1. Who we are and what this covers
ShieldBill LLC operates ShieldBill (“we”, “us”), which helps businesses manage payments and subscriptions. This policy covers personal information collected through our website and services.
It applies to visitors to our websites, businesses using ShieldBill (“Merchants”), their team members, and people buying from them (“Customers”). A Merchant’s own privacy notice covers its use of information outside our services.
2. Our two roles
Merchants and visitors: we are the controller, meaning we decide why and how their personal information is used.
Customers: the Merchant is the controller and we are its processor. We handle Customer information under the Merchant’s instructions and our agreement to manage its payments. Contact the Merchant first about your data. We can help if you cannot reach it.
3. Information we collect
Website visitors
This website does not use analytics, advertising or tracking cookies. We record IP addresses, browser details, pages requested and request times to deliver and protect the site.
If you send us your email through our enquiry form, we use it to reply. Form protection uses browser and device signals to prevent automated abuse, without advertising cookies.
Merchants and their teams
- Identity and contact: name, work email, phone, role and account-access records.
- Business: legal name, address, website, registration and tax numbers, and ownership details needed for verification.
- Billing: invoices, payment history, and your payment method’s brand, last four digits and expiry.
- Connected processors: the access credentials or permissions you provide.
- Usage and security: account activity, IP address, device and browser details.
- Support: messages you send us.
Customers, on the Merchant’s behalf
- Name, email, phone, and billing and shipping addresses.
- Payment references and limited card details: brand, last four digits, expiry, country and issuing bank. Full card details are handled through designated payment forms by payment service providers.
- Purchases, subscriptions, refunds, disputes and payment responses.
- IP address and device details for fraud prevention and payment authentication.
4. How we use it, and why we may
- Provide the services and bill our fees: manage accounts, payments and subscriptions, share payment results and provide support. This fulfils our contract with the Merchant.
- Protect payments and accounts: verify businesses, prevent fraud and misuse, and enforce our terms. We rely on legitimate interests and applicable legal obligations.
- Meet legal obligations: maintain tax and accounting records, answer lawful requests and comply with card-network rules.
- Improve our services: measure performance using aggregated or de-identified information. We rely on legitimate interests.
- Send service information and marketing: provide updates where the law allows, with an opt-out in every marketing message.
We do not sell personal information or share it for cross-context behavioural advertising. We do not use Customer information for our own marketing.
6. International transfers
We process information in the United States and may use service providers in other countries. For transfers from the UK, EEA or Switzerland to countries without an adequacy decision, we use the European Commission’s Standard Contractual Clauses, the UK addendum where applicable, or another lawful transfer mechanism.
Contact privacy@shieldbill.io for information about the applicable safeguards.
7. How long we keep it
- Merchant accounts: while open, followed by up to 30 days to request an export.
- Payment and invoice records: as required by tax, accounting and card-network rules, typically up to 7 years after a transaction.
- Security and activity records: up to 2 years, or longer for an investigation.
- Website request records: up to 30 days.
- Customer information: as the Merchant instructs, then returned or deleted when the Merchant leaves, except records we must retain by law.
After these periods, we delete or anonymise information. Deletion of any remaining copies completes within 14 days.
8. How we protect it
We use technical and organisational safeguards, including encryption and restricted access, to protect personal information. No system is perfectly secure. If a breach affects your information, we will notify you and the relevant authorities as required by law.
Report security concerns to security@shieldbill.io.
9. Your rights
Depending on where you live, you may ask to:
- access your personal information and receive a portable copy;
- correct or delete it;
- object to or restrict its use;
- withdraw consent where we rely on it;
- opt out of marketing.
California residents may also ask what we collect and why, without discrimination for exercising their rights. We do not sell or share personal information as those terms are defined by the CCPA.
Contact privacy@shieldbill.io to exercise a right. We will verify your request and reply within one month, or sooner where required by law. For Customer requests, we will refer the request to the Merchant and help it respond.
You may complain to your local data protection authority.
11. Children
Our services are for businesses and are not directed at children. We do not knowingly collect personal information from children under 16. Contact us if you believe we have, and we will delete it.
12. Changes to this policy
We post updates here with a new date. We will notify Merchants by email or in their account before material changes take effect.
13. Contact
ShieldBill LLC, 1021 E Lincolnway, Suite #10173, Cheyenne, Wyoming 82001, United States. Privacy questions and requests: privacy@shieldbill.io.