Privacy Policy

This website is operated by TopGun Automotive Solutions LLC, trading as Top Gun Solutions (“we”, “us”, “our”). We are a marketing and software company. This policy explains what personal information we collect through topgunzauto.com, why we collect it, who we share it with, and what you can ask us to do about it.

It covers this website, our online store, the checkout for services, deposits and monthly subscriptions, our client portal (including electronic signing), our booking and contact forms, and the AI assistant on the site. It does not cover third-party websites we link to, or platforms we manage on your behalf under a separate client agreement.

You can reach us at ceo@topgunzauto.com.

Information you give us

• Enquiry and booking forms. Your name, email address, phone number, business name, and whatever you write in the message field. If you book a strategy call we also store the topic and the requested time.
• Store orders. Your name, email address, phone number, shipping address, the items ordered, and the amounts charged.
• AI assistant conversations. The messages you send to the assistant on this site, and any contact details you choose to give it. These are stored against an anonymous browser session identifier so we can improve the answers and follow up if you asked us to.
• Service purchases and subscriptions. When you buy a service, pay a deposit or start a monthly subscription on this site: your name, email address, phone number and company, the service, the amounts charged, the PayPal order or subscription reference, the billing history PayPal reports to us (activation, renewals, failed payments and cancellation), and the exact terms text you accepted at checkout with the time you accepted it.
• Client portal. A service purchase creates a client portal account in your name. When you claim it you choose a password, which we store only as a hash. In the portal we keep your onboarding checklist answers, the documents you upload or we share with you, and the messages between you and our team.
• Electronic signatures. When you sign a document electronically through the portal or a signing link, we record your typed name and email address, the consent wording you agreed to, how you were verified (for example a one-time code), the date and time of each step, the IP address and browser user-agent used at each step, and a fingerprint (hash) of the exact document signed. This audit trail is the evidence that the signature is yours.
• Staff accounts. If you are a member of our staff, your name, email address and a hashed password. Customers do not need an account to buy from the store.

Information we collect automatically

• Marketing attribution. When you submit a form we record the campaign parameters that brought you to the site (for example utm_source, gclid, and the referring page) so we know which marketing is working.
• Our own site statistics. Each page you view is recorded on our own servers: the page, the referring site on your first view, and the device type, browser and operating system read from your browser’s user-agent. We do not store your IP address or user-agent for this; we keep only salted one-way digests of them, used to count visits and sessions. No cookie is set.
• Google Analytics. Usage data collected by Google Analytics 4 — see Cookies and similar technologies.
• Technical and log data. Our hosting and infrastructure providers record IP addresses, browser and device information, and request logs as part of operating and securing the service.

What we do not collect

We do not collect or store full payment card numbers. Card details are entered directly with our payment processor and never reach our servers — we only receive a transaction reference and the result. We also do not knowingly collect special category data (health, biometric, political or religious information), and you should not send it to us through the forms on this site.

• To reply to your enquiry and to schedule and hold your call.
• To prepare quotes and proposals, and to deliver the services you engage us for.
• To take, fulfil, ship and support store orders, and to process refunds and returns.
• To take payment for services, deposits and monthly subscriptions, to keep a record of the terms you accepted, and to run your client portal: onboarding, shared documents and messages.
• To carry out electronic signing, and to keep the evidence of who signed what, and when.
• To keep records of transactions for accounting, tax and legal compliance.
• To improve the website, the AI assistant and our published Q&A content, using the questions people actually ask.
• To measure which marketing channels produce enquiries, so we spend our own budget sensibly.
• To send you marketing about our services, where you have asked for it or where we are otherwise permitted to. You can opt out at any time.
• To detect, investigate and prevent fraud, abuse and security incidents.

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

Where the UK GDPR or EU GDPR applies to you, we rely on the following legal bases:

• Contract. To fulfil an order or deliver services you have engaged us for.
• Legitimate interests. To run and secure our business, respond to enquiries, understand which marketing works and how the site is used (including the tags that load without asking, described under Cookies) — balanced against your rights.
• Consent. For optional marketing messages. You can withdraw consent at any time.
• Legal obligation. To keep financial records and respond to lawful requests.

Payments on this site — store orders, service purchases, deposits and monthly subscriptions — are processed by PayPal. When you pay, you are handing your payment details to PayPal directly. PayPal returns to us an order or subscription reference, a capture reference and the payment result, which we store against your order or subscription. For a subscription, PayPal holds the billing agreement, takes each monthly payment and tells us when a payment succeeds or fails and when the subscription is cancelled. We never see or store your card number, CVV or PayPal password.

