At Shieldandlock (“we,” “us,” or “our”), accessible through www.shieldandlock.com, we value the privacy and security of our customers. Based in Germany, we provide home security solution design services to customers across Europe.

This Privacy Policy explains how we collect, use, process, disclose, and retain personal information when you visit our website, purchase our services, submit information for a customized home security plan, or communicate with our support team. We handle personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

For the purposes of the GDPR, the organization responsible for determining the purposes and means of processing your personal data is identified below.

For questions about this Privacy Policy, our data handling practices, or your privacy rights, please contact us at audit@shieldandlock.com.

2. Personal Information We Collect

We collect information that is reasonably necessary to operate our website, process orders, provide home security design services, and respond to customer requests.

Contact and Order Information

When you place an order or contact us, we may collect your name, email address, billing information, order number, and other details necessary to administer your purchase and provide customer support.

Home Security Planning Information

To prepare a customized home security plan, we may process information that you voluntarily provide about your property and planning requirements, such as:

  • General property type and layout information.
  • Areas of concern and security planning objectives.
  • Relevant access points or room arrangements.
  • Your preferences, questions, and other requirements related to the selected service.

Please submit only information necessary for the requested service. Avoid providing alarm access codes, passwords, detailed security credentials, or other information that could unnecessarily expose your property to security risks.

If you submit photographs, floor plans, or other property-related materials, those materials may contain personal information. Please review them before submission and remove unnecessary identifying or sensitive details wherever possible.

Payment and Transaction Information

Payments are processed through third-party payment providers. We may receive transaction confirmations, payment status, transaction references, billing details, and other information needed to manage orders and refunds.

We do not store complete payment card numbers or card security codes on our own servers.

Technical and Website Usage Information

When you access our website, certain technical information may be collected automatically, depending on your browser settings and cookie preferences. This may include your IP address, browser type, device information, operating system, access timestamps, requested pages, and security-related log data.

We use this information to maintain website functionality, identify technical issues, protect our systems, and understand website performance where permitted by applicable law.

3. Purposes and Legal Bases for Processing

For customers in the European Economic Area (EEA), we process personal data only where an applicable legal basis permits us to do so.

Performance of a Contract

We process information necessary to fulfill your order, prepare your customized home security design plan, deliver the agreed service, communicate about your purchase, and handle applicable cancellations or refunds.

Legitimate Interests

Where appropriate and permitted by law, we process certain information to protect our website and business operations, prevent fraudulent transactions, maintain service quality, respond to customer inquiries, and establish or defend legal claims.

When relying on legitimate interests, we consider your rights and freedoms and avoid processing that unjustifiably overrides your interests.

Legal Obligations

We may process and retain information when necessary to comply with applicable tax, accounting, commercial recordkeeping, consumer protection, and other legal requirements in Germany or the relevant European jurisdiction.

Consent

Where required by law, we rely on your consent for specific processing activities, such as the use of non-essential cookies or similar tracking technologies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Payment Processing Through Stripe

We use Stripe as a third-party payment processor to facilitate secure checkout and payment transactions on our website.

When you make a purchase:

  • Payment information is transmitted to Stripe or its relevant payment infrastructure for transaction processing and authorization.
  • Stripe may process personal and transaction data to verify payments, prevent fraud, maintain payment security, and comply with applicable legal requirements.
  • We receive the transaction information necessary to confirm orders, provide services, and administer refunds.
  • We do not store complete payment card credentials on our own servers.

Stripe may act as an independent controller for certain processing activities, depending on the service and applicable circumstances. Stripe’s own privacy notice explains how it handles personal data.

For more information, please visit Stripe Privacy Policy.

5. Data Sharing and Third-Party Service Providers

We do not sell personal information to third parties. We disclose personal data only when reasonably necessary for the purposes described in this Privacy Policy, when you request or authorize the disclosure, or when disclosure is required or permitted by law.

Depending on how our services operate, recipients may include:

  • Payment Providers: Stripe and relevant payment infrastructure providers for payment processing, authorization, and refunds.
  • Website Hosting and IT Providers: Providers that maintain our website, servers, security systems, and technical infrastructure.
  • Digital Delivery and Communication Providers: Services used to send order confirmations, deliver completed design materials, and communicate with customers.
  • Professional Advisers: Legal, accounting, or other professional advisers where necessary.
  • Public Authorities: Competent authorities, courts, or regulators when disclosure is legally required or necessary to protect our rights.

We seek to ensure that service providers processing personal data on our behalf are subject to appropriate contractual confidentiality, security, and data protection obligations.

