Privacy policy

Effective date: 17 September 2026

This policy describes what happens to personal information in connection with protectiveshield.online. It is written to reflect what this site actually does, which is very little: there is no form here, no account, no cookie and no analytics.

1. Who is responsible for your personal information

The entity responsible for the personal information described in this policy is:

Gormet s.r.o. publishes Protective Shield and decides what happens to the information described below. Correspondence about privacy should go to the email address above, addressed to the privacy contact.

This policy is written with the Privacy Act 1988 (Cth) and the Australian Privacy Principles in mind, because the site is written for readers in Australia. Section 11 covers readers in the European Union and the United Kingdom.

2. What is actually collected

Three categories, and no others.

• Nothing through the site itself. There is no contact form, no newsletter sign-up, no search box that we log, no comment facility, no account and no quiz. There is nothing on any page of this site that asks you to type anything. No cookies are set, and no information is stored in your browser through localStorage, sessionStorage or IndexedDB.
• Ordinary server logs, kept by our hosting provider. Like any web server, the machine serving these pages records a line for each request: the IP address the request came from, the browser's user agent string, the URL requested, the response status and the date and time. We do not add anything to those logs, we do not combine them with anything else, and we do not use them to build a profile of anyone.
• Whatever you put in an email to us. If you write to info@protectiveshield.online, we receive your email address, your message and anything you chose to include in it. We ask you not to send passwords, payment details or identity documents, and we delete them if they arrive.

We do not collect sensitive information as defined by the Privacy Act, we do not buy or receive personal information about you from anyone else, and we do not sell, rent or disclose personal information for anyone's marketing purposes.

3. Why each category exists, and on what basis

Neither category is used for advertising, profiling, automated decision-making or any purpose other than the one stated in the table.

4. How long it is kept

• Server logs: retained by the hosting provider for up to 30 days from the date of the request, then deleted or overwritten in the ordinary course of the provider's log rotation. Where a log entry is needed for an active security investigation, that entry may be kept for up to 12 months and is then deleted.
• Email correspondence: kept for up to 24 months from the date of the last message in the exchange, then deleted from the mailbox. Correspondence that has to be kept longer to comply with a legal obligation is kept only for as long as that obligation requires, and for no other purpose.

5. Who else receives it

Two parties, both named, and nobody else.

• Our hosting provider, the company that operates the server on which this site runs. It necessarily processes requests to the site and keeps the server logs described above, on our behalf and under contract.
• Google, in one narrow respect. This site loads two typefaces from Google Fonts. When your browser requests a font file, that request goes to Google's servers and Google receives your IP address and standard request information as a consequence of the request being made. Google sets no cookie through this request and we receive nothing back from Google. Google's handling of that data is described in its privacy policy.

There is no analytics provider, no advertising network tag, no conversion pixel, no A/B testing tool, no chat widget, no social media embed and no content delivery network in use on this site. We do not disclose personal information to affiliate networks; when you follow a paid link we receive no personal information about you in return.

6. How it is protected

The site is served over HTTPS, so the connection between your browser and the server is encrypted. The site is composed of static files: there is no database, no login, no user-generated content and no administrative interface exposed on the public site, which removes most of the ways a website is compromised. Access to the hosting account and to the mailbox is limited to the people at Gormet s.r.o. who need it, and those accounts are protected by unique passwords and multi-factor authentication where the provider offers it.

7. Your rights and how to use them

Under the Australian Privacy Principles you may ask us for access to the personal information we hold about you, and ask us to correct it if it is wrong. In practice, the only personal information we hold that is connected to an identifiable person is email correspondence, since server logs are held by the hosting provider and are not indexed by us in a way that lets us search for an individual.

1. Write to info@protectiveshield.online describing what you want. We will acknowledge within five business days and respond within 30 days.
2. If you are not satisfied with our response, tell us why, and we will review it.
3. If it remains unresolved, you may complain to the Office of the Australian Information Commissioner, which is the Australian privacy regulator and which explains its complaint process on its website.

We do not charge for access or correction requests. We may ask you to confirm the email address from which the correspondence was sent, so that we do not disclose someone else's message to you.

8. Data breaches

If a data breach occurs that is likely to result in serious harm to an individual whose personal information we hold, we will assess it promptly and, where the Notifiable Data Breaches scheme under the Privacy Act requires it, notify the affected individuals and the Office of the Australian Information Commissioner.

9. Children

This site is not directed at people under 16, contains nothing that asks a reader of any age to provide personal information, and collects nothing from children. If a child writes to our email address, we will answer or delete the message and will not retain it beyond what is necessary to do so.

10. Changes to this policy

If this policy changes, the revised version is published on this page with a new effective date, and the substance of the change is described in a short note at the top of the page for at least 60 days. If the site ever starts collecting anything it does not collect today — a form, a cookie, an analytics tool — this policy will be updated before that happens, not afterwards.

11. Readers in the European Union and the United Kingdom

Gormet s.r.o. is established in the Czech Republic, so the General Data Protection Regulation applies to its processing, and the UK GDPR applies in respect of readers in the United Kingdom.

Legal basis. For server logs, our legal basis is legitimate interests under Article 6(1)(f): the interest in operating and securing the website. We have weighed that against the interests of readers and consider the processing proportionate, since the logs are short-lived, unenriched and used for no other purpose. For email correspondence, the basis is legitimate interests in answering the message you chose to send. There is no consent basis anywhere on this site, because there is nothing here that requires consent: no cookies are set and no tracking takes place.

Your rights. You may request access to your personal data, its rectification or erasure, restriction of processing, portability of data you provided, and you may object to processing based on legitimate interests. Requests go to info@protectiveshield.online and are answered within one month.

Complaints. You may complain to a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection; in the United Kingdom it is the Information Commissioner's Office; readers elsewhere in the EU may complain to the authority in their own member state.

Transfers. The font request described in section 5 involves a transfer to Google, a provider with infrastructure in the United States, on the terms set out in Google's own privacy documentation. No other transfer takes place as a result of using this site.