Legal

Privacy Policy

Last updated: September 16, 2026

The Main Street Company (“Main Street”, “we”, “us”, “our”) is a brand operated by Conversion Factory. We want to process as little personal information as possible, and this policy explains what we collect, why, and the rights you have over it.

Web Analytics

We want to process as little personal information as possible when you use our website. That’s why we use privacy-friendly analytics that comply with the GDPR, ePrivacy (including PECR), COPPA and CCPA. Your IP address is only briefly processed, and we have no way of identifying you from it.

The purpose is to understand our website traffic in the most privacy-friendly way possible so we can continually improve our website and business. The lawful basis under the GDPR is “Article 6(1)(f); where our legitimate interests are to improve our website and business continually.” No personal data is stored over time.

Any information you provide to us via the website is given with your consent, and we will use it to contact you about your enquiry and, where you have opted in, marketing material. You can opt out at any time from the bottom of any email.

Billing Information

When you pay for a Main Street service or project, we ask for your card or bank details and billing address. That’s so we can charge you for the work, calculate any taxes due, and send you invoices. Your card details are passed directly to our payment processor and never pass through our own servers. We store a record of the transaction, including the last four digits of the card and the billing address as of the charge, for account history, invoicing, and billing support.

Voluntary Correspondence

When you write to us with a question or to ask for help, we keep that correspondence, including your email address, so we have a history to reference if you reach out again in the future.

Video or phone calls may be recorded and transcribed, and shared between Main Street team members, to help us understand and serve your needs. We also store any information you volunteer, such as survey responses. If we ever record a conversation for future reference, we only do so with your express consent.

Information We Do Not Collect

We don’t collect any characteristics of protected classifications including age, race, gender, religion, sexual orientation, gender identity, or gender expression. You may provide these voluntarily in your email signature when writing to us.

We also do not collect any biometric data, and we do not extract information from any images you send us.

When We Access or Share Your Information

Our default practice is to not access your information. The only times we’ll ever access or share it are:

To provide products or services you’ve requested.

We use some third-party services (subprocessors) to run our business, and process personal information via them only to the extent necessary. No Main Street human looks at your data for these purposes.

To help you troubleshoot or fix a problem, with your permission.

If we ever need to access your account or project files to help with a support case, we will ask for your consent before proceeding.

To investigate, prevent, or take action regarding restricted uses.

Accessing a customer’s information when investigating potential abuse is a measure of last resort. We do our best to balance the privacy and safety of both our customers and the people reporting issues to us. If we discover our services are being used for a restricted purpose, we may report the incident to the appropriate authorities.

When required under applicable law.

If the appropriate authorities have the necessary warrant, subpoena, or court order, we have to comply. Otherwise, we reject requests for data. Unless we’re legally prevented, we’ll always inform you when such requests are made.

If Main Street is ever acquired by or merged with another company, we’ll notify you before any information about you is transferred and becomes subject to a different privacy policy.

Your Rights With Respect to Your Information

We apply the same data rights to all customers, regardless of location. We recognize the rights granted under regulations such as the European Union’s General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”), except as limited by applicable law. These include:

  • Right to Know — what personal information is collected, used, shared, or sold.
  • Right of Access — to the personal information we hold about you and how it is stored, secured, and processed.
  • Right to Correction — to request correction of your personal information.
  • Right to Erasure / “To be Forgotten” — to request, subject to certain limitations, that your personal information be erased.
  • Right to Complain — to lodge a complaint with the appropriate supervisory authority.
  • Right to Restrict Processing — including opting out of any sale of personal information. (We never have and never will sell your personal data.)
  • Right to Object — in certain situations, to how or why your personal information is processed.
  • Right to Portability — to receive the personal information we hold about you and transmit it to another party.
  • Right to not be subject to Automated Decision-Making — subject to the limits in applicable law.
  • Right to Non-Discrimination — we will not charge you differently or give you a lower level of service because you exercised your data rights.

If you have questions about exercising these rights or need assistance, please contact us at hello@themainstreetcompany.com.

How We Secure Your Data

All data is encrypted via SSL/TLS when transmitted from our servers to your browser, and database backups are encrypted. Most data is not encrypted while it lives in our database (since it needs to be ready to send to you when you need it), but we go to great lengths to secure your data at rest.

Location of Site and Data

Our services, products, and web properties are operated in the United States. If you are located in the European Union or elsewhere outside the United States, please be aware that any information you provide will be transferred to the United States. By using our site, using any of our services, and/or providing us with your information, you consent to this transfer.

Changes & Questions

We may update this policy as needed to comply with relevant regulations and reflect new practices.

Have any questions, comments, or concerns about this privacy policy, your data, or your rights? Please get in touch at hello@themainstreetcompany.com and we’ll be happy to help.