We do not authorize service providers to use personal information for unrelated purposes where they act on our behalf.

6. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including service delivery, customer support, legal compliance, dispute resolution, and security.

Retention periods vary depending on the type of information and applicable legal requirements.

  • Order and Service Information: Retained for the period necessary to fulfill your purchase, provide customer support, manage service-related requests, and address potential disputes.
  • Customized Planning Materials: Retained only for as long as necessary for service delivery, agreed follow-up assistance, and applicable legal or operational requirements. We seek to avoid retaining property-related information longer than necessary.
  • Financial and Accounting Records: Retained for the statutory period applicable to the relevant records under German tax and commercial law. Depending on the record type and applicable rules, this may include retention periods of six or eight years, or ten years for certain records.
  • Customer Support Communications: Retained for as long as necessary to resolve inquiries, maintain relevant service records, and establish or defend legal claims.
  • Technical and Security Logs: Retained for a limited period appropriate to website security, troubleshooting, and incident investigation, unless a longer period is necessary for a specific security or legal matter.

When personal data is no longer required, we will delete it or anonymize it where appropriate, subject to applicable legal retention obligations and technical limitations.

7. Your Data Protection Rights

Depending on your location and the applicable law, you may have the following rights concerning your personal data.

Rights Under the GDPR

Subject to applicable legal conditions and exceptions, you may have the right to:

  • Access: Request confirmation of whether we process your personal data and obtain a copy of that data.
  • Rectification: Request correction of inaccurate or incomplete information.
  • Erasure: Request deletion of personal data where the legal requirements are met.
  • Restriction of Processing: Request that we limit certain processing activities in qualifying circumstances.
  • Data Portability: Receive certain information you have provided in a structured, commonly used, machine-readable format and, where technically feasible and legally applicable, request its transfer to another controller.
  • Object: Object to processing based on legitimate interests where grounds relating to your particular situation apply.
  • Withdraw Consent: Withdraw consent for processing activities based on consent at any time.
  • Lodge a Complaint: Submit a complaint to a competent data protection supervisory authority, particularly in the EU or EEA country where you live, work, or believe an infringement occurred.

These rights are subject to applicable legal requirements and exceptions. We may need to verify your identity before responding to a request.

To exercise your rights, please contact audit@shieldandlock.com.

8. International Data Transfers

Although Shieldandlock operates from Germany and focuses on European customers, certain third-party providers may process or access personal data from locations outside the European Economic Area.

Where a transfer of personal data outside the EEA is subject to GDPR international transfer requirements, we will rely on an applicable legal transfer mechanism. Depending on the circumstances, this may include:

  • An adequacy decision adopted by the European Commission.
  • Standard Contractual Clauses approved by the European Commission.
  • Additional technical, organizational, or contractual safeguards where required.

Information about relevant safeguards may be requested by contacting us at audit@shieldandlock.com, subject to applicable legal restrictions.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functions, maintain security, remember preferences, and improve website performance.

Strictly necessary cookies may be used where required to operate the website or provide a service you have requested. Non-essential analytics, advertising, or similar technologies will be used only where the required consent has been obtained.

Third-party services, including payment-related services such as Stripe, may use cookies or similar technologies in connection with their functions, subject to their applicable settings and legal requirements.

Where a cookie consent tool is provided, you can use it to review your preferences and change or withdraw consent for non-essential cookies.

For further details, please refer to our Cookie Policy.

10. Data Security

We implement reasonable technical and organizational measures intended to protect personal information against unauthorized access, accidental loss, alteration, disclosure, and destruction.

These measures may include access restrictions, secure website connections, controlled handling of customer information, and the use of third-party providers with appropriate security practices.

However, no method of electronic transmission or data storage can be guaranteed to be completely secure. We encourage customers to avoid sending passwords, alarm codes, or unnecessary sensitive property information through ordinary email.

11. Children’s Privacy

Our home security design services are intended for adults responsible for managing or planning the security of a property. Our website is not designed to knowingly collect personal information directly from children.

If we become aware that we have collected a child’s personal data in circumstances where a lawful basis or required authorization is absent, we will take appropriate steps to address the information in accordance with applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website operations, data handling practices, or applicable legal requirements.

When changes are made, we will publish the revised version on www.shieldandlock.com and update the effective date where appropriate. If a change requires additional notice or consent under applicable law, we will take the required steps.

We encourage you to review this page periodically to stay informed about our privacy practices.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need further information about how your personal information is handled, please contact us.

We aim to respond to privacy-related inquiries within a reasonable period and in accordance with the time limits required by applicable data protection law.

Thank you for trusting Shieldandlock with your information.