Privacy Policy

1. Introduction

Shield Cyber (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our cybersecurity diagnostic services.

2. Information We Collect

We collect information that you provide directly to us, including:

• Contact Information: Name, job title, email address, and company name
• Business Information: Industry sector, number of employees, and cloud platform usage
• Security Assessment Data: Responses to our diagnostic questionnaire about your cybersecurity posture
• Communication Data: Any messages or inquiries you send us

3. How We Use Your Information

We use the information we collect to:

• Generate your personalized cybersecurity diagnostic report
• Send you the diagnostic results via email
• Provide advisory services and recommendations
• Respond to your inquiries and provide customer support
• Improve our services and website functionality
• Comply with legal obligations

4. AI-Powered Analysis

Our diagnostic service uses artificial intelligence (Google Gemini) to generate personalized insights and recommendations based on your assessment responses. This data is processed securely and is used solely to provide you with relevant cybersecurity guidance. We do not share your specific assessment data with third parties for marketing purposes.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist us in operating our website and delivering services (e.g., email delivery, AI processing)
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit, secure storage practices, and regular security assessments of our own systems.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Diagnostic assessment data is typically retained for 12 months unless you request earlier deletion.

8. Your Rights (GDPR)

Under the UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request limitation of processing
• Portability: Request transfer of your data
• Objection: Object to certain types of processing

To exercise any of these rights, please contact us at the details provided below.

9. Cookies

Our website uses essential cookies to ensure proper functionality. We do not use tracking or advertising cookies. Analytics, if implemented, will be anonymized and privacy-respecting.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: