Privacy policy
Topple Giants · operated by Technology Monkey Ltd, registered in England and Wales
Last updated: 30 October 2026 · Contact: [email protected]
Topple Giants helps you run formal complaints against organisations that have let you down. To do that we necessarily hold the story of your complaint, which is personal data — sometimes sensitive. This page says plainly what we hold, why, for how long, and how you get rid of it. No surprises is the whole point.
Who we are
Technology Monkey Ltd is the data controller for everything described here. You can reach us at [email protected].
What we hold
Your account. Your name, email address, and — only if you choose to give them — your postal address (used at the top of formal letters), a phone number, other email addresses you send from, and other postal addresses a complaint might concern.
Your complaints. What you tell us happened, the letters and replies you add or forward, photographs and documents you upload, the dates and deadlines we track, and the correspondence we draft with you. A complaint file can contain whatever you put in it — account numbers, financial details, occasionally health information where it is part of the story. We treat the whole file as confidential.
Helpers. If you invite someone to help with a complaint, we hold their name and email address and the record of the invitation. If you are a helper, the case owner controls the complaint; we hold your acceptance, your access level, and anything you draft.
Payments. Handled by Stripe. We never see or store your card number — we hold only your subscription status and a reference to Stripe’s record.
Technical. Standard server logs, kept briefly, used only to keep the service running and secure. We do not run advertising trackers.
The waiting list. If you join the waiting list on our website, we hold your email address and, only if you choose to share it, what you tell us about your complaint. We use it to tell you when Topple Giants opens and to understand what people need from it, nothing else. It is kept with our mailing list provider. Every email has an unsubscribe link, and you can ask us to delete it at any time by emailing us.
What we do with it
- Run your complaints. Drafting letters, tracking deadlines, filing replies — the service itself. This processing is necessary to perform our contract with you.
- Sensitive details. Where you choose to include health or other sensitive information in a complaint, we process it with your explicit consent, given when you add it, and only to run that complaint. You can delete it, or the whole complaint, at any time.
- Draft with AI. Letters and summaries are drafted using an AI model (Anthropic Claude, running on Amazon Web Services in Europe). Your case content is sent to that model to produce the draft and is not used to train it.
- Email you. Deadline reminders and things that need your decision — transactional, part of the service. Occasional news and tips only if you opt in, and you can opt out in Settings at any time.
- Improve the record on companies. Only with your explicit consent, and only in anonymised form: sector, timings in broad buckets, whether deadlines were missed. Never your words, never your identity. Findings are only ever reported in aggregate across many complaints, never for a single case, and never in a form that could identify you. You can withdraw this consent at any time.
We do not sell your data. We do not share it with the organisation you are complaining about except in the obvious sense: the letters you choose to send carry what you chose to put in them.
Where it lives
Your data is stored on Amazon Web Services in London (eu-west-2). Email is sent through AWS. Payments run through Stripe. Our web traffic passes through Cloudflare. Each of these processes data on our instructions under their standard data processing terms.
How long we keep it
- Live complaints: for as long as the complaint runs, plus 24 months after it concludes — long enough to cover an ombudsman review or a related dispute, and no longer.
- Complaints that never progressed: 6 months.
- We warn you first. A month before a complaint file is due for routine deletion we email you, with a link to download the full record.
- Account closure: when you ask us to close your account there is a 7-day grace period (deletion made in anger or by accident cannot be undone), then everything goes: your complaints, documents including every stored version, your account, and your sign-in identity. Signing back in during the grace period withdraws the request and nothing is lost.
Your rights
You have the usual UK GDPR rights: access, correction, erasure, restriction, portability, and objection. Most of them are built into the product rather than hidden behind a request form — you can read everything we hold on a complaint from its own screen, download the record, correct your details in Settings, and close your account yourself. For anything else, email [email protected] and a person will deal with it.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk). We would rather you told us first, so we can fix it.
Children
Topple Giants is for adults running consumer complaints and is not intended for anyone under 18.
Changes
If this policy changes in any way that matters, we will tell you by email before the change takes effect, in plain words.