Privacy Policy

Last updated: August 27, 2026

This Policy applies between you, as a user of this website, and OG SYSTEMS, LLC, doing business as ShieldGPS ("ShieldGPS"), the owner and provider of this website. It explains how we collect and use personal data in connection with the website and the services and systems available through it.

  1. Important information
    1. Our website is not intended for children and we do not knowingly collect data relating to children.
    2. This Privacy Policy supplements the other policies (including our Terms of Service) and is not intended to override them.
    3. OG SYSTEMS, LLC, doing business as ShieldGPS, is the controller responsible for your personal data (we, us or our).
    4. To help you understand this Privacy Policy, Schedule 1 provides a glossary, examples of the personal data we collect, how we use it, the lawful bases for processing it, and further details of your rights.
    5. We have appointed a data privacy manager (DPM). If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact our DPM by email: contact@shieldgps.co
    6. You have the right to make a complaint at any time to the ICO (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
    7. It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.
    8. Our website may include links to external websites, plug-ins and applications. Those services may independently collect personal data when you use them. We do not control external services and are not responsible for their privacy practices, so you should read their privacy policies to understand what they collect and how they use it.
  2. The data we collect about you
    1. We may collect, use, store and transfer the types of personal data about you listed in Part 1 of Schedule 1.
    2. We also produce and use aggregated data. However, if we combine aggregated data with your personal data so that it can directly or indirectly identify you, we treat this as your personal data.
    3. We do not collect any special categories of personal data.
    4. If we are required by law, or under the terms of a contract we have with you, to collect your personal data and you fail to provide it, we may not be able to enter into or perform the contract with you, and we may have to cancel a product or service. We will notify you of this at the relevant time.
  3. How personal data is collected
    direct interactions you may provide personal data when you complete online forms, request or purchase products or services, subscribe to our services, create a user account, or otherwise correspond with us by post, phone, or email.
    automated technology we automatically collect personal data (technical and usage) when you browse or interact with our website, by using cookies, server logs, database records and other similar technologies. We may also receive technical data about you if you visit other websites which use our cookies.
    publicly available sources we may collect personal data from publicly available sources.
    other sources we may receive personal data from: (a) analytics providers based outside the EU (such as Google); (b) advertising networks such as Facebook inside and outside the EU; (c) our suppliers such as payment providers, delivery services, website support and maintenance providers.
  4. How we use your personal data
    1. We will only use your personal data when the law allows us to. Most commonly, we will use your personal data:
    2. To perform a contract we are about to enter into or have entered into with you;
    3. To comply with a legal obligation; and
    4. Where it is necessary to carry out our legitimate interests and your interests and fundamental rights do not override those interests.
    5. Part 2 of Schedule 1 sets out the lawful basis we will rely on to process your personal data.
    6. We rely on consent to send email marketing communications. ShieldGPS SMS Alerts are optional operational notifications described below.
    7. We may analyse your personal data to form a view of which products or services may interest you. You will only receive marketing communications from us where you have requested information or purchased services, consented to marketing when we collected your personal data and not subsequently opted out or withdrawn your consent, or where we have another lawful basis to send them.
    8. We do not share your personal data with third parties or affiliates for their marketing or promotional purposes.
    9. You can opt out of email marketing by clicking the unsubscribe button within the marketing email. You can also withdraw your consent to marketing at any time by contacting our DPM.
    10. Even if you opt out of receiving marketing, we may still use your personal data for other purposes provided we have a lawful basis to do so.
    11. We will only use your personal data for the purpose that we originally collected it for, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.
    12. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to use your personal data in this manner.
    13. We may process your personal data (without your knowledge or consent) where this is required or permitted by law.
  5. Processors and permitted disclosures
    1. We do not sell or share personal data with third parties or affiliates for their own purposes, including marketing or promotion. Contracted service providers may process personal data solely on our behalf to provide their services. They must follow our instructions, protect the data, and may not use it for their own purposes. The categories of processors and other recipients permitted by law are listed in Part 4 of Schedule 1.
    2. Mobile information, SMS opt-in data, and messaging consent are not sold, shared, or otherwise provided to third parties or affiliates for their marketing or promotional purposes.
  6. ShieldGPS SMS Alerts
    1. ShieldGPS SMS Alerts is an optional program that sends recurring automated text message alerts about tracker events you configure in your ShieldGPS account. Message frequency varies based on your settings and tracker activity. Message and data rates may apply. Consent to receive SMS alerts is not a condition of purchase.
    2. Reply HELP for help, email support@shieldgps.co, or reply STOP to cancel. Carriers are not liable for delayed or undelivered messages. Additional program terms are available in our Terms of Service.
    3. We collect and use your mobile phone number, SMS opt-in and opt-out records, consent records, and message delivery or interaction data as necessary to provide ShieldGPS SMS Alerts, honor your preferences, offer support, prevent abuse, and comply with law.
    4. Mobile information, including your phone number and SMS opt-in data and consent, will not be sold or shared with third parties or affiliates for their marketing or promotional purposes.
  7. International transfers
    1. OG SYSTEMS, LLC is based in the United States, so providing ShieldGPS services involves processing your personal data outside the European Economic Area (EEA).
    2. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
      1. We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
      2. We use specific contracts approved by the European Commission that give personal data the same protection it has in Europe when processed by our service providers.
      3. Where required, transfers to service providers outside the EEA are protected by an adequacy decision, approved contractual safeguards, or another transfer mechanism permitted by applicable law.
    3. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data.
  8. Data security
    1. We use appropriate security measures and limit access to staff, contractors, and service providers with a business need to process personal data under our instructions and confidentiality requirements.
    2. We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
  9. Data retention
    1. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
    2. Details of retention periods for different aspects of your personal data are available in our retention policy which you can request from us. However, we are legally required to keep basic information about our customers (including contact, identity, financial and transaction data) for six years after they cease being customers, for tax purposes.
    3. We may also anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes. We can use anonymised information indefinitely without further notice to you.
  10. Your legal rights
    1. You have certain rights in certain circumstances under data protection law. These are set out in full in Part 3 of Schedule 1. If you wish to exercise any of your rights, please contact our DPM.
    2. You will not have to pay a fee to exercise any of your rights. However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee for this information or refuse to comply with your request.
    3. We may request specific information from you to help us confirm your identity when you contact us. This is a security measure to ensure that personal data is not disclosed to any person who does not have the right to receive it.
    4. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
    5. Part 1: Types of personal data
      contact data billing address, delivery address, email address and telephone number
      financial data bank account, payment card details, payment provider details (such as PayPal)
      identity data first name, last name, username or similar identifier, device IMEI number, and SIM ICCID
      marketing and communication data your preferences for receiving marketing from us and your communication preferences
      profile data your username and authentication credentials (we store a one-way password hash rather than your password), device location data, geofence location data, device preferences and alert data, purchases or orders made by you, preferences, feedback, and survey responses
      technical data internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website, error logs and stack traces, device communication data
      transaction data details about payments to and from you and other details of products and subscription services you have purchased from us
      usage data information about how you use our website, account dashboard, products, and services, including the pages and features you access and how you interact with them
    6. Part 2: Lawful basis for processing and processing activities

