Privacy Policy

Introduction

Prompt Shields AS ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, visit our website, or interact with our products.

We are a Norwegian company with operations in the United Kingdom, and we comply with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and other applicable data protection laws.

Data Controller

The data controller responsible for your personal data is:

Information We Collect

We collect information in the following ways:

Information You Provide

• Account information (name, email, company, job title)
• Contact form submissions and support requests
• Payment and billing information
• Communications with our team

Information Collected Automatically

• Device and browser information
• IP address and approximate location
• Usage data and analytics
• Cookies and similar technologies

Platform Data

• AI interaction logs (processed for security analysis)
• Configuration and policy settings
• Audit logs and compliance data

How We Use Your Information

• To provide and maintain our services
• To process transactions and send related information
• To send administrative information and service updates
• To respond to inquiries and provide customer support
• To improve and develop our products and services
• To comply with legal obligations
• To protect against fraudulent or illegal activity

Legal Basis for Processing

We process your personal data based on:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interest: Processing necessary for our legitimate business interests
• Consent: Where you have given specific consent
• Legal Obligation: Processing necessary to comply with legal requirements

Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third parties who perform services on our behalf
• Business Partners: With your consent, for joint offerings
• Legal Requirements: When required by law or to protect rights
• Business Transfers: In connection with mergers or acquisitions

We do not sell your personal information to third parties.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When data is no longer required, we securely delete or anonymise it.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

International Transfers

Your data may be transferred to and processed in countries outside the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of processing
• Portability: Request transfer of your data
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@promptshields.com.

Cookies

We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings. For more information, see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or the UK Information Commissioner's Office (ICO).