Privacy Policy

Last updated: 12 November 2026

This policy explains what personal data take-top.com collects, why, and what rights you have. We collect only what we need to deliver our Instagram services.

1. Who is responsible

The Site is run by the company whose details are given in our Terms of Service. Under the EU General Data Protection Regulation (GDPR) it is the controller of the data described here. Questions about your data can be sent through our Contact page.

2. What we collect

  • Email address — to send order confirmations, payment and delivery updates, the code that confirms a free trial, and answers to your messages.
  • Instagram username and links — the public profile, post or video you ask us to promote. We never ask for your Instagram password.
  • Order and payment details — what you ordered, the amount, the payment method and the payment result. Card numbers are entered on our payment providers’ pages; we receive only the result and limited details such as the card brand.
  • Technical data — IP address, the country it belongs to, browser and device type and the time of your visit. We use it to keep the Site secure, to prevent fraud and to show the payment methods available in your country.
  • Your messages — what you write to us through the contact form.

3. Why we use it

  • To accept, deliver and support your orders, refunds and guarantee refills — this is needed to perform our contract with you (Art. 6(1)(b) GDPR).
  • To keep accounting and tax records — a legal obligation (Art. 6(1)(c) GDPR).
  • To protect the Site and our customers from fraud and abuse, and to answer your questions — our legitimate interests (Art. 6(1)(f) GDPR).

We do not sell personal data, we do not build advertising profiles, and we do not send newsletters.

4. Who receives your data

Only the service providers we need to run the Site, each bound to protect your data and to use it only on our instructions:

  • payment providers, which process your payment;
  • the companies that host our servers and protect the Site against attacks;
  • the service that delivers our emails.

We may also disclose data when the law requires it or to defend our legal rights.

5. Transfers outside the EEA

Some of these providers may process data outside the European Economic Area. Such transfers rest on the safeguards of the GDPR, such as the European Commission’s standard contractual clauses.

6. Cookies

We use only the cookies the Site needs to work: to keep your session, to remember settings such as your time zone, and to protect our forms from bots. We use no advertising or tracking cookies. You can block cookies in your browser, but parts of the Site may then stop working.

7. How long we keep it

  • Order and payment records — as long as accounting and tax law requires, as a rule five years from the end of the year of the payment.
  • Messages to support — as long as needed to handle your request and any follow-up.
  • Technical logs — for a short period needed to keep the Site secure.

8. Your rights

You may ask us for access to your data, its correction or deletion, to restrict its use, to object to processing based on our legitimate interests, and to receive your data in a portable form. Write to us through the Contact page; we may ask you to confirm the email address used for your orders. You may also complain to a data protection supervisory authority, in particular the one of the EU country where you live or work.

9. Security

All pages are served over encrypted connections, access to customer data is limited to the people who need it for their work, and our data is backed up regularly.

10. Children

The Site is not meant for children. We do not knowingly collect data from anyone under 16; if you believe a child has sent us data, contact us and we will delete it.

11. Changes

We may update this policy; the date at the top shows when it last changed.