Legal
Privacy notice
Last updated 8 November 2026
Who we are
DBshieldX is made by Star General Ltd, a company registered in England and Wales, number 12524695. Registered office: 114 Cedar Road, Southampton, SO14 6TH. We are the controller of the personal data described in this notice. We are registered with the Information Commissioner's Office, registration number ZC250727.
Contact us about privacy at info@dbshieldx.com or by post at the address above.
What this notice covers
- this website, dbshieldx.com, and the demo request form;
- emails and calls between you and us;
- customer accounts on the DBshieldX dashboard (dash.dbshieldx.com).
The DBshieldX software itself runs on your own servers. The requests it inspects for your website stay there and are not sent to us. If we install, manage or host DBshieldX for you, we handle that data only on your instructions under a data processing agreement, and you remain its controller.
What we collect and why
| Data | Why we use it | Lawful basis |
|---|---|---|
| Demo request: your name, work email, the sites you want to protect and your message | To reply and arrange a demo or trial | Legitimate interests (answering an enquiry you sent), or steps before a contract at your request |
| Emails and call notes | To provide what you asked for and keep a record of what we agreed | Legitimate interests; contract once you are a customer |
| Customer details: name, company, billing address, invoices | To provide the service, bill you and keep accounts | Contract; legal obligation (tax records) |
| Dashboard accounts: email address, role, two-factor settings, sign-in and activity records | To let authorised people sign in, keep accounts secure and investigate misuse | Contract; legitimate interests (security) |
| Website server logs: IP address, browser type, pages requested and times | To run the website, keep it secure and fix faults | Legitimate interests (security and operation of the site) |
We don't use your data for automated decisions about you, and we don't sell it. We'll only send you marketing emails if you ask for them, and every one will let you unsubscribe.
Who we share it with
- Namecheap hosts this website and our dbshieldx.com mailboxes.
- Google delivers messages from the demo form to our inbox (Gmail), and serves the fonts this website uses, which means your browser sends your IP address to Google when the page loads.
- [Payment provider, once you take card payments]
- Our accountants and professional advisers, when needed, and authorities where the law requires it.
Namecheap and Google may process data outside the UK, including in the United States. Where they do, the transfer is covered by the UK–US data bridge (for certified organisations) or by the UK International Data Transfer Agreement or Addendum in their terms.
How long we keep it
- Enquiries that don't lead to a contract: 24 months after our last contact.
- Customer and billing records: 6 years after the end of the financial year they relate to, as UK tax law requires.
- Dashboard accounts: while the account is active, then 30 days. Sign-in records: 12 months.
- Website server logs: for the short period our host keeps them.
Cookies
This website sets no cookies and uses no analytics or advertising trackers. The DBshieldX dashboard uses strictly necessary cookies to keep you signed in; they don't need consent and last only as long as your sign-in.
Some articles include YouTube videos. Nothing is loaded from YouTube until you press play. When you do, the video plays in YouTube's privacy-enhanced mode (youtube-nocookie.com), and YouTube receives your IP address and may store data on your device as described in Google's privacy policy. If you'd rather not, use the "Watch on YouTube" link or skip the video.
Your rights
You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, and to have it moved to another provider. Email info@dbshieldx.com and we'll answer within one month. There's no charge.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Security
We protect personal data with access controls, two-factor sign-in, encryption in transit and limited retention. To report a security problem, see our vulnerability disclosure policy.
Changes
We'll update this notice when our practices change and show the date at the top. If a change affects you significantly, we'll tell you directly.