      The lawful bases upon which we may rely to process your personal data are:

      Consent you have given your express consent for us to process your personal data for a specific purpose
      Contract the processing is necessary for us to perform our contractual obligations with you under our contract, or because you have asked us to take specific steps before entering into a contract with you
      legal obligation the processing is necessary for us to comply with a legal or regulatory obligation
      legitimate interests the processing is necessary for our legitimate interests, for example to provide the best service to you through our website. Before relying on this basis, we consider and balance the potential impact on you and do not use it where your interests or rights outweigh ours

      Set out below are specific details of the processing activities we undertake with your personal data and the lawful basis for doing this.

      Purpose/Activity Type of data Lawful basis for processing
      to register you as a new customer identity & contact to perform our contract with you
      to process and deliver your order, manage payments, fees and charges and debt recovery identity, contact, financial, transaction and marketing & communications (i) to perform our contract with you; (ii) as necessary for our legitimate interest in recovering debts due to us.
      to manage our relationship with you, notify you about changes to our Terms or Privacy Policy, and ask you to leave a review or take a survey identity, contact, profile & marketing & communications (i) to perform our contract with you (ii) as necessary to comply with a legal obligation (iii) as necessary for our legitimate interests in keeping our records updated and analysing how customers use our products/services.
      to administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) identity, contact & technical (i) as necessary for our legitimate interests in running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise (ii) as necessary to comply with any legal obligations
      to deliver relevant website content/advertisements to you and measure or understand the effectiveness of our advertising identity, contact, profile, usage, marketing & communications & technical as necessary for our legitimate interests in studying how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy
      to use data analytics to improve our website, products/services, marketing, customer relationships and experiences technical & usage as necessary for our legitimate interests to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy
      to make suggestions and recommendations to you about goods or services that may be of interest to you, including promotional offers identity, contact, technical, usage & profile as necessary for our legitimate interests to develop our products/services and grow our business
    7. Part 3: Your legal rights

      You have the following legal rights in relation to your personal data:

      access your data you can ask for access to and a copy of your personal data and can check we are lawfully processing it
      correction you can ask us to correct any incomplete or inaccurate personal data we hold about you
      erasure

      you can ask us to delete or remove your personal data where:

      1. there is no good reason for us continuing to process it;
      2. you have successfully exercised your right to object (see below);
      3. we may have processed your information unlawfully; or
      4. we are required to erase your personal data to comply with local law.

