Privacy Policy
1. Scope
This Policy covers sueshield.com, its intake form, and links to this site in emails we send ("we," "us"). Engagements are governed by the written agreement you sign; this site is the front door, not the filing cabinet.
2. What the form collects
What you type: name, company, work email, optional phone, website address, what you need, your situation, and your message — plus a Terms version, Privacy version, and a client-side timestamp. Don't submit passwords, source code, confidential legal communications, or settlement details through the form.
3. Technical data
We don't run analytics or advertising trackers, and we don't set nonessential cookies. Our host (Netlify) processes form submissions and may log standard technical data — IP address, browser type, requested pages — in operating the service.
One small script on this site does report back to us, and here's how it works. Links to sueshield.com in emails we send may end in a short code (it looks like ?r= followed by letters and numbers). As soon as the page opens, a small script that's part of this site (visit.js) takes that code out of your address bar. If the page then stays on screen for a few seconds, the script lets our system know the link in that email was opened, so a person here knows to follow up. With that notice we keep which email's link was opened, the time, how long the page was on screen, your browser's user-agent string (it names your browser, its version, and your operating system), and a keyed one-way hash of your IP address. Our system also holds the IP address itself in memory for about an hour — it isn't saved with the notice — to limit how many notices can come from one address. We use the timing and the user-agent string to tell a real visit from an automated link checker. A real visit can lead to up to three short follow-up emails from us; a person reads each one before it goes out, and every email includes a way to opt out. The code points to the email, not to your device, and the script saves nothing in your browser. On a page opened without a code, the script does nothing at all.
4. How we use it
- To review your request and reply with next steps or a quote
- To see when a link in one of our emails was opened, so a person can follow up, and to screen out automated link checkers
- To perform engagements you enter into, including maintaining accurate status records
- To operate and secure this website and meet legal obligations
5. Public records vs. private findings
Public status records contain business-level facts: company name, domain, record ID, level, dates, defined public scope, methodology, milestones, limitations, and history. They never contain source code, credentials, private findings, legal materials, or settlement information. Detailed reports are confidential and shared only as the client authorizes.
6. Sharing
We use service providers who process data on our behalf and can't use it for their own marketing: hosting (Netlify for this site and its form; Render for the system that receives the link notices described in Section 3), email, an AI writing-assistance provider that helps us draft our emails, and a messaging service our team uses for internal notifications (for example, that a link in one of our emails was opened). We don't sell personal information or share it for third-party advertising.
7. Retention
Here's how long we keep things:
- Our emails and what's behind them. 24 months after our last contact with you, our system deletes the contact details we used, what our check of your website found, its copies of the emails and any replies, and the link notices described in Section 3. If something's still in progress with you at that point, like an email waiting to go out, we hold on to all of that while it is. And if we end up working together, it stays with our file on the engagement instead.
- What that deletion doesn't reach. Copies of emails in our email accounts, our team's notifications, intake form submissions (Netlify holds those for us), and our hosts' server logs aren't on the 24-month schedule. If you want yours deleted, email us (see Section 8).
- Your record and your file. If we work together, your record in the registry and our file on the engagement are kept for the record's term plus three years, so the record's history stays accurate.
- Opt-outs. If you tell us to stop emailing, we keep your email address and your business's website domain on our do-not-contact list with no end date. That's how we make sure you don't hear from us again.
8. Your choices
Ask for access, correction, or deletion at info@sueshield.com. We'll respond as applicable law requires. Deletion requests can't rewrite a status record's documented history.
9. Children
This is a business service, not directed to children under 13, and we don't knowingly collect their information.
10. Changes
Updates are reflected in the effective date above.
11. Contact
SueShield · info@sueshield.com