Privacy Policy

This Privacy Policy applies to the Shieldify IP public website, contact forms, case submission workflows, onboarding materials, support pages, platform login pages, and related digital services that link to or reference this notice. It explains how we collect, use, disclose, store, and protect personal information in connection with our online intellectual property protection, brand protection, anti-counterfeit, anti-impersonation, and content enforcement services.

Depending on the context, Shieldify IP may act as the independent controller or business for website inquiries and commercial relationships, or as a processor or service provider handling information on behalf of a client under a separate contract. If a client-specific agreement, data processing addendum, or platform-specific notice applies to your engagement, that more specific document will supplement this Policy and control where it conflicts.

We collect only the categories of information reasonably necessary to operate the website, evaluate service requests, verify authority to act, and perform brand protection and IP enforcement work.

• Directly from you when you contact us, request a demo, submit a case, or correspond with us
• From clients, brand owners, authorized agents, or counsel who instruct us to review or manage a matter
• From publicly accessible sources such as websites, platforms, marketplace listings, domain records, and social profiles
• From platform operators, intermediaries, vendors, or counterparties involved in complaints, appeals, and account review
• Automatically from your browser or device through standard server, security, and operational logs when you use our services

We use personal information to run a professional, accountable, and platform-aware enforcement service.

• Review, route, and manage contact requests, onboarding, and case submissions
• Verify rights ownership, authorization, business identity, and reporting eligibility
• Prepare, submit, and support platform complaints, notices, escalations, and follow-up activity
• Communicate with clients and authorized representatives about scope, evidence needs, status, and results
• Operate, secure, troubleshoot, and improve our website, forms, and support environments
• Maintain audit trails, quality controls, records management, and internal governance
• Comply with applicable law, contractual obligations, court orders, and platform policies
• Protect Shieldify IP, our clients, and other parties against fraud, abuse, misuse, or unauthorized access

Lawful bases where required by applicable law

• Performance of a contract, or taking steps at your request before entering into a contract
• Legitimate interests in operating an online intellectual property protection business, responding to inquiries, documenting enforcement activity, and securing our systems
• Compliance with legal obligations, regulatory requests, and platform-specific rules for reporting and recordkeeping
• Consent, where a specific use depends on consent and applicable law requires it

Enforcement cases often involve information about third parties, including alleged infringers, sellers, account operators, or website contacts. If you submit personal information about another person, you are responsible for ensuring that you have a lawful basis, authority, or other valid reason to provide that information for review and enforcement purposes. We expect you to provide only information that is relevant, accurate, and reasonably necessary for the matter.

We disclose personal information only where necessary to operate our services, pursue a complaint, support a client instruction, or comply with law.

• Platform operators, registrars, marketplaces, social media companies, hosting intermediaries, and other channels relevant to a complaint or enforcement action
• Infrastructure, form-processing, communications, hosting, storage, security, and support vendors, including providers used to deliver website inquiry and submission workflows such as EmailJS where applicable
• Clients, rights holders, authorized representatives, legal counsel, investigators, and advisers involved in the relevant matter
• Courts, regulators, law enforcement, insurers, auditors, or other parties where disclosure is required or reasonably necessary to protect rights and comply with law
• Potential transaction counterparties and professional advisers in connection with a merger, financing, reorganization, or sale of all or part of our business

As of the effective date of this Policy, Shieldify IP does not sell personal information for monetary consideration and does not use the public website to share personal information for cross-context behavioral advertising.

Shieldify IP operates in an international digital enforcement environment. Personal information may be processed in countries other than the one where you are located, including in jurisdictions where our vendors, clients, platform operators, or support teams operate. Where required by applicable law, we use reasonable contractual, organizational, and technical safeguards to support lawful cross-border transfers.

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, misuse, disclosure, alteration, or destruction. These measures may include access controls, vendor management, environment segregation, least-privilege practices, and encryption in transit where supported.

No method of transmission, storage, or security control is completely secure. For that reason, we cannot guarantee absolute security, but we do review and improve our controls in line with operational and legal risk.

We keep personal information only for as long as necessary for the purposes described in this Policy, taking into account the nature of the engagement, the sensitivity of the information, operational requirements, contractual commitments, and applicable legal obligations.

• Inquiry and business development records are generally retained for as long as needed to respond, evaluate the relationship, and maintain a reasonable record of communications.
• Client onboarding records, account materials, and contractual documents may be retained through the active relationship and for a further period needed for legal, tax, audit, or dispute-management purposes.
• Case files, complaint histories, evidence records, and platform correspondence may be retained for up to seven years after closure, and longer where required by law, litigation holds, repeat-offender analysis, or client instructions.
• Technical and security logs are retained for limited periods appropriate to reliability, fraud prevention, incident response, and operational security, unless preservation is necessary for investigation or compliance.

The public website may rely on standard technical logging, essential browser interactions, and service infrastructure to load pages, receive submissions, and protect against abuse. Separate portals, login environments, or third-party services that you access through links on our website may operate under their own terms, security controls, and privacy notices. We encourage you to review those notices before using those services.

We may also use third-party service providers to deliver website inquiries and communications workflows. Those providers process information only on our behalf and subject to contractual or equivalent confidentiality and use restrictions.

Depending on where you are located, you may have rights under applicable data protection law. These rights are not absolute and may be limited by legal, contractual, security, litigation, and recordkeeping obligations.

• Access or know the personal information we hold about you, subject to verification and applicable exceptions
• Request correction of inaccurate or incomplete personal information
• Request deletion where there is no overriding legal, contractual, security, or recordkeeping reason to retain the information
• Object to or restrict certain processing in jurisdictions that provide those rights
• Request portability of certain personal information you provided to us where applicable law requires it
• Withdraw consent where processing is based on consent, without affecting earlier lawful processing
• Lodge a complaint with a supervisory authority or regulator in the jurisdiction where you live or work, where available

If you are a California resident, you may also have rights to know, correct, and delete certain personal information, subject to statutory exceptions. We will verify requests where required before fulfilling them. If we deny a request, we will explain the basis for that decision where applicable law requires us to do so.

Shieldify IP does not make solely automated decisions on the public website that produce legal or similarly significant effects on individuals. We may use workflow logic, triage, and operational rules to route inquiries and case submissions, but material decisions are reviewed within our service process.

Shieldify IP services are intended for businesses, rights holders, professional representatives, and organizational users. Our website and services are not directed to children, and we do not knowingly collect personal information directly from children through the public site for consumer use.

We may update this Privacy Policy from time to time to reflect changes in our services, operating practices, legal requirements, or risk posture. When we make material changes, we will update the date at the top of this page and may provide additional notice where appropriate for the nature of the change.

To ask a privacy question, submit a rights request, or raise a concern about how personal information has been handled, contact Shieldify IP using the details below.