Legal
Privacy Policy
This policy explains what personal data we collect when you visit the wall or write to us about a spot, why we collect it, who else sees it, how long we keep it and what you can ask us to do with it.
Last updated 17 October 2026top100logo.comhello@top100logo.com
1. Who we are
top100logo.com operates the logo wall. For the EU General Data Protection Regulation (GDPR) we are the controller of the personal data described on this page.
- Controller: Panas Computers, trading as top100logo.com
- Registered address: 8386 Vaulting Dr, Lake Worth, FL 8386, USA
- Registration: LBTR Number 2023151908
- Contact for anything on this page: hello@top100logo.com
We have not appointed a Data Protection Officer, because our processing does not meet the threshold for one under Article 37 GDPR. Questions about data protection reach the person who runs the wall, and we answer them ourselves.
2. The short version
There is no checkout on this site, no account to create and no payment data anywhere on it. We use no advertising pixels and no cookies, and we do not profile anyone. Visits are counted with one cookieless, aggregate service that identifies nobody. The personal data we hold comes from two places only: emails you send us, and the technical logs our host keeps while serving pages.
If that is all you needed, this is the notice. The rest of the page sets out the detail that Article 13 GDPR requires us to give you.
3. What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Emails you send us — your name, role, company, email address, phone number where you give it, billing details including any tax or VAT number, the logo and artwork you attach, and the correspondence itself. | Answering your enquiry, checking availability, negotiating and performing the agreement, issuing the invoice, placing and maintaining your logo, and keeping the wall records accurate. | Article 6(1)(b) GDPR (steps leading to, and performance of, a contract) where we are dealing with your own order. Article 6(1)(f) GDPR (legitimate interests — running our business, answering business enquiries and keeping commercial records) where someone writes to us on behalf of a company. |
| Invoices and accounting records — company details and the amounts billed. | Issuing and retaining invoices and meeting our tax and accounting duties. | Article 6(1)(c) GDPR — a legal obligation under tax and accounting law. |
| Server and security logs kept by our hosting provider — IP address, browser user agent, the page requested, the timestamp and the response status. | Serving the site, keeping it available, diagnosing faults, preventing abuse and defending the site against attacks. | Article 6(1)(f) GDPR — our legitimate interest in operating and securing the website. These logs are short-lived, technical and not used to build a profile of anyone. |
| Cookieless page measurements — the page path (query string removed), the page that referred you, your country, device type, browser, operating system and page-speed timings, counted in aggregate by Cloudflare Web Analytics. No cookie is set, nothing is stored on your device, and no identifier is attached to the measurement that could point back to you. | Knowing how many people visit the wall and how quickly the pages load, so we can keep the site fast and judge whether the wall is being seen. | Article 6(1)(f) GDPR — our legitimate interest in understanding how the site is used. There is nothing on your device to consent to: no cookie, no local storage and no fingerprinting. See the Cookie Notice. |
We do not use your data for automated decision-making or profiling, and we do not sell it or share it for anyone else’s advertising.
4. What we do not collect
- No accounts, logins or passwords — there is nothing to sign up for.
- No payment or card details: this site has no checkout, no payment form and no card processing. Invoices are paid by bank transfer, outside this website.
- No cookies, no local storage and no other information stored on your device.
- No analytics that identifies you: the one measurement service we use is cookieless and aggregate, and builds no profile of you.
- No tracking identifiers, no advertising or social pixels, and no tracking that follows you to other websites.
- No third-party embeds that would receive your data or your IP address.
- No special-category data (health, beliefs, trade-union membership, and so on). Please do not send it to us — we do not need it to sell a spot.
- No data bought, rented or scraped from third parties.
- No marketing lists. We do not send newsletters or marketing email. If that ever changes, we will ask you first and you will be able to say no.
5. Who else processes it
We keep the stack deliberately small. Each provider below is bound by a data-processing agreement under Article 28 GDPR and may only handle personal data on our written instructions.
