// PRIVACY_POLICY

Privacy Policy

How Shield Security collects, uses and protects your personal data. Short, clear and transparent.

Last updated: October 2026 · Shield Security · shieldsecurityy.com
01 · Introduction

Introduction

This Privacy Policy explains how Shield Security (“we”, “us”, “our”), operated by Yusuf Emre Ekri, collects, uses, stores and protects personal data when you visit shieldsecurityy.com, contact us, or purchase our services.

We process personal data in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).

Core principle: we only collect the minimum data needed to deliver our services. We never sell your data or share it with third parties for marketing.

02 · Data Controller

Data Controller

03 · Data We Collect

Data We Collect

Information you provide

  • Name, company or project name and email address submitted through our forms
  • Discord username and user ID, used to communicate and deliver the service
  • Discord server ID and server name, used to configure security systems
  • Messages and details you share with us about your community
  • Billing details required for invoicing (payment card or bank data is handled by the payment provider, not by us)

Information collected during the service

  • Security event logs (e.g. blocked raids or scam links), kept for threat analysis
  • Anonymous, aggregated service usage statistics

What we do not collect

  • Private messages of your server members
  • Voice channel recordings
  • Content of private or hidden channels that is not required for the service
04 · Use of Data

How We Use Your Data

  • To respond to your enquiries and prepare quotes or security analyses
  • To install, configure, monitor and maintain the services you purchase
  • To process payments, issue invoices and handle refund requests
  • To send service-related notices such as reports, updates or policy changes
  • To meet legal, tax and accounting obligations
  • To detect and prevent fraud, abuse and security threats

The legal bases for this processing are the performance of a contract with you, compliance with legal obligations, our legitimate interest in operating and securing our services, and your consent where it is required.

05 · Sharing

Data Sharing

We do not sell, rent or trade personal data. We share data only with service providers that are necessary to run our business, and only to the extent needed:

  • Payment providers (e.g. Payoneer, banks) to process payments and refunds
  • Discord as the platform on which our services are delivered
  • Email and communication providers used to correspond with you
  • Public authorities when we are legally required to do so

Some of these providers may process data outside Türkiye. In such cases we rely on the safeguards required by applicable law.

06 · Retention

Data Retention

  • Security event logs are kept for 30 days and then deleted automatically.
  • Server configuration data is permanently deleted within 7 days after the service ends.
  • Correspondence and order records are kept for as long as needed to provide support.
  • Invoices and accounting records are kept for the period required by Turkish tax law.
07 · Security

Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including restricted access, least-privilege permissions on client servers, two-factor authentication on our accounts and encrypted communication channels where available.

08 · Cookies

Cookies

Our website does not use advertising or cross-site tracking cookies. Your browser and our hosting provider may store technical data (such as IP address, browser type and access time) that is strictly necessary to deliver and secure the website.

09 · Your Rights

Your Rights

Under KVKK Article 11 and, where applicable, the GDPR, you have the right to:

  • Learn whether your personal data is processed and request information about it
  • Request access to, correction of, or deletion of your personal data
  • Object to processing or request that it be restricted
  • Withdraw your consent at any time where processing is based on consent
  • Request a copy of your data in a portable format
  • Lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local supervisory authority

To exercise your rights: email yusufekri098@gmail.com. We respond within 30 days at the latest.

10 · Changes

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always published on this page with its “Last updated” date. Significant changes will be communicated to active clients.

Questions? Visit our Contact page.