Contact us

Privacy Policy

Last updated: 28 September 2026

1. Who we are

This Privacy Policy explains how TOPGRADER LTD, trading as HiPublic (“we”, “us”, “our”), collects and uses personal data when you visit hipublic.com (the “Website”), contact us or work with us.

TOPGRADER LTD is the controller of your personal data. We are a company registered in England and Wales under company number 17140838, with our registered office at 66 Paul Street, London, England, EC2A 4NA.

If you have any questions about this policy or about how we handle your personal data, please contact us at hello@hipublic.com.

2. Personal data we collect

  • Enquiry data. When you use our contact form, we collect your name, phone number, email address and anything you include in your message.
  • Correspondence. If you email or otherwise contact us, we keep a record of that correspondence.
  • Technical data. When you visit the Website, our hosting provider automatically records server log data, such as your IP address, browser type, the pages you request and the date and time of your visit.
  • Security data. Google reCAPTCHA collects information about your device and how you interact with the Website to check that our contact form is being used by a person and not by an automated program.
  • Business relationship data. If you are a client, influencer, content creator or partner we work with, or you work for one, we process your name, job title, business contact details and the information needed to plan and run campaigns, such as your public social media profiles and audience and performance statistics.

We do not use analytics or advertising trackers on the Website. We do not ask for special category data, such as information about health or ethnic origin, so please do not include it in your message.

3. How we use your personal data

UK data protection law requires us to have a lawful basis for each use of your personal data. We use it:

  • to respond to your enquiry and discuss our services with you, based on our legitimate interest in responding to business enquiries or, where you are asking about entering into a contract with us, to take steps at your request before entering into that contract;
  • to provide our services and manage our relationships with clients, influencers and partners, based on the performance of our contract with you or, where the contract is with your employer, on our legitimate interest in running our business;
  • to protect the Website and our contact form against spam, fraud and abuse, based on our legitimate interest in keeping the Website secure;
  • to comply with our legal, tax and accounting obligations and to establish, exercise or defend legal claims, based on legal obligation and our legitimate interests.

We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

4. Who we share your personal data with

  • Hostinger, our hosting provider, which hosts the Website and processes server log data.
  • Google, which provides our business email service (Google Workspace), including the mailbox that receives contact form submissions, and the reCAPTCHA service. Google’s use of data collected through reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.
  • jsDelivr and unpkg, content delivery networks that serve some of the scripts used by the Website. They receive your IP address when your browser loads those files.
  • Clients, influencers and partners, where this is necessary to plan and run a campaign that you are involved in.
  • Professional advisers and authorities, such as our lawyers and accountants, or regulators and law enforcement where the law requires it.

If our business is sold or reorganised, your personal data may be transferred to the new owner, who will be bound by this policy.

5. International transfers

Some of our service providers, including Google, process personal data outside the UK, for example in the United States. When your personal data is transferred outside the UK, we make sure it is protected by an appropriate safeguard, such as UK adequacy regulations (including the UK–US data bridge for certified organisations), the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us if you would like more information.

6. How long we keep your personal data

  • Enquiries and correspondence that do not lead to a business relationship: up to 24 months after our last contact with you.
  • Client, influencer and partner data: for as long as we work together and for up to 6 years afterwards, to meet our legal and accounting obligations and to deal with any claims.
  • Server log data: for the limited period set by our hosting provider for security and troubleshooting purposes.

7. Cookies

The Website itself does not set cookies for visitors, and we do not use analytics or advertising cookies.

Google reCAPTCHA, which protects our contact form, may set or read cookies and similar technologies on your device and collects device and interaction data in order to tell people and automated programs apart. We use it only to keep the Website secure.

8. Your rights

Under UK data protection law, you have the right to:

  • access the personal data we hold about you;
  • ask us to correct personal data that is inaccurate or incomplete;
  • ask us to erase your personal data;
  • ask us to restrict how we use your personal data;
  • object to our use of your personal data where we rely on legitimate interests;
  • receive your personal data in a portable format, in certain circumstances.

To exercise any of these rights, email us at hello@hipublic.com. We will respond within one month. In some cases the law allows us to extend this period, and if so we will tell you why. We do not usually charge a fee.

9. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at hello@hipublic.com. We will acknowledge your complaint within 30 days and respond without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

10. Security

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. However, no transmission of data over the internet is completely secure.

11. Children

The Website and our services are intended for businesses and adults. They are not directed at anyone under 18, and we do not knowingly collect personal data from children.

12. Third-party websites

The Website contains links to third-party websites, including social media platforms. Those websites have their own privacy policies, and we are not responsible for how they use your personal data.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown at the top.