- Hosting and network provider — serving the pages, keeping the logs described above, and blocking abusive traffic.
- Analytics provider — Cloudflare, Inc., counting page views and page-speed timings in aggregate. It sets no cookie and attaches no identifier to you, and it may only use what it sees on our instructions.
- Email provider — storing and delivering the messages in our mailbox.
- Accounting and invoicing support — issuing and filing invoices.
- Professional advisers — our accountant, lawyer or tax adviser, where a matter requires it.
- Authorities — where the law obliges us to respond to a lawful request.
We never sell your data, and we do not pass it to advertisers, data brokers or marketing platforms. The companies on the wall are advertisers: they buy a placement, not your details.
6. Where your data goes
Our providers may process personal data outside the European Economic Area. Where they do, the transfer is covered either by an adequacy decision of the European Commission — including the EU–US Data Privacy Framework where the recipient is certified — or by the Commission’s Standard Contractual Clauses together with an assessment of the transfer. You can ask us for a copy of the safeguard that applies.
Email reaches us over an encrypted connection to our provider, but ordinary email is not end-to-end encrypted. Please treat it like business correspondence: send what we need to sell you a spot, and nothing that would embarrass you if it were forwarded.
7. How long we keep it
| Data | Kept for |
|---|---|
| Server and security logs | Up to 30 days at our hosting provider. A specific incident log may be kept longer where we are investigating an attack or preserving evidence for a claim. |
| Cookieless analytics measurements | Raw measurements for 7 days, then aggregated down to roughly a tenth of the original volume for long-term storage. The dashboard shows the previous six months, and the aggregate we read contains no identifiers. |
| Enquiries that do not lead to an agreement | 12 months after the last contact, then deleted. |
| Agreements, wall records and related correspondence | Six years after the relationship ends, to cover the limitation periods for contract claims. |
| Invoices and accounting documents | As long as tax law requires — in the United States, generally seven years from the end of the tax year in which the invoice was issued. |
These are our own policy periods, not legal minimums, and they are the periods we can justify. Where an identified dispute or legal duty needs data for longer, we keep only what that dispute or duty requires.
8. Your rights
You can ask us for a copy of the data we hold about you and how we use it (access), have anything wrong corrected, have it erased, have its use restricted, object to processing based on our legitimate interests, and receive it in a portable format. We do not rely on consent anywhere on this site, but if we ever did you could withdraw it at any time.
To exercise any of those rights, email us from the address you used before. There is no charge and we reply within one month, usually much sooner. If we cannot be sure who is asking we may ask you to confirm your identity; if a right is limited — for example where tax law requires us to keep an invoice — we will tell you exactly why.
If you believe we have handled your data badly, you can complain to the Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580, USA; in Florida, to the Florida Attorney General, PL-01 The Capitol, Tallahassee, FL 32399, USA; or — where the GDPR applies to you — to the supervisory authority in your own country. We would rather you told us first, so that we can put it right.
9. How we protect it
- Every page is served over TLS, and the site is served from a hardened, static build.
- There are no payment details on this site to compromise — the order never touches it.
- Access to the mailbox and to the wall records is limited to the people who need it and protected with two-factor authentication.
- Records are backed up, and data we no longer need is deleted on the schedule above.
- If a breach affecting your rights or freedoms occurs, we tell you, and the authority that the law requires us to notify, without undue delay and within the deadlines the law sets.
10. Children
The wall is a business advertising service and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, write to us and we will delete it.
11. Changes to this policy
We date this page when we change it and keep the superseded versions. If a change materially affects how we handle personal data, we will also email the people we are in contact with about a spot — updating the page alone would not be enough.
12. Contact
For anything on this page, write to hello@top100logo.com. It is the same inbox that handles orders — one address, and a person reading it.
This policy covers the website and the enquiry process. The contract for a spot — price, delivery, transfers and liability — is set out in the Terms of Sale, and the Cookie Notice records that we set none.