Privacy policy

In one paragraph: we collect the minimum needed to sell you a digital product and support you afterwards. We do not sell your data. We do not load analytics or advertising cookies until you consent. Card details never touch our servers, because Stripe handles payment. You can ask us to show you, correct or delete what we hold by emailing [email protected].

Who we are

This site, topghlsnapshots.com, is operated by TheBigBot LLC, trading as Top GHL Snapshots. In this policy "we", "us" and "our" mean TheBigBot LLC. For data-protection purposes we are the controller of the personal data described below.

Contact for any privacy matter: [email protected].

What we collect, and why

We collect four categories of data, each for a stated purpose. We do not collect data speculatively in case it turns out to be useful later.

1. Order information

When you buy, we receive your name, your email address and the contents of the order. Your billing address and card details are collected by Stripe on their own checkout page. We never see, transmit or store your full card number. What comes back to us is a confirmation, the last four digits and the card brand. We need this to take payment, deliver your snapshot, and meet our tax and accounting obligations. Lawful basis: performance of a contract, plus legal obligation for the records we are required to keep.

2. Enquiries and support

If you use a contact form, the chat widget, book a call or email us, we keep your name, your email address, your phone number if you provide one, and the content of the conversation. Forms submitted on this site are delivered into our GoHighLevel CRM. We need this to answer you, and to keep a history so you do not have to repeat yourself to the next person. Lawful basis: legitimate interest in responding to people who contact us, or performance of a contract where you are already a customer.

3. Marketing email

If you subscribe, we keep your email address and whether you opened or clicked. You can unsubscribe from any email and we act on it immediately. Buying from us does not silently subscribe you to marketing. Lawful basis: consent.

4. Analytics, only after you consent

If you accept analytics in the cookie banner, Google Analytics 4 collects the pages you view, an approximate location derived from a truncated IP address, your device and browser type, and the referring source. IP anonymisation is enabled. We use this to see which pages are useful and which are not. Lawful basis: consent, withdrawable at any time from the cookie settings link in the footer.

What we do not collect

• We do not collect bank account or routing numbers.
• We do not store full payment card numbers anywhere, ever.
• We do not buy or ingest personal data from data brokers.
• We do not knowingly collect data from anyone under 18. This is a business tool sold to businesses. If you believe a minor has given us information, email us and we will delete it.
• We do not access, read or store the contacts inside your own GoHighLevel account. A snapshot is a template you import. Your CRM data stays yours, and we have no visibility of it unless you explicitly grant us access during a support session and revoke it afterwards.

Cookies and similar technologies

The site runs Google Consent Mode v2, configured to deny ad_storage, ad_user_data, ad_personalization and analytics_storage before any tag loads. Nothing in those categories runs until you choose to accept it.

Category	Runs before consent?	What it is for
Strictly necessary	Yes	Your shopping cart, your recently-viewed list, and the record of your cookie choice. Stored in your own browser. None of it identifies you.
Analytics	No	Google Analytics 4, loaded through Google Tag Manager, only after you accept.
Advertising	No	Only if you accept. We do not currently run retargeting campaigns.
Functional	Yes, limited	The LeadConnector chat widget, so a conversation survives you changing page.

You can change or withdraw your choice at any time using the cookie settings link in the footer. Your browser's own controls can also block cookies, though blocking the strictly necessary ones will stop the cart working.

Who processes data on our behalf

We use a small number of established providers. Each receives only what it needs, and none of them is permitted to use your data for their own marketing.

Provider	Purpose	What it receives
Stripe	Payment processing	Name, email, billing address, card details
Cloudflare	Hosting and content delivery	IP address and request logs, for security and delivery
HighLevel (GoHighLevel)	CRM, email sending and the chat widget	Name, email, phone, conversation history
Google (Analytics, Tag Manager)	Site analytics, after consent only	Anonymised usage data

These providers are based in the United States and your data may be processed there. Where transfers from the UK, the EEA or Switzerland are involved, they are made under the Standard Contractual Clauses or an equivalent approved mechanism operated by the provider.

How long we keep things

• Order and tax records: seven years, because tax law requires it.
• Support correspondence: three years from the last message.
• Marketing subscribers: until you unsubscribe, then suppressed permanently so we cannot accidentally add you again.
• Analytics: 14 months, then deleted automatically by Google.
• Enquiries that did not become orders: 12 months.

Your rights

Wherever you live, we will honour the following on request. In some jurisdictions these are legal rights and in others they are simply how we choose to operate, and we do not think that distinction should change your experience.

• Access. A copy of what we hold about you.
• Correction. Fix anything inaccurate.
• Deletion. Erase whatever we are not legally required to keep.
• Portability. Your data in a machine-readable file.
• Objection and restriction. Tell us to stop a particular use.
• Withdraw consent. For analytics and marketing, at any time, without affecting anything that happened before you withdrew it.
• No discrimination. Exercising any of these will never affect your pricing, your support, or your access to what you bought.

Email [email protected]. We verify identity through the email address on the account and respond within 30 days. There is no charge.

If you are in the UK or the EEA and are not satisfied with our response, you may complain to your national supervisory authority. If you are in California, the CCPA and CPRA rights above apply to you, and we confirm that we have not sold or shared personal information for cross-context behavioural advertising in the preceding twelve months.

Security, stated honestly

The site is served over HTTPS, payment is delegated to a PCI-compliant processor, and access to our CRM is limited to team members who need it and protected by two-factor authentication. We keep no card data to lose.

That said, nobody can promise absolute security, and you should be sceptical of anyone who does. If a breach affects your personal data we will notify you and the relevant regulator within the timeframes the law requires, and we will tell you what actually happened rather than issue a non-statement.

Links to other sites

This site links to third parties, including gohighlevel.com through affiliate links. Their privacy practices are their own and are governed by their policies, not this one. Our affiliate disclosure explains that commercial relationship in full.

Changes to this policy

If we change this policy we update the date at the top of the page. Where a change materially affects how we handle data we already hold, we will tell subscribers and customers by email rather than rely on you re-reading the page.