Privacy policy

Last updated: 2026. ShieldMatch UK is the data controller for personal data submitted through this platform.

1. Data we collect

• Contact details: name, company name, email address, telephone number, billing address.
• Enquiry details: site address, service requirements, schedules, guard numbers, risk information.
• Documents you upload: site information, photographs and risk documentation.
• Account data: authentication identifiers and portal activity.
• Advertising attribution: UTM parameters, landing page, referrer and advertising click identifiers.

2. Why we use it

• To assess your enquiry and prepare a quotation (performance of a contract or steps prior to a contract).
• To share an anonymised opportunity with selected security providers (legitimate interests).
• To release your identifying details to a selected provider once you accept (performance of a contract).
• To meet legal, accounting and regulatory obligations (legal obligation).
• To send marketing where you have opted in (consent, withdrawable at any time).

3. Anonymisation before provider disclosure

Opportunities sent to security providers are anonymised. Your name, company name, email address, telephone number, full site address and identifying documents are withheld until you have accepted a quotation, required agreements are in place and an authorised administrator releases them. Every release is logged.

4. Who we share data with

• The selected security provider, only after authorised release.
• Our hosting and database processor (Supabase) within secure, access-controlled infrastructure.
• Professional advisers, insurers and regulators where legally required.

5. Retention

Enquiry, quotation, job, agreement and billing records are retained for seven years to meet contractual, tax and dispute-resolution requirements. Marketing consent records are retained until withdrawn plus two years.

6. Your rights

You may request access, rectification, erasure, restriction, portability or object to processing, and you may withdraw marketing consent at any time. Contact us using the details on our contact page. You may also complain to the Information Commissioner’s Office.

7. Security

Data is stored in access-controlled databases with row-level security. Uploaded documents are held in private storage and served only through short-lived signed links to authorised users.