Privacy Policy

Last updated: 25 October 2026

1. Who we are

SuddShield provides digital safety guidance and business cybersecurity services, starting in South Sudan. In this policy, “we” and “us” mean SuddShield. You can reach us through the contact form, at support@suddshield.com, or on WhatsApp at +91 74358 35206.

2. What we collect

When you contact us (form, email or WhatsApp), we receive only what you choose to send. Through the form this is limited to:

• your enquiry type (digital safety, business, or general);
• your message;
• a way to reply, such as an email address or a number you are comfortable using;
• optionally, a name or preferred name, an organization, and your preferred contact method.

If you message us on WhatsApp, we also see your WhatsApp number and profile name, as WhatsApp provides them.

Security data and counters. To block abuse of the site, we keep short-lived counters tied to a one-way, keyed code made from your network address. We do not store your raw IP address in our application, and these counters expire automatically. Our web server may keep standard technical logs (such as time and requested page) for security and troubleshooting; we do not write the contents of your messages into any application log.

What we do not collect. We do not ask visitors to create accounts. We do not use advertising cookies, tracking pixels, fingerprinting, or location tracking. We do not use third-party analytics. We keep a simple built-in counter of how many times each page is viewed per day. It stores only the page address, the date and a running total, with no cookies, no IP address, and nothing that identifies a visitor, and it is skipped if your browser sends a Do Not Track or Global Privacy Control signal. We also keep daily totals of how many form messages arrive by type (never their contents), and we delete these totals after about 13 months.

Cookies. The public website sets none. A single strictly necessary, secure cookie is used only for the private staff sign-in area.

3. Please do not send us sensitive material

Do not send passwords, one-time codes (OTPs), recovery codes, or intimate images and videos, through the form, email or WhatsApp. We do not need them to help you. If you send something like this by mistake, we will delete it, we will not store or forward it, and we will tell you how to reduce the risk.

4. Why we use your information

• to read and reply to your enquiry and give you practical guidance;
• for business clients, to propose and carry out an agreed scope of work;
• to keep the website and our systems secure, and to detect and stop abuse and spam;
• to meet legal obligations that apply to us.

We do not use your information for marketing, profiling or automated decisions, and we will not contact you about anything unrelated to your enquiry.

5. We do not disclose your information

We do not sell, rent, trade or share your information with anyone for marketing or any commercial purpose. We do not tell any person or organization that you contacted us, or what you told us, without your clear permission. We make only these narrow exceptions:

• With your permission. If you ask us to help you report something to a platform or authority, we share only what you have approved.
• To prevent serious harm. If we believe someone is in immediate danger of serious harm, particularly a child, we may share the minimum necessary with emergency or child-protection services.
• When the law compels us. If a valid legal order from a competent authority requires it, we disclose only what is required, and where the law allows we will tell you first.
• Service providers working for us, described in section 6, who may process information only to run our services.

6. Who can access your information, and our providers

Access is limited to the authorized SuddShield staff who need it to respond to you. We rely on a small number of providers:

• Hostinger hosts our website on a private virtual server and runs our business mailbox, where enquiries sent through the form or email are received and stored.
• WhatsApp (Meta) carries messages you send us there. WhatsApp encrypts message content in transit, but it may handle details about your account and usage under its own policy.

These providers may operate servers outside South Sudan, so your information may be processed in other countries. We do not allow providers to use your information for their own marketing. We do not currently claim certification under any particular data-protection law.

7. How we protect it

• All traffic to the website is encrypted with HTTPS, and browsers are told to always use it.
• The website validates and cleans all input on the server, limits repeated submissions, and uses modern browser security protections.
• Enquiry contents are sent straight to a protected mailbox and are not kept in our website database or in application logs.
• Staff access to the private area needs a strong password and a second factor, sessions are short, and sign-ins and changes are recorded in an audit log.
• Our server is configured with a firewall, restricted administrator access, and regular security updates.
• We keep our software up to date and review it for known vulnerabilities.

Limits. No system is completely secure. Ordinary email is not end-to-end encrypted. If you are worried that someone can see your phone, email or accounts, tell us, and avoid using a device or account they can access. If a security incident affects your information, we will notify the people affected without undue delay, as far as we can reach them.

8. How long we keep it

• Digital safety enquiries: deleted within 6 months after we have finished helping you, or sooner if you ask.
• Business and general enquiries: deleted within 12 months after our last contact, unless you become a client.
• Client engagements: contracts, scope and reports are kept for the period agreed with the client, and securely deleted after that.
• Security counters and logs: short-lived counters expire within hours or days; the staff audit log keeps only event types and a shortened one-way code.

When we delete a message from our mailbox it can remain in the provider’s backups for a limited time before it is permanently removed.

9. Your choices and rights

You can ask us at any time to tell you what we hold about you, correct it, delete it, or stop using it. Contact us through the same channel you used or at support@suddshield.com. We aim to answer within 30 days. Because some people may try to impersonate others, we may ask a simple question to confirm it is really you before we share or change anything.

10. Young people

Our services are meant for adults. If you are under 18 and feel unsafe, please tell a trusted adult or your local emergency or child-protection services. If a young person contacts us, we respond with care and guide them to appropriate help.

11. Emergencies

We are not an emergency service. If you are in immediate danger, contact your local emergency services or a trusted person near you first.

12. Changes to this policy

If we change this policy in a way that affects you, we will update the date at the top and, for significant changes, make it clear on the website. Questions? Contact us. See also our Terms of Service.