Privacy policy.
What we collect, why, and what we never do. Written to be read, not skimmed past.
Who we are
SmallShield LLC is a website security monitoring company in Mount Pleasant, South Carolina. We look at small business websites from the outside for security problems and report what we find in plain English. Questions about this policy go to william@smallshield.co.
What we collect
Contact details you give us
Your name, email address, business name, phone number if you share it, and the website domain you want monitored. You provide these at checkout, on the authorization form, or when you email us.
Payment information
Handled entirely by Stripe, our payment processor. Your card number never reaches our systems and we never see it. Stripe's own privacy policy covers the checkout page.
The signed authorization form
Before the first scan you sign a short form that names the domain you own and gives us written permission to scan it. We keep that signed form for as long as you are a client and for twelve months after, because it is the legal basis for every scan we run.
Scan results
Technical findings about your website. These are external observations, the same things any visitor on the internet could technically see. We never access your hosting account, your files, your databases, or your passwords, and our scans are not designed to receive patient or client records.
This website
This website sets no cookies and runs no analytics. The fonts on this site are loaded from Google Fonts, which means Google's servers see the request for the font file. Nothing else about your visit is recorded by us.
Scans run only with signed owner authorization
We scan only domains for which the owner has signed an authorization form. No scan runs before that form is signed, no scan runs after the authorization is withdrawn, and we never scan a website that does not belong to one of our clients. If you believe a domain has been scanned without authorization, email us and we will answer the same business day.
How we use it
To run your monitoring, deliver reports and alerts, bill you, answer your emails and calls, and keep the record of your authorization. That is the whole list.
What we never do
- We do not sell your information.
- We do not share your scan findings with anyone but you and the people you tell us to send them to.
- We do not scan websites without signed owner authorization.
- We do not send marketing on behalf of anyone else.
- We do not name you or use your logo in marketing without your written permission.
Where your data lives
With a small set of established providers: Stripe for payments, the scanning platform we use to run scans, and the email service we use to send reports. Scan reports are kept while you are a client so we can show you history and trends, and for twelve months after you leave, then deleted. You can ask for earlier deletion at any time.
Your choices
Unsubscribe from any email with one reply. Ask for a copy of your data, or ask for it to be deleted, by emailing us. Deletion requests are answered the same business day and completed within thirty days, except for the signed authorization form and billing records we are required to keep.
Changes
If this policy changes, this page changes and the date above moves. No silent edits.
Contact
SmallShield LLC, Mount Pleasant, South Carolina. william@smallshield.co