Effective Date: 22 February 2021
Last Updated: 03 March 2025
Toplayalong (“we,” “us,” or “our”) respects your privacy and is committed to protecting your Personal Data in compliance with applicable data protection laws, including, where relevant, the EU General Data Protection Regulation (GDPR) and Brazil’s Lei Geral de Proteção de Dados (LGPD). This policy explains how we collect, use, disclose, and safeguard your Personal Data when you visit our website (https://toplayalong.com) and any other websites or services we own and operate.
1. Who We Are (Data Controller)
For the purposes of data protection law, the Data Controller of your Personal Data is:
Toplayalong
Avenida Desembargador Vitor Lima nº 260 sala 908
Florianópolis – Santa Catarina – 88040-400
Email: bruno@toplayalong.com
If you have questions about how we handle your Personal Data, or if you wish to exercise any of your data protection rights, please use the contact details above.
2. Scope
This Privacy Policy applies to your use of our website and any related services, applications, or platforms we control. It does not extend to services that have separate privacy policies that do not incorporate this Policy.
3. Information We Collect
We collect information from you in the following ways:
(a) Information You Provide Voluntarily
-
Personal Information: such as your name, email address, and country, when you:
-
Sign up to receive updates or marketing communications from us via email or social media.
-
Contact us through email, social media, or similar technologies.
-
Participate in promotions, surveys, or interactive features on our website.
-
We will only request the minimum amount of Personal Data necessary to fulfill the purpose of your interaction with us.
(b) Information We Collect Automatically
-
Log Data: When you visit our website, our servers may automatically log certain standard data (e.g., IP address, browser type and version, the pages you visit, dates and times of your visits, time spent on each page).
-
Cookies: We use cookies and similar tracking technologies to collect information about your activity on our site. Cookies help us understand how you use our site and enable us to provide personalized features.
While this information may not directly identify you, it may be possible to combine it with other data to identify you. We treat any combined information as Personal Data and handle it in accordance with this Privacy Policy.
4. Legal Bases and Legitimate Reasons for Processing
Under GDPR and LGPD, we only process your Personal Data where we have a lawful basis to do so. This may include:
-
Your consent (e.g., when you opt in to our marketing emails).
-
To fulfill a contract or take steps linked to a contract (e.g., to provide our services).
-
Our legitimate interests, where those interests are not overridden by your fundamental rights and freedoms (e.g., improving our services, understanding how users interact with our website).
-
Compliance with legal obligations, when necessary to meet our legal and regulatory responsibilities.
5. How We Use Your Information
We may collect, hold, use, and disclose your information for the following purposes:
-
To contact and communicate with you: Responding to inquiries, sending you updates or technical notices, or notifying you of changes to our terms or policies.
-
For advertising and marketing: Sending you promotional information about our products, services, or events (and the products and services of third parties we believe may be of interest to you), but only where you have given explicit consent or where we have another valid legal basis.
-
To enable you to access and use our website: Providing services, user support, and quality assurance.
-
To combine and analyze data: Merging data we collect from you with information from other trusted sources to improve our services and better understand user needs.
We will not further process your Personal Data in ways that are incompatible with these purposes without first informing you and, where necessary, obtaining your consent.
6. International Data Transfers
Your Personal Data may be stored or processed in countries other than the one where you initially provided the information. In such cases, we will ensure that appropriate safeguards (such as Standard Contractual Clauses under GDPR) are in place and that the transfer complies with applicable data protection laws. We will protect your Personal Data in accordance with this Privacy Policy regardless of where it is processed.
7. How We Share Your Information
We may disclose Personal Data to:
-
Subsidiaries and affiliates: Where necessary for our operations and consistent with this Privacy Policy.
-
Third-party service providers: Such as IT service providers, data storage, hosting and server providers, advertisers, analytics platforms, and payment processors.
-
Our employees, contractors, and related entities: Who require access to such information in order to do work for us.
-
Business partners, agents, or sponsors: To facilitate promotions, competitions, or marketing.
-
Regulatory authorities and law enforcement: Where disclosure is required by law or necessary to protect our rights, comply with judicial proceedings, court orders, or legal processes.
-
Third parties involved in business transfers: In connection with any merger, sale of assets, financing, or acquisition of all or a portion of our business to another company.
Whenever we share Personal Data, we take steps to require recipients to protect your Personal Data in compliance with applicable laws and regulations.
8. Data Retention
We retain your Personal Data only as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, accounting, or reporting obligations. We will either securely delete your Personal Data or anonymize it when it is no longer required.
In certain cases, we may retain your Personal Data for archiving in the public interest, scientific or historical research, or statistical purposes, subject to appropriate safeguards.
9. Data Security
We implement commercially reasonable measures to safeguard your Personal Data against loss, theft, unauthorized access, disclosure, copying, misuse, or modification. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
You are responsible for keeping any account credentials or passwords confidential. Please notify us immediately if you suspect any unauthorized use of your account or a security breach.
10. Your Rights (GDPR & LGPD)
Depending on where you are located, you may have some or all of the following rights regarding your Personal Data:
-
Access: The right to know whether we process your Personal Data and to request a copy of the data we hold about you.
-
Rectification: The right to request that we correct or complete any inaccurate or incomplete Personal Data.
-
Erasure (“Right to be Forgotten”): The right to request that we delete your Personal Data in certain circumstances.
-
Restriction of Processing: The right to ask us to suspend or restrict the processing of your Personal Data in certain cases (e.g., if you contest the accuracy of the data).
-
Data Portability: The right to request a machine-readable copy of your Personal Data, or to have it transferred to another controller where technically feasible.
-
Objection: The right to object to the processing of your Personal Data for direct marketing purposes or on grounds relating to your particular situation.
-
Withdrawal of Consent: Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
-
Information About Sharing: Under LGPD, the right to be informed about public and private entities with which we have shared your data and about the possibility of denying consent and the consequences of such denial.
To exercise your rights, please contact us using the details provided in this Privacy Policy. We may request specific information from you to confirm your identity. We will respond to your request within the timeframe required by applicable law.
You also have the right to lodge a complaint with a data protection authority. Under GDPR, you may contact the supervisory authority in your country of residence in the EU. Under LGPD, you may contact the Brazilian National Data Protection Authority (ANPD).
11. Children’s Privacy
Our products and services are not directed at children under the age of 13, and we do not knowingly collect Personal Data from children under 13. If you believe a child under 13 has provided Personal Data to us, please contact us immediately, and we will take steps to delete such information as required by law.
12. Cookies
We use cookies to improve your experience on our website. A cookie is a small piece of data placed on your computer or mobile device. You can set your browser to refuse cookies or to alert you when cookies are being sent. Please note that some parts of our site may not function properly if you do so.
13. Links to Other Websites
Our website may contain links to external sites. We have no control over the content or privacy practices of those sites and cannot be held responsible for their policies. We encourage you to review the privacy policies of any third-party sites you visit.
14. Changes to This Policy
We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make significant changes, we will post a prominent notice on our website or notify you via email. Continued use of our website after any changes become effective constitutes acceptance of those changes. Where required by law, we will obtain your consent to any material changes in how we use or disclose your Personal Data.
15. How to Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact us at:
Toplayalong
Avenida Desembargador Vitor Lima nº 260 sala 908
Florianópolis – Santa Catarina – 88040-400
Email: bruno@toplayalong.com
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.