      We may not always be able to comply with your request for specific legal reasons. We will explain those reasons to you at the time of your request.

      object

      you can object to the processing of your personal data where:

      1. we are relying on our legitimate interests as the basis for processing your personal data and you feel it impacts your fundamental rights and freedoms;
      2. we are processing your personal data for direct marketing purposes.
      3. in some cases, we may demonstrate that we have compelling legitimate grounds to process your information that override your rights and freedoms. In those circumstances, we may continue to process your personal data for those purposes.
      restrict processing

      you can ask us to suspend or restrict the processing of your personal data if:

      1. you want us to establish the accuracy of your personal data;
      2. our use of your personal data is unlawful, but you do not want us to erase it;
      3. you need us to hold your personal data (where we no longer require it) as you need it to establish, exercise or defend legal claims; or
      4. you have objected to our use of your personal data, but we need to verify whether we have overriding legitimate grounds to use it
      request a transfer you can request a transfer of personal data that you provided to us and that we process by automated means based on your consent or our contract. We will provide it to you or another organisation you identify in a structured, commonly used, machine-readable format
      withdraw your consent you can withdraw your consent at any time (where we are relying on consent to process your personal data). This does not affect the lawfulness of any processing carried out before you withdraw your consent
    8. Part 4: Processors and other recipients
      service providers acting only as our contracted processors, in the EEA and elsewhere, to provide web hosting, IT, system administration, communications, payment, delivery, and support services.
      analytics providers including Google Analytics, which helps us understand how visitors use our website
      professional advisors including lawyers, bankers, auditors and insurers based in the United Kingdom who provide consultancy, banking, legal, insurance and accounting services
      HM Revenue & Customs, regulators and other authorities based in the EEA who require reporting of processing activities in certain circumstances
    9. Part 5: Glossary
      aggregated data information such as statistical or demographic data which may be derived from personal data, but which cannot by itself identify a data subject
      controller a body that determines the purposes and means of processing personal data
      data subject an individual living person identified by personal data (which will generally be you)
      personal data information identifying a data subject from that data alone or with other data we may hold but it does not include anonymised or aggregated data
      processor a body that is responsible for processing personal data on behalf of a controller
      special categories of personal data information about race, ethnicity, political opinions, religious or philosophical beliefs, trade union membership, health, genetic or biometric data, sex life, or sexual orientation
      ICO Information Commissioner’s Office, the UK’s supervisory authority for data protection issues
  11. Changes to this policy
    1. We may update this Privacy Policy from time to time or as required by law. We will post changes on this website and update the "Last updated" date above. Changes take effect when posted unless otherwise stated.
  12. Cookies
    1. ShieldGPS sets and accesses cookies to provide website and account features, process payments and ecommerce activity, understand how the website is used, and improve our services. The first-party and third-party cookies we use are described in Schedules 2, 2A, and 3 below.
    2. Certain website features depend on strictly necessary cookies to function. These cookies are detailed in Schedule 2A. Disabling them may prevent you from signing in or using the account dashboard.
    3. You can enable or disable cookies in your web browser. Most browsers accept cookies by default, but you can change this in your browser settings. Disabling cookies may prevent you from using the full range of services available on the website.
    4. You may delete cookies at any time, although doing so may remove information that helps you access the website more quickly.
    5. The website uses the third-party cookies detailed in Schedule 3 for the purposes described there. You can block these cookies through your browser’s privacy settings, although doing so may affect related features.
    6. Keep your browser up to date and consult its help documentation if you are unsure how to adjust your privacy settings.
  13. Schedule 2: First-Party Cookies
    Name of Cookie Purpose
    _shieldgps_session Support website login and secure account dashboard access.
  14. Schedule 2A: Strictly Necessary Cookies
    Name of Cookie Purpose
    _shieldgps_session Support website login and secure account dashboard access.
  15. Schedule 3: Third-Party Cookies
    Name of Cookie Name of Provider Purpose
    _shopify_fs Shopify Ecommerce
    _gid Google Google analytics
    __stripe_mid Stripe Payments