Privacy Policy

1. Introduction

Top Web Defender ("Top Web Defender", "we", "us" or "our") provides website security, malware-related assistance, security hardening and ongoing website protection services.

We respect the privacy of website visitors, prospective customers and clients. This Privacy Policy explains how personal information is collected, used, stored, shared and protected when you visit https://www.topwebdefender.com/, contact us or use our services.

Our processing of personal data is subject to applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable laws of the Republic of Cyprus.

2. Who Is Responsible for Your Data?

The data controller responsible for the personal data described in this Privacy Policy is:

For privacy-related enquiries, contact us using the email address above.

Where we process personal data solely on behalf of a business customer as part of a contracted website security service, that customer may act as the data controller and we may act as a data processor. The applicable contract or data processing agreement will govern that relationship.

3. Information We Collect

Depending on how you interact with us, we may process the following categories of information.

Contact and enquiry information

This may include your name, business name, email address, telephone number, website address and the information you provide when requesting assistance or asking about our services.

Customer and account information

If you become a client, we may process contact details, billing information, contractual records, website details and communications relating to the services you purchase.

Website and technical information

When you visit our website, our hosting infrastructure may process technical information such as your IP address, browser type, device information, requested pages, timestamps and relevant security or access logs.

Security service information

Where necessary to provide contracted website security services, we may process technical information relating to a customer's website, including website addresses, security logs, configuration information, vulnerability findings, malware indicators and incident-related records.

Access credentials may be processed where required for authorised work. Access must be limited to the relevant service purpose and protected using suitable security controls.

Payment and transaction information

Where customers purchase services, we may process transaction references, invoice details, payment status, plan information and related billing records.

Online card or wallet payments, when activated, are expected to be handled by PayPal or another external payment provider. In that case, payment card details are processed by the payment provider under its own privacy practices. Until live payment integration is activated, plan requests are handled by email or WhatsApp and do not involve card processing on this website.

4. How We Use Personal Information

We process personal information for the following purposes where applicable:

• Responding to enquiries
• Preparing quotations
• Establishing and managing customer relationships
• Delivering contracted website security services
• Investigating reported website security issues
• Communicating service findings and recommendations
• Providing technical assistance
• Processing payments and maintaining accounting records
• Protecting our website, infrastructure and services
• Meeting legal and regulatory obligations
• Improving our services through lawful and proportionate processing

We do not use personal data for unrelated purposes without an appropriate legal basis.

5. Legal Bases for Processing

Depending on the circumstances, we rely on one or more lawful bases under Article 6 GDPR.

Contractual necessity

We process information required to enter into or perform an agreement with a customer who is an individual.

Legitimate interests

We may process personal information to respond to business enquiries, secure our systems, prevent abuse, maintain appropriate business records and administer our services, provided these interests are not overridden by individuals' rights and freedoms.

Legal obligations

Certain information must be processed or retained to comply with applicable tax, accounting, legal or regulatory requirements.

Consent

Where consent is required, including for certain optional cookies or marketing communications, we obtain it before the relevant processing takes place.

Where processing is based on consent, it can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Cookies and Similar Technologies

At the time of publication, this website does not use Google Analytics, advertising pixels or other optional marketing tracking tools that require a consent banner.

The website loads fonts from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). When those resources are requested, Google may process technical information such as your IP address according to Google's practices.

Hosting and server infrastructure may create essential security and access logs. These are used to operate and protect the website.

If optional analytics or non-essential tracking technologies are introduced later, this section will be updated and, where required, a consent mechanism will be implemented before those technologies are activated.

Visitors may also manage certain browser settings that affect third-party content or cookies.

7. Sharing Personal Information

We may share personal information with appropriate third parties where necessary for lawful business operations and service delivery.

These may include:

• Hosting and infrastructure providers
• Email service providers
• Payment processors (when live payment services are enabled)
• Technical service providers
• Website security technology providers
• Professional advisers
• Public authorities where disclosure is required by law

Current public website integrations also include links to WhatsApp and Google Maps. Those services operate under their own terms and privacy policies when you choose to open them.

We disclose only information reasonably necessary for the relevant purpose.

Where a provider processes personal data on our behalf, appropriate contractual and security protections are required.

We do not sell personal information.

8. International Data Transfers

Some service providers may process or access information outside Cyprus or the European Economic Area. In particular, Google Fonts and communication or maps services may involve processing outside the EEA.

Where personal information is transferred internationally, we use an appropriate transfer mechanism required by applicable law, such as an adequacy decision or Standard Contractual Clauses, together with any additional safeguards required in the circumstances.

Information about relevant transfer arrangements may be requested using our contact details.

9. Information Security

We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss and other unlawful processing.

Measures may include access controls, authentication safeguards, secure communications, restricted administrative access and security maintenance.

No system or method of data transmission can guarantee absolute security.

10. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including applicable contractual, legal, accounting and security requirements.

Different categories of information may be retained for different periods.

Enquiry records, customer correspondence, billing records, technical logs and security incident records are assessed according to their purpose and applicable requirements.

Where appropriate, information is securely deleted, anonymised or otherwise disposed of when no longer required.

11. Your Data Protection Rights

Subject to the conditions and limitations provided by applicable law, individuals may have the right to:

• Request access to their personal data
• Request correction of inaccurate data
• Request deletion of personal data
• Request restriction of processing
• Object to certain processing activities
• Request data portability
• Withdraw consent where consent is the lawful basis
• Exercise applicable rights relating to automated decision-making

You can submit a privacy request to info@topwebdefender.com.

We may request reasonable information to verify identity before responding.

Requests will be handled within the time limits required by applicable law.

12. Marketing Communications

Where we send direct marketing communications, we will comply with applicable consent and electronic marketing requirements.

Recipients may withdraw consent or object to direct marketing at any time.

Marketing preferences will not affect the delivery of necessary contractual or administrative communications.

13. Third-Party Websites and Services

Our website may contain links to third-party websites, including payment providers, communication services and external resources.

These third parties may operate under their own privacy policies.

We are not responsible for the independent privacy practices of third-party websites that we do not control.

14. Children's Privacy

Our services are primarily intended for businesses and individuals acting in a professional capacity.

We do not knowingly seek to collect personal information from children for independent marketing purposes.

If we discover that personal data has been collected unlawfully, we will take appropriate steps under applicable law.

15. Personal Data Breaches

Where a personal data breach occurs, we will assess the incident and take appropriate steps in accordance with applicable legal obligations.

Where required, this may include notifying the relevant supervisory authority and affected individuals.

Where we act as a data processor, we will notify the relevant data controller in accordance with our applicable contractual and legal obligations.

16. Complaints

If you have concerns about our handling of personal information, please contact us first at info@topwebdefender.com.

You also have the right to lodge a complaint with a competent supervisory authority.

In Cyprus, the relevant supervisory authority is the Office of the Commissioner for Personal Data Protection.

Official website: https://www.dataprotection.gov.cy/

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, processing activities or applicable legal requirements.

The latest version will be published on this page with an updated revision date.

Where required by law, we will provide additional notice or obtain consent before introducing materially different processing activities.

18. Contact

For questions about this Privacy Policy or the processing of personal information, contact: