement services.
- Payment and transaction data: invoices, plan details, payment status, billing address, ad budget records, and limited payment metadata. We do not intentionally store full card numbers; card payments are handled by payment processors such as Stripe.
- Technical and usage data: IP address, device, browser, pages visited, referral source, timestamps, cookies, analytics events, and approximate location derived from technical data.
2. How We Collect Information
We collect information directly from you, from forms and booking pages, from our websites and software systems, from communications with you, from payment processors, from client-approved third-party platforms, and from automated technologies such as cookies and analytics tools.
3. How We Use Information
We use information to:
- respond to inquiries, book calls, and provide demos;
- deliver websites, automations, lead capture, missed-call text-back, review requests, local SEO, advertising support, marketing campaigns, and related services;
- create, configure, maintain, secure, and improve client systems;
- process payments, invoices, subscriptions, ad budget records, and account administration;
- communicate with you about onboarding, support, updates, billing, campaign performance, and service issues;
- send or configure calls, SMS, email, review requests, automated follow-up, and marketing messages where requested by a client and where the client is responsible for the required consent or lawful basis;
- measure website and campaign performance, improve our offer, and understand how users interact with our Services;
- protect against fraud, abuse, security incidents, unlawful activity, platform misuse, complaints, and deliverability risks;
- comply with legal, tax, accounting, and regulatory obligations.
4. Legal Bases for EEA/UK Visitors
Where GDPR or similar laws apply, we rely on one or more legal bases: performance of a contract or pre-contract steps; legitimate interests in operating, improving, securing, and marketing our business; consent where required for certain cookies or marketing; and compliance with legal obligations.
5. Client Customer Data
When we process lead, customer, call, form, email, SMS, review, or campaign data on behalf of a contractor or local service business, that business is usually the controller or business responsible for the data, and TopContractor acts as a processor or service provider. The client is responsible for having the required privacy notices, consents, legal bases, opt-out processes, and marketing permissions for its own customers and leads.
Where required, we may enter into a separate Data Processing Agreement, service provider addendum, or similar data protection terms with a client.
6. Cookies and Analytics
We may use cookies, pixels, tags, and similar technologies to operate the website, remember preferences, analyze traffic, measure campaigns, and improve our Services. You can control cookies through your browser settings. Some features may not work correctly if cookies are disabled.
7. Sharing Information
We may share information with:
- hosting, database, CRM, automation, email, SMS, analytics, security, and support providers;
- payment processors, banks, accountants, and billing providers;
- calendar, video-call, form, and communication providers;
- advertising and platform providers such as Google or Meta where needed for client campaigns, media spend, attribution, or measurement;
- domain registrars, DNS providers, website hosting providers, and similar technical vendors;
- contractors, employees, professional advisers, or suppliers who help us provide the Services;
- authorities, regulators, courts, or other parties where required by law or necessary to protect rights, safety, security, or business interests;
- a buyer, successor, or potential transaction partner if our business or assets are reorganized, sold, or transferred.
We do not sell personal information for money. Some analytics, advertising, or measurement tools may be treated as "sharing" or targeted advertising under certain privacy laws; where legally required, you may have the right to opt out. To make an opt-out or privacy request, contact [email protected].
8. International Transfers
We may process and store information in countries other than where you live, including the United States, European Economic Area, United Kingdom, and other locations where our providers operate. Where required, we use appropriate safeguards such as contractual commitments, data processing agreements, or other lawful transfer mechanisms.
9. Retention
We keep personal information for as long as reasonably needed to provide the Services, manage the business, resolve disputes, comply with legal, tax, accounting, and security obligations, and enforce agreements. The exact retention period depends on the type of data, the relationship, and applicable legal requirements.
10. Security
We use reasonable technical and organizational measures designed to protect personal information. However, no website, software system, or transmission method is completely secure. You are responsible for keeping your own accounts, passwords, and third-party platform access secure.
11. Your Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to withdraw consent where processing is based on consent. You may also have the right to opt out of certain marketing, targeted advertising, sale/share of personal information, or profiling where applicable.
To exercise rights, contact [email protected]. We may need to verify your identity or authority before responding. If you are a customer or lead of one of our contractor clients, we may direct your request to that client because they control the underlying customer relationship.
12. Marketing Communications
You can unsubscribe from marketing emails by using the unsubscribe link where available or by contacting us. You can opt out of marketing SMS by replying with the opt-out word provided in the message, such as STOP, where supported. Transactional or service-related messages may still be sent where necessary.
13. Children
The Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children under 13.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. Continued use of the Services after an update means the updated Policy applies.
15. Contact
Questions about this Privacy Policy can be sent to [email protected].
Operator: Alcanca Group OÜ, registry code 17299925, VAT ID EE102894253, Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia.
