Version: 1.0 · Last updated: 2026-07-04
1. Who we are
The DHCP Shield Pro website is operated by the entity disclosed at /company/contact. That page lists our registered legal entity, registration number, address, and authorised representative. For any privacy question, contact sales@dhcpshield.com.
2. What data we collect, and how the forms work
This website collects only what you choose to send us through its contact, demo, and sales forms. Those forms are live today and are handled by our own backend service (“shield-api”) running on our infrastructure. We collect:
- Name
- Email address
- Company name (optional)
- The free-text message you send us
- For sales contacts: device count, deployment type, and vertical (free-form, optional)
When you submit a form, the data flows as follows:
- Anti-bot check (Cloudflare Turnstile). Each submission is verified by Cloudflare Turnstile to block automated abuse. Turnstile is privacy-preserving and does not track you across sites; Cloudflare receives the challenge token and the request metadata necessary to validate it. See Cloudflare’s privacy policy.
- Storage (SQLite). The validated submission is stored by shield-api in a local SQLite database on our server.
- Delivery (SMTP email). shield-api also delivers the submission to our sales inbox over SMTP so we can respond.
This site uses first-party, self-hosted, cookieless web analytics (Umami) running on our own infrastructure in the European Union. It sets no cookies, does not track you across other sites, and no third-party analytics service receives any data. Your IP address is used only transiently to derive an anonymized visitor hash for aggregate visit counts; the raw IP address is not stored.
3. Why we process it (legal basis)
We rely on Article 6(1)(f) GDPR — our legitimate interest in responding to inbound sales contact and operating a B2B sales pipeline. You can object at any time by emailing sales@dhcpshield.com, and we will erase your data unless we are required by law to retain it.
4. How long we retain it
Inbound form submissions are retained for 24 months from the date of submission, unless a customer relationship begins — in which case retention is governed by the contract and the customer-data terms described in §6 below. You can request earlier erasure at any time.
5. Where your data lives, and who else receives it
This website, the shield-api backend, and our web analytics all run on our own infrastructure in the European Union — there is no third-party hosting provider and no third-party analytics processor, and no analytics data leaves our infrastructure. The providers that may receive personal data submitted through this site are:
- Cloudflare — Turnstile anti-bot validation on form submissions. See https://www.cloudflare.com/privacypolicy/.
- Google Workspace (Google Ireland Limited) — hosts our company mailboxes; the email notification of your form submission is delivered to and stored in our sales inbox there. See https://policies.google.com/privacy.
If this list changes, we update this page (see §9).
6. When you become a customer (forward-looking)
This section describes what changes if and when you license DHCP Shield Pro — it does not apply to using this website. The product itself runs on your infrastructure, not ours, so the data it processes about your network (MAC/IP addresses, hostnames, DHCP option content, and derived analytics — “Operational Data”) stays on your appliance. For that data you are the sole controller and we have no access to it; no Article 28 processing agreement is needed for ordinary operation.
The one context in which personal data may reach us is the support channel: if you open a support session and approve it, the diagnostic content you share (“Support Data”) and any in-product feedback (“Feedback Data”) is processed by us as your Article 28 processor, on your documented instructions, and retained for a maximum of 90 days after the session. Those processor terms are set out in our Data Processing Agreement, which mirrors the EULA’s data-protection chapter. We do not operate any commercial billing, license-portal, or payment data flow on this site today; those are described here only as forward-looking, not as live processing.
7. Your rights
Under the GDPR you have the right to:
- Access your personal data
- Request correction or deletion
- Request portability of the data you provided
- Object to processing based on legitimate interest
- Lodge a complaint with your supervisory authority
To exercise any of these rights, email sales@dhcpshield.com; our privacy contact is reachable at the same address. We have not designated a Data Protection Officer: our processing does not meet the Article 37(1) GDPR thresholds that make one mandatory. If that changes, the DPO will be named here.
8. Cookies and tracking
This site sets no cookies and uses cookieless, self-hosted web
analytics (Umami, described in §2). Because the analytics is cookieless, sets no
non-essential cookies, and does not track you across other sites, no consent banner is
required. Visitor IP addresses are processed only transiently to derive an anonymized
aggregate hash and are not retained raw. The Starlight theme toggle stores a single key in
localStorage (starlight-theme) under the same origin; this is not a
cookie and is not transmitted off-device.
If we later introduce any cookie that is not strictly necessary, we will update this policy before it goes live and ask for your consent before anything is set.
9. Changes to this policy
Material changes are announced on this page with an updated Last updated date.
10. Contact
Privacy questions: sales@dhcpshield.com. Legal entity and authorised representative: /company/contact. Customer-data processor terms: /legal/dpa.