Privacy Policy

• When you run a free scan: business name, contact name, email, optional phone, country, industry, preferred language, your description of concern, and the website/email/handle you ask us to check. Both consent checkboxes are always off by default — the scan authorization and the optional marketing consent are separate choices.
• Consent records: the exact wording you agreed to, the date/time, and the source (form checkbox) — stored for compliance.
• When you buy a plan: the same plus billing details — processed by Stripe, who handles payment data. We never see or store your card number.
• Lead information: when we reach out, business emails come from publicly listed sources (public websites/directories). We only contact business addresses and never guess emails.
• Passive public observations: for websites we review we look only at public DNS, TLS certificates, email-authentication records (SPF/DKIM/DMARC) and public security headers — never intrusive testing.
• Technical data: basic logs (IP, browser, pages visited) to keep the site secure and working.

To run your scans, send your report, follow up on requests, process payments, and — if you asked us to — monitor your assets. Marketing communications are sent only to addresses that have opted in (or, for cold business outreach, only to public business addresses with a working unsubscribe). We do not sell, rent, or share your data with anyone. No third-party advertising, no data brokers.

Passwords (the password check runs entirely in your browser against public breach data), credit card numbers, or anything you haven't voluntarily given us.

Every marketing email has a working one-click unsubscribe link (no login needed, works on mobile, safe to click more than once). Unsubscribing immediately suppresses the address everywhere — no future marketing messages of any kind. Report emails go only to the address you provided. If you opted into marketing and change your mind, the same unsubscribe link works.

Leads that never respond or qualify are anonymized after 180 days (personal details removed, no further contact) and deleted after 365 days. Consented contacts keep their data while the relationship is active. You can request a copy or deletion of your data anytime by emailing mike@shieldlinesecurity.com — we'll do it within 30 days, free.

Our free scan and marketing content are available to visitors worldwide (including the Gulf region, with Arabic pages). The same privacy rules apply to everyone; data is stored in the US. For questions from outside the US, email mike@shieldlinesecurity.com.

Data is stored on a locked-down US server, encrypted in transit (HTTPS everywhere), with access limited to the people who run the service. Database and backup files are permission-protected on the server.

Email mike@shieldlinesecurity.com or call 773-573-4908. We answer fast.