Privacy Policy

This Privacy Policy explains how Shielddorf AI ("we", "us", or "our") collects, uses, stores, and protects personal data when you visit our website, create an account, or use our platform. We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

1. Who we are

For the purposes of data protection law, Shielddorf AI is the controller of the personal data described in this policy. Our registered office is at King William Street 190, BS1 5LJ Bristol, United Kingdom. You can contact us at [email protected] or on +44 20 7946 5897.

2. Personal data we collect

Depending on how you interact with us, we may collect the following categories of data:

• Identity and contact data, such as your name, email address, telephone number, and country of residence.
• Account data, such as login credentials (stored in hashed form), account preferences, and settings for risk management controls.
• Usage data, such as pages viewed, features used, device type, browser information, and approximate location derived from IP address.
• Communications data, such as messages you send to our support team.
• Verification data, where required by law, such as information needed to confirm your identity.

We do not intentionally collect special category data. Please do not send us sensitive information unless we specifically request it.

3. How we use your data and our lawful bases

We process personal data only where we have a lawful basis to do so. These include performance of a contract (providing your account and platform features), compliance with legal obligations (including anti-money laundering and sanctions checks), our legitimate interests (securing the platform, preventing fraud, and improving our services), and your consent where we ask for it, such as for certain marketing communications.

4. Cookies and similar technologies

We use cookies and similar technologies to operate the website, remember your preferences, understand how the site is used, and protect against misuse. Where required, we will request your consent before placing non-essential cookies on your device. You can manage your preferences through your browser settings at any time.

5. Sharing your data

We do not sell personal data. We may share it with trusted service providers who process data on our behalf, such as hosting, analytics, customer support, and security providers. These providers are bound by written contracts and may only act on our instructions. We may also disclose data where required by law, by a court order, or to regulators and law enforcement authorities.

6. International transfers

Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or reliance on an adequacy regulation.

7. Retention

We keep personal data only for as long as necessary for the purposes set out in this policy. Account data is generally retained for the duration of your relationship with us and for a further period where required by law or to resolve disputes. Usage and log data is kept for a limited period appropriate to security and analytical purposes.

8. Security

We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, or disclosure. These include encryption in transit, access controls, and regular reviews of our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Under UK data protection law you have the right to access your personal data, to have inaccurate data rectified, to request erasure in certain circumstances, to restrict or object to processing, to request data portability, and to withdraw consent at any time where processing is based on consent. You may also object to direct marketing at any time. To exercise these rights, contact us using the details above. We may need to verify your identity before responding, and we will generally respond within one month.

10. Children

Our platform is not directed at individuals under eighteen years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can take appropriate action.

11. Complaints

If you have concerns about how we handle your personal data, please contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page indicates when the latest revision took effect. Material changes will be notified to you through the platform or by email where appropriate.