Welcome to TopFeedback and our website at topfeedback.co.uk.

TopFeedback is a trading name of Fruitbowl Studio Ltd, registered in England and Wales under company number 12692526. Our registered office is Fulford House, Newbold Terrace, Leamington Spa, Warwickshire, United Kingdom, CV32 4EA.

We take the protection of your personal data very seriously. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to your data.

If you have any questions about this Privacy Policy or our data protection practices, please contact us at admin@topfeedback.co.uk or write to us at our registered address above.

⸻

What law applies

Our use of your personal data is governed by:

• The UK General Data Protection Regulation

• The Data Protection Act 2018

• The Privacy and Electronic Communications Regulations 2003 as amended

We process your personal data in accordance with these laws.

⸻

What is personal data

Personal data means any information relating to an identified or identifiable individual. This may include:

• Name

• Email address

• Telephone number

• Billing details

• IP address

• Device identifiers

• Usage data

⸻

What is processing

Processing means any operation performed on personal data, whether automated or not. This includes collection, storage, use, disclosure, and deletion.

⸻

Who is responsible for processing

Fruitbowl Studio Ltd trading as TopFeedback is the data controller responsible for processing your personal data.

⸻

Legal bases for processing

We process personal data under one or more of the following legal bases:

Performance of a contract

Where processing is necessary to provide our services or fulfil a contract with you.

Legal obligation

Where processing is required to comply with legal or regulatory obligations.

Legitimate interests

Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights. This includes:

• Maintaining website security

• Improving our platform and services

• Preventing fraud

• Managing internal administration

Consent

Where you have given clear consent for specific processing activities, such as marketing communications or non essential cookies.

⸻

Are you obliged to provide data

You are only required to provide personal data that is necessary for us to provide our services or where we are legally required to collect it. If you do not provide required data, we may not be able to enter into or fulfil a contract with you.

⸻

Data We Collect

Data collected automatically

Log data

When you visit our website, we automatically collect:

• IP address

• Browser type and version

• Device type

• Operating system

• Date and time of access

• Pages visited

• Referring website

This data is processed on the basis of our legitimate interests in maintaining security and improving our services.

⸻

Hosting

Our website and platform are hosted using Figma cloud based infrastructure and associated hosting providers. Hosting providers may process technical data such as IP addresses and usage data to ensure the secure and reliable operation of our website.

Processing is based on our legitimate interests in providing a secure and efficient service.

⸻

Cookies

We use cookies in accordance with our Cookie Policy. Cookies may be essential or non essential.

Non essential cookies, including analytics cookies, are only used where you have provided consent.

⸻

Cookie consent tool

When you interact with our cookie banner, we process:

• Your consent preferences

• Your IP address

• Browser and device information

• Date and time of consent

This is processed on the basis of legal obligation and legitimate interest to demonstrate compliance.

⸻

Third party services

We use the following third party providers:

Analytics

Google Analytics

Provider: Google Ireland Limited

We use Google Analytics to understand how users interact with our website. Google may process IP addresses and usage data. Data may be transferred outside the UK under appropriate safeguards.

Payments

Stripe

Provider: Stripe Payments Europe Ltd

If you make a payment, your payment details are processed directly by Stripe. We do not store full card details. Processing is necessary for the performance of our contract.

Social Media

Instagram and Facebook

Provider: Meta Platforms Ireland Limited

If you interact with us via social media, both we and the relevant platform may act as joint controllers of your data. Please refer to the relevant platform privacy policy for further information.

We may introduce advertising tracking technologies such as Meta Pixel in the future. If implemented, these will be disclosed in our Cookie Policy and require consent before activation.

⸻

Data You Provide Directly

Contact enquiries

When you contact us, we may collect:

• Name

• Email address

• Telephone number

• IP address

• Content of your message

This data is processed to respond to your enquiry. The legal basis is consent or legitimate interest.

⸻

Account registration

If you create an account, we collect:

• Full name

• Email address

• Username

• Password

This data is processed to create and manage your account and provide our services. The legal basis is performance of a contract.

⸻

Use of our services

When you use TopFeedback, we process personal data necessary to:

• Provide platform functionality

• Deliver support

• Communicate with you

• Issue invoices

• Comply with tax and accounting obligations

The legal basis is performance of a contract and legal obligation.

Where you use TopFeedback to collect data from your own customers, you act as the data controller and we act as a data processor on your behalf. In those cases, we process data only in accordance with your instructions and our contractual agreement.

⸻

Administration and accounting

We process personal data for internal administration, financial accounting, compliance and record keeping. This is based on legal obligations and legitimate interests.

⸻

Marketing

If you provide consent, we may send you marketing communications about our services. You can withdraw consent at any time by contacting us or using the unsubscribe link in emails.

We do not operate automated large scale profiling for marketing purposes.

⸻

Economic analysis and improvement

We may analyse aggregated and pseudonymised data relating to usage patterns to improve our services. This data is not used to identify individuals.

⸻

Data Sharing

We share personal data only where necessary:

• With service providers such as hosting providers and payment processors

• With professional advisers such as accountants

• Where required by law

All processors are subject to contractual safeguards.

⸻

Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy.

Retention periods may be determined by:

• Duration of our contractual relationship

• Legal and tax obligations

• Limitation periods for legal claims

Where data is no longer required, it is securely deleted or anonymised.

⸻

Data Security

We use appropriate technical and organisational measures to protect personal data, including:

• Encryption

• Access controls

• Secure hosting environments

• Restricted staff access

While we take reasonable steps to protect your data, no internet transmission can be guaranteed completely secure.

In the event of a data breach, we will notify affected individuals and the relevant authority where required by law.

⸻

International Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK approved standard contractual clauses.

⸻

Special category data

We do not intentionally process special category data unless explicitly required and with appropriate consent.

⸻

Children

Our services are not directed at children and we do not knowingly collect personal data from individuals under 18.

⸻

Automated decision making

We do not carry out automated decision making or profiling that produces legal or similarly significant effects.

⸻

Do not sell

We do not sell your personal data.

⸻

Your Rights

Under UK data protection law, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

• Lodge a complaint with the Information Commissioner’s Office

If you wish to exercise your rights, contact admin@topfeedback.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office in the United Kingdom if you believe your data has been processed unlawfully.

⸻

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our services.

This Privacy Policy was last updated on 27 February 2026.