Your privacy.
Effective November 3, 2026
TollFreeHero collects the information needed to respond to your enquiries about toll-free numbers and business calling. This page describes this website’s handling of that information.
Information you provide
When you send a request, we store your name, email address, business name, country, optional contact phone, preferred or existing number, call destination and message. We also record your contact consent, submission time, request reference and our internal follow-up history. Do not include passwords, payment details, identity documents or confidential customer records in this form.
How we use it
We use your request to discuss number availability, transfer eligibility, routing, a quote, support or your privacy enquiry. Submitting the form does not subscribe you to a marketing list. We may contact you using the information you provide about this request.
Number searches and service providers
Number searches send the selected country, prefix and word or digits to DIDWW through our server. Search results depend on carrier availability. Our website and request database run on Cloudflare. Contact details from the enquiry form are not automatically sent to DIDWW. If you choose to proceed with a service that requires verification or a transfer, we’ll explain the additional information needed at that stage.
H&H ID account access
If you sign in with H&H ID, TollFreeHero receives your canonical H&H identifier, verified email and basic profile after your consent. A secure, host-only session cookie keeps the connection separate from the request desk. Account pages do not run optional analytics. Current organisation membership and phone-service permissions are checked before resource access; signing in does not buy numbers or grant staff access. The H&H ID session can be ended from account security. See Hawk & Hood privacy information for identity storage, email verification, passkeys and your account choices.
Cookies and technical protection
A necessary session cookie is used when the owner signs in to the private request desk. The website uses a keyed hash of the connecting network address to limit abuse; that hash is separate from your enquiry. Infrastructure providers may process connection information to deliver and protect the service.
Optional analytics and preferences
Optional analytics is currently disabled on this website. No Google analytics service loads. If analytics is configured, it will remain off until you explicitly allow it.
When analytics is available, Cookie preferences lets you accept or reject it. Your choice is kept in this browser, for this site only, for 180 days. Global Privacy Control keeps analytics off. You can withdraw at any time; accessible analytics cookies are removed and the page reloads to stop the service.
Analytics is excluded from private workspaces, accounts, orders, sign-in pages and previews. Search terms, link parameters, form messages and private identifiers are excluded from the page events we send. Google may process permitted analytics data in other countries. Google privacy information.
Retention and access
Uncontracted website enquiries and their internal notes are deleted after 180 days. Expired sign-in sessions and old abuse-limit records are cleared regularly. Access to the request desk is restricted. Any records required for an agreed paid service will be covered by its service terms and retention requirements.
Contact and choices
Use the contact form and select “Privacy enquiry” to ask about access, correction or deletion. Include your request reference if you have one. We may need to confirm your identity before disclosing or changing personal information. You can also tell us to stop following up on an enquiry.
Updates
Changes to this page will carry a new effective date. Review the current page before sending new information.