PayPal processes your information as an independent controller under its own privacy policy. Please read it before paying.

Work quoted on a call or in a proposal, and any build fee for a software platform, is invoiced separately rather than charged on this website.

We share personal information only with providers that help us run the business, and only as far as they need it:

• Hosting, database and file storage. Our application and its database and file storage, which hold leads, bookings, orders, subscriptions, client portal records, uploaded documents, signature records and content.
• Payment processing. PayPal, for store payments, service purchases, deposits and monthly subscriptions.
• AI providers. The messages you send to our AI assistant, and the prompts used to draft blog content, are sent to a third-party AI provider (currently OpenAI) to generate a response. Do not put confidential or sensitive information into the assistant.
• Analytics. Google, which provides Google Analytics 4.
• Email and messaging. Providers used to send you confirmations and to alert our team to new enquiries.
• Professional advisers. Accountants and lawyers, where necessary.

We may also disclose information where we are legally required to, or to establish or defend legal claims. If the business is sold or reorganised, customer records may transfer with it; you would remain protected by a policy at least as protective as this one.

We use a small number of cookies and equivalent browser storage.

Strictly necessary

Keeping your shopping cart, keeping clients signed in to the client portal and staff signed in to the admin area, and basic security. These cannot be switched off without breaking the site.

Analytics and advertising

• Google Analytics 4, provided by Google. It loads automatically when you open a page; we do not ask first. It sets first-party cookies (named _ga and _ga_…) to count visits and measure how the site is used, and sends that usage data to Google. We configure it with IP truncation, and with advertising storage, ad personalisation and advertising use of your data all switched off. To opt out, block or clear cookies for this site in your browser, use a browser or extension that blocks trackers, or install Google’s opt-out browser add-on at tools.google.com/dlpage/gaoptout.

You can clear or block cookies in your browser settings. Blocking the strictly necessary ones will stop the cart, checkout and client portal from working.

• Enquiries and bookings — kept while we are in contact and for a reasonable period afterwards so we can pick up the conversation, then deleted or anonymised.
• Orders, subscriptions, invoices and accepted terms — kept for as long as tax and accounting law requires, which is typically several years.
• Client portal accounts, documents and messages — kept while you are a client and for a reasonable period afterwards, then deleted or anonymised unless a record has to be kept for one of the other reasons on this list.
• Signed documents and their signature audit trail (typed name, verification method, timestamps, IP address and user-agent) — kept for as long as the agreement they evidence could be relied on or disputed. Because they are the evidence of what was agreed, they are not deleted on request during that time.
• AI assistant conversations — kept so we can improve our answers, then deleted or anonymised.
• Marketing preferences — if you opt out, we keep the minimum record needed to make sure we do not contact you again.

Depending on where you live, you may have the right to ask us to:

• tell you what personal information we hold about you;
• give you a copy of it, in a portable format;
• correct anything that is wrong;
• delete it, where we do not have to keep it;
• restrict or object to how we use it;
• stop sending you marketing.

If you are a California resident, the CCPA/CPRA additionally gives you the right to know what is collected and disclosed, to request deletion and correction, to opt out of sale or sharing (we do not sell or share your information), and not to be discriminated against for exercising those rights.

To make a request, email ceo@topgunzauto.com. We will ask you to verify your identity, and we will respond within the time the applicable law allows. You may also appoint an authorised agent to act for you, and you can complain to your data protection regulator if you are not satisfied with our response.

If we email you about our services, every message includes an unsubscribe link. If we contact you by SMS or WhatsApp, you can reply STOP to opt out. Opting out of marketing does not stop transactional messages such as an order confirmation, a shipping update or a reply to your enquiry.

We take reasonable technical and organisational measures to protect your information. Staff and client portal passwords are stored as hashes, never in plain text; the admin area and the client portal require a valid session, and the admin area is blocked from search engines; payment card data never touches our servers; and access to customer records is limited to people who need it.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant regulator where the law requires it.

We are based in the United States, and our providers may process your information in the United States or elsewhere. If you are in the UK, EU or another region with transfer restrictions, we rely on appropriate safeguards — such as standard contractual clauses — in our agreements with those providers.

This site is for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, email us and we will delete it.

We may update this policy as the business or the law changes. The date at the top of this page shows when it was last revised. If a change materially affects how we use your information, we will make that clear on the site rather than relying on the date alone.

Questions, requests or complaints about privacy should go to ceo@topgunzauto.com, addressed to TopGun Automotive Solutions LLC.