Privacy Policy

1. What Information Do We Collect?

In Short: We collect personal information that you provide to us.

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register on the Services, express interest in our products, participate in activities on the Services, or otherwise contact us. This may include:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Contact preferences
• Contact or authentication data
• Billing addresses
• Debit/credit card numbers
• Usernames
• Passwords
• Business information (company name, industry, vehicle fleet details)

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment, such as your payment instrument number and associated security code. All payment data is stored by Square and PayPal — see their privacy policies at squareup.com and paypal.com.

All personal information you provide to us must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

Some information — such as your IP address and browser or device characteristics — is collected automatically when you visit our Services, primarily to maintain security and operation and for internal analytics and reporting. This includes:

• Log and Usage Data — service-related diagnostic, usage, and performance information recorded in server log files.
• Device Data — information about the computer, phone, or tablet you use to access the Services, including IP address, browser type, hardware model, and operating system.
• Location Data — precise or imprecise information about your device's location. You can opt out via your device's location settings, though this may limit certain features.

Comments. When visitors leave comments on the site, we collect the data shown in the comments form, plus the visitor's IP address and browser user agent string to help with spam detection. An anonymized hash of your email may be checked against the Gravatar service — see automattic.com/privacy.

Media. If you upload images to the website, avoid uploading images with embedded location data (EXIF GPS), as visitors can download and extract this data.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

• To facilitate account creation and authentication
• To deliver and facilitate delivery of requested services
• To respond to user inquiries and offer support
• To send administrative information about our products, services, and policies
• To fulfill and manage orders, payments, returns, and exchanges
• To send marketing and promotional communications, in line with your preferences
• To deliver targeted advertising tailored to your interests
• To protect our Services, including fraud monitoring and prevention
• To identify usage trends and improve our Services
• To determine the effectiveness of our marketing campaigns
• To protect an individual's vital interests, such as preventing harm

3. What Legal Bases Do We Rely On?

In Short: We only process your personal information when we have a valid legal reason to do so, such as consent, contract performance, legal obligations, or legitimate interests.

If you are located in the EU or UK: We rely on Consent, Performance of a Contract, Legitimate Interests, Legal Obligations, and Vital Interests as legal bases under the GDPR and UK GDPR.

If you are located in Canada: We rely on express or implied consent, which you may withdraw at any time, subject to certain legal exceptions such as fraud detection, investigations, and business transactions.

4. When & With Whom Do We Share Your Information?

In Short: We may share information with categories of third parties who perform services on our behalf under contract.

• User account registration & authentication services
• Website hosting service providers
• Sales & marketing tools
• Performance monitoring tools
• Payment processors
• Order fulfillment service providers
• Finance & accounting tools
• Data storage service providers
• Data analytics services
• Cloud computing services
• Affiliate marketing programs
• Communication & collaboration tools

We may also share information during business transfers (mergers, acquisitions, financing), with affiliates who honor this notice, and with business partners to offer certain products or promotions.

5. Do We Use Cookies & Tracking Technologies?

In Short: We may use cookies and similar tracking technologies to collect and store information.

If you leave a comment, you may opt in to saving your name, email, and website in cookies for one year. Login cookies persist for two days (two weeks with "Remember Me"), and screen option cookies last a year. Editing or publishing an article sets an additional cookie that expires after one day and contains no personal data.

Embedded content. Articles may include embedded content from other websites, which may collect data, set cookies, and track your interaction as if you visited that site directly.

6. How Long Do We Keep Your Information?

In Short: We keep your information only as long as necessary for the purposes outlined in this notice, unless a longer period is required by law.

Comments and their metadata are retained indefinitely to recognize and approve follow-up comments automatically. Registered users can see, edit, or delete their personal information at any time, except their username. When there is no ongoing legitimate business need for your information, we will delete or anonymize it, or securely isolate it until deletion is possible.

7. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through organizational and technical security measures.

Despite our safeguards, no electronic transmission or storage technology can be guaranteed 100% secure. Transmission of personal information to and from our Services is at your own risk; please access the Services within a secure environment.

8. Do We Collect Information From Minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor dependent and consent to their use of the Services. If we learn we have collected data from a user under 18, we will deactivate the account and delete such data. Contact us at support@xshield-protect.com if you become aware of any such data.

9. What Are Your Privacy Rights?

In Short: In some regions, including the EEA, UK, and Canada, you have rights that allow you greater access to and control over your personal information.

These rights may include the right to request access, rectification, erasure, restriction of processing, and data portability. You may withdraw consent at any time, opt out of marketing communications via the unsubscribe link in our emails, and manage cookies through your browser settings.

If you are located in the EEA or UK and believe we are unlawfully processing your data, you have the right to lodge a complaint with your local data protection authority. Swiss residents may contact the Federal Data Protection and Information Commissioner.

For any privacy rights questions, email us at support@xshield-protect.com.

10. Controls for Do-Not-Track Features

No uniform technology standard for recognizing DNT signals has been finalized, so we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will update this notice accordingly.

11. Do California Residents Have Specific Privacy Rights?

In Short: Yes, California residents are granted specific rights regarding access to their personal information under the "Shine The Light" law and the CCPA.

Categories of Personal Information Collected (Past 12 Months)

You can opt out of the sale or sharing of your personal information by disabling cookies in Cookie Preference Settings and using the Do Not Sell or Share My Personal Information link on our homepage. California residents have the right to request deletion, to be informed about our data practices, to non-discrimination for exercising privacy rights, and other rights described in the full notice. To exercise these rights, contact us by email at support@xshield-protect.com or by phone at 470-342-0059.

12. Do Virginia Residents Have Specific Privacy Rights?

In Short: Yes, Virginia residents may be granted specific rights under the Virginia Consumer Data Protection Act (CDPA).

These include the right to confirm whether we process your data, access it, correct inaccuracies, request deletion, obtain a copy of data you've shared with us, and opt out of processing used for targeted advertising, sale, or profiling. XSHIELD has not sold, and will not sell, personal data belonging to website visitors, users, or other consumers.

We will respond to requests without undue delay, and within forty-five (45) days of receipt, with a possible one-time 45-day extension. If we decline to act on your request, you may appeal by emailing support@xshield-protect.com; we will respond to appeals within sixty (60) days.

13. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

Any updated version of this notice will be effective as soon as it is accessible. We may notify you of material changes by prominently posting a notice or sending a direct notification.

14. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at support@xshield-protect.com or call us at 470-342-0059.

15. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country, you may have the right to request access to, change, or delete the personal information we collect from you. To make such a request, please contact us at support@xshield-protect.com.