TOP / LEGAL
Privacy notice
Last updated October 15, 2026.
Who is responsible
TOP Agency is the business name used by Bright Tembeng, an individual operating a sole proprietorship in Gatineau, Quebec, Canada. TOP Agency is not incorporated. Bright Tembeng, owner, is responsible for the personal information described here and is the person in charge of the protection of personal information. Email: [email protected].
Information we collect
For orders, we request your name, business name, contact email, billing address, selected services, payment reference, and project requirements. After your deposit, the design brief collects business details, logo, text, photos, references and the contact details you want shown on your website. For custom quotes, we request your name, business, email and description. For abuse prevention, a private hash of your network address expires after twenty minutes and is removed during subsequent requests. We do not collect or store full payment-card information.
Why we use it
To respond to inquiries, quote services, process orders, verify payments, create your website and communicate about delivery. We do not sell personal information and do not use it for advertising or marketing without your separate consent.
Service providers and location
Cloudflare hosts the website and stores orders and requests. Square processes card payments on its own pages. Resend sends project and access emails. These providers may store or process information outside Quebec and Canada, including in the United States, under their own privacy terms. Access links expire after 15 minutes and work once.
How long we keep it
Payment and billing records: six years after the end of the tax year they relate to, as Canadian and Quebec tax rules require. Design briefs, files and project messages: up to 12 months after launch or cancellation, unless you subscribe to maintenance. Quote requests that do not become a project: up to 12 months. Information is then deleted or anonymized.
Safeguards
Access is limited to the owner. We use HTTPS, verified payment notifications and private project sessions that expire after 30 days. Emails waiting to be sent are encrypted and cleared once the email provider accepts them.
Your rights
You can ask to see the personal information we hold about you, correct it, withdraw your consent, or have information deleted when we are no longer required to keep it. You can also ask for a copy of the information you gave us in a commonly used technological format. Write to the contact above; we answer within 30 days. If you disagree with our answer, you can contact the Commission d’accès à l’information du Québec.
Confidentiality incidents
If an incident involving your personal information presents a risk of serious injury, we notify you and the Commission d’accès à l’information, and we keep a register of incidents as Quebec law requires.
Status of this notice
Last updated October 15, 2026. Any change will be posted here with